Function at 0x140003b71
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Link many functions at runtime
Parse pe header

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x2a20
call fcn.140015890
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.1400148b0
call fcn.1400014b0
lea rax, [rbp + 0x56f]
mov qword [rbp + 0x2978], rax
nop
nop
lea rdx, [rbp + 0x56f]
lea rax, [rbp + 0x540]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x1400d05ac]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x400]
lea rdx, [rbp + 0x420]
lea r8, [0x1400d05b8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x3e0]
lea rdx, [rbp + 0x400]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x3c0]
lea rdx, [rbp + 0x3e0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x3a0]
lea rdx, [rbp + 0x3c0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x380]
lea rdx, [rbp + 0x3a0]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x360]
lea rdx, [rbp + 0x380]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x340]
lea rdx, [rbp + 0x360]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x320]
lea rdx, [rbp + 0x340]
lea r8, [0x1400d05c0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x360]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x380]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x3a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x3c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x3e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x56f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe048], rax
lea rax, [rbp + 0x7ff]
mov qword [rbp + 0x2970], rax
nop
nop
lea rdx, [rbp + 0x7ff]
lea rax, [rbp + 0x7d0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x1400d05c6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x1400d05b8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x6b0]
lea rdx, [rbp + 0x6d0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x690]
lea rdx, [rbp + 0x6b0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x670]
lea rdx, [rbp + 0x690]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x650]
lea rdx, [rbp + 0x670]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x630]
lea rdx, [rbp + 0x650]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x610]
lea rdx, [rbp + 0x630]
lea r8, [0x1400d05c0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x5f0]
lea rdx, [rbp + 0x610]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x5d0]
lea rdx, [rbp + 0x5f0]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x570]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x610]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x630]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x650]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x670]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x690]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x7ff]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe050], rax
lea rax, [rbp + 0xacf]
mov qword [rbp + 0x2968], rax
nop
nop
lea rdx, [rbp + 0xacf]
lea rax, [rbp + 0xaa0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x1400d05c8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x9a0]
lea rdx, [rbp + 0x9c0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x980]
lea rdx, [rbp + 0x9a0]
lea r8, [0x1400d05b8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x960]
lea rdx, [rbp + 0x980]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x940]
lea rdx, [rbp + 0x960]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x920]
lea rdx, [rbp + 0x940]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x900]
lea rdx, [rbp + 0x920]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x8e0]
lea rdx, [rbp + 0x900]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x1400d05c0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x800]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x900]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x920]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x940]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x960]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x980]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xacf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe058], rax
lea rax, [rbp + 0xcdf]
mov qword [rbp + 0x2960], rax
nop
nop
lea rdx, [rbp + 0xcdf]
lea rax, [rbp + 0xcb0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x1400d05ca]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xbd0]
lea rdx, [rbp + 0xbf0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xbb0]
lea rdx, [rbp + 0xbd0]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xb90]
lea rdx, [rbp + 0xbb0]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xb70]
lea rdx, [rbp + 0xb90]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xb50]
lea rdx, [rbp + 0xb70]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xb30]
lea rdx, [rbp + 0xb50]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xb10]
lea rdx, [rbp + 0xb30]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xaf0]
lea rdx, [rbp + 0xb10]
lea r8, [0x1400d05d2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x1400d05d4]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0xad0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xb30]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xb50]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xb70]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xb90]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xcdf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe060], rax
lea rax, [rbp + 0xeaf]
mov qword [rbp + 0x2958], rax
nop
nop
lea rdx, [rbp + 0xeaf]
lea rax, [rbp + 0xe80]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x1400d05d6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xdc0]
lea rdx, [rbp + 0xde0]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xda0]
lea rdx, [rbp + 0xdc0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xd80]
lea rdx, [rbp + 0xda0]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xd60]
lea rdx, [rbp + 0xd80]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xd40]
lea rdx, [rbp + 0xd60]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xd20]
lea rdx, [rbp + 0xd40]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xd00]
lea rdx, [rbp + 0xd20]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xce0]
lea rdx, [rbp + 0xd00]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0xce0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xd00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xd20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xd40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xd60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xd80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xeaf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe068], rax
lea rax, [rbp + 0x115f]
mov qword [rbp + 0x2950], rax
nop
nop
lea rdx, [rbp + 0x115f]
lea rax, [rbp + 0x1130]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x1400d05c6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1090]
lea rdx, [rbp + 0x10b0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1070]
lea rdx, [rbp + 0x1090]
lea r8, [0x1400d05da]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1050]
lea rdx, [rbp + 0x1070]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1030]
lea rdx, [rbp + 0x1050]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1010]
lea rdx, [rbp + 0x1030]
lea r8, [0x1400d05dc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xff0]
lea rdx, [rbp + 0x1010]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xfd0]
lea rdx, [rbp + 0xff0]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, [0x1400d05e0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1400d05e2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x1400d05e4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x1400d05e6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0xeb0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0xff0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1010]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1030]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1050]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1070]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x115f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe070], rax
lea rax, [rbp + 0x148f]
mov qword [rbp + 0x2948], rax
nop
nop
lea rdx, [rbp + 0x148f]
lea rax, [rbp + 0x1460]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x1400d05e8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x13e0]
lea rdx, [rbp + 0x1400]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x13c0]
lea rdx, [rbp + 0x13e0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x13a0]
lea rdx, [rbp + 0x13c0]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1380]
lea rdx, [rbp + 0x13a0]
lea r8, [0x1400d05ea]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1360]
lea rdx, [rbp + 0x1380]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1340]
lea rdx, [rbp + 0x1360]
lea r8, [0x1400d05ec]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1320]
lea rdx, [rbp + 0x1340]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1300]
lea rdx, [rbp + 0x1320]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1400d05c8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x1160]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1320]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1340]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1360]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1380]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x13a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x13c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x148f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe078], rax
lea rax, [rbp + 0x16ff]
mov qword [rbp + 0x2940], rax
nop
nop
lea rdx, [rbp + 0x16ff]
lea rax, [rbp + 0x16d0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x1400d05d6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1670]
lea rdx, [rbp + 0x1690]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1650]
lea rdx, [rbp + 0x1670]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1630]
lea rdx, [rbp + 0x1650]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1610]
lea rdx, [rbp + 0x1630]
lea r8, [0x1400d05b8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x15f0]
lea rdx, [rbp + 0x1610]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x15d0]
lea rdx, [rbp + 0x15f0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x15b0]
lea rdx, [rbp + 0x15d0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1400d05c0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x1490]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x15d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x15f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1610]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1630]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1650]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x16ff]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe080], rax
lea rax, [rbp + 0x17ef]
mov qword [rbp + 0x2938], rax
nop
nop
lea rdx, [rbp + 0x17ef]
lea rax, [rbp + 0x17c0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1780]
lea rdx, [rbp + 0x17a0]
lea r8, [0x1400d05ca]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1760]
lea rdx, [rbp + 0x1780]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1740]
lea rdx, [rbp + 0x1760]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1720]
lea rdx, [rbp + 0x1740]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1700]
lea rdx, [rbp + 0x1720]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x1700]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x1700]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1720]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1740]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1760]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x17ef]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe088], rax
lea rax, [rbp + 0x199f]
mov qword [rbp + 0x2930], rax
nop
nop
lea rdx, [rbp + 0x199f]
lea rax, [rbp + 0x1970]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x1950]
lea rdx, [rbp + 0x1970]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1930]
lea rdx, [rbp + 0x1950]
lea r8, [0x1400d05e2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1910]
lea rdx, [rbp + 0x1930]
lea r8, [0x1400d05ee]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x18f0]
lea rdx, [rbp + 0x1910]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x18d0]
lea rdx, [rbp + 0x18f0]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x18b0]
lea rdx, [rbp + 0x18d0]
lea r8, [0x1400d05c8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1890]
lea rdx, [rbp + 0x18b0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1870]
lea rdx, [rbp + 0x1890]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x17f0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1890]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x18b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x18d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x18f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1910]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x199f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe090], rax
lea rax, [rbp + 0x1baf]
mov qword [rbp + 0x2928], rax
nop
nop
lea rdx, [rbp + 0x1baf]
lea rax, [rbp + 0x1b80]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x1b60]
lea rdx, [rbp + 0x1b80]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1b40]
lea rdx, [rbp + 0x1b60]
lea r8, [0x1400d05e8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1b20]
lea rdx, [rbp + 0x1b40]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1b00]
lea rdx, [rbp + 0x1b20]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1ae0]
lea rdx, [rbp + 0x1b00]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1ac0]
lea rdx, [rbp + 0x1ae0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1aa0]
lea rdx, [rbp + 0x1ac0]
lea r8, [0x1400d05ac]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x1400d05ee]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x19a0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1ae0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1b00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1b20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1b40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1baf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe098], rax
lea rax, [rbp + 0x1e1f]
mov qword [rbp + 0x2920], rax
nop
nop
lea rdx, [rbp + 0x1e1f]
lea rax, [rbp + 0x1df0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x1dd0]
lea rdx, [rbp + 0x1df0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1db0]
lea rdx, [rbp + 0x1dd0]
lea r8, [0x1400d05ac]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1d90]
lea rdx, [rbp + 0x1db0]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1d70]
lea rdx, [rbp + 0x1d90]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1d50]
lea rdx, [rbp + 0x1d70]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400d05d6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x1400d05d8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x1bb0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1d70]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1d90]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1db0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1dd0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1df0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1e1f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe0a0], rax
lea rax, [rbp + 0x206f]
mov qword [rbp + 0x2918], rax
nop
nop
lea rdx, [rbp + 0x206f]
lea rax, [rbp + 0x2040]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x2020]
lea rdx, [rbp + 0x2040]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2000]
lea rdx, [rbp + 0x2020]
lea r8, [0x1400d05f0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1fe0]
lea rdx, [rbp + 0x2000]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1fc0]
lea rdx, [rbp + 0x1fe0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x1400d05ca]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x1400d05d4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x1e20]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x1fe0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2000]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2020]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2040]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x206f]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe0a8], rax
lea rax, [rbp + 0x22bf]
mov qword [rbp + 0x2910], rax
nop
nop
lea rdx, [rbp + 0x22bf]
lea rax, [rbp + 0x2290]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x2270]
lea rdx, [rbp + 0x2290]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2250]
lea rdx, [rbp + 0x2270]
lea r8, [0x1400d05dc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2250]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x1400d05ca]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x1400d05d4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x1400d05cc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x1400d05ce]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1400d05d0]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x2070]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2250]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2270]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2290]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x22bf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe0b0], rax
lea rax, [rbp + 0x24cf]
mov qword [rbp + 0x2908], rax
nop
nop
lea rdx, [rbp + 0x24cf]
lea rax, [rbp + 0x24a0]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x2480]
lea rdx, [rbp + 0x24a0]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2460]
lea rdx, [rbp + 0x2480]
lea r8, [0x1400d05f2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2440]
lea rdx, [rbp + 0x2460]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x1400d05d2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1400d05d4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x1400d05b2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x1400d05de]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x22c0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2480]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x24cf]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe0b8], rax
lea rax, [rbp + 0x273e]
mov qword [rbp + 0x2900], rax
nop
nop
lea rdx, [rbp + 0x273e]
lea rax, [rbp + 0x2710]
mov r8, rdx
lea rdx, [0x1400d05a8]
mov rcx, rax
call fcn.1400b75c0
lea rax, [rbp + 0x26f0]
lea rdx, [rbp + 0x2710]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x26d0]
lea rdx, [rbp + 0x26f0]
lea r8, [0x1400d05da]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x26b0]
lea rdx, [rbp + 0x26d0]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2690]
lea rdx, [rbp + 0x26b0]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2670]
lea rdx, [rbp + 0x2690]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2650]
lea rdx, [rbp + 0x2670]
lea r8, [0x1400d05b8]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2630]
lea rdx, [rbp + 0x2650]
lea r8, [0x1400d05ba]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x2630]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, str.tAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1400d05be]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1400d05b4]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1400d05ae]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1400d05c0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1400d05b6]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1400d05c2]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1400d05b0]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x1400d05bc]
mov rcx, rax
call fcn.1400c7cf0
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1400d05c4]
mov rcx, rax
call fcn.1400c7cf0
lea rdx, [rbp + 0x24d0]
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e40
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2630]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2650]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2670]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2690]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x26b0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x26d0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.1400b7e00
lea rax, [rbp + 0x273e]
mov rcx, rax
call fcn.1400a8f70
nop
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.140036950
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1400fe0c0], rax
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x273f]
mov rcx, rax
call fcn.1400036b4
mov rax, qword [rbp + 0x2740]
mov rdx, qword [rbp + 0x2748]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x2750]
mov dword [rbp - 0x30], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140025870
call fcn.140001ddf
mov qword [rbp + 0x2990], rax
cmp qword [rbp + 0x2990], 0
jne 0x14000747d
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x275f]
mov rcx, rax
call fcn.140003766
mov rax, qword [rbp + 0x2760]
mov rdx, qword [rbp + 0x2768]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x2770]
mov dword [rbp - 0x30], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140025870
mov esi, 0xffffffff
mov ebx, 0
jmp 0x14000841e
mov rax, qword [rbp + 0x2990]
mov rcx, rax
call fcn.1400020fd
test eax, eax
sete al
test al, al
je 0x1400074e7
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x277f]
mov rcx, rax
call fcn.140003818
mov rax, qword [rbp + 0x2780]
mov rdx, qword [rbp + 0x2788]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x278d]
mov qword [rbp - 0x33], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140025940
mov esi, 0xfffffffe
mov ebx, 0
jmp 0x14000841e
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x279f]
mov rcx, rax
call fcn.1400038d2
mov rax, qword [rbp + 0x27a0]
mov rdx, qword [rbp + 0x27a8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov eax, dword [rbp + 0x27af]
mov dword [rbp - 0x31], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400257a0
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27bf]
mov rcx, rax
call fcn.14000397c
mov rax, qword [rbp + 0x27c0]
mov rdx, qword [rbp + 0x27c8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
movzx eax, byte [rbp + 0x27d0]
mov byte [rbp - 0x30], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400256d0
call fcn.140001929
test eax, eax
sete al
test al, al
je 0x1400075ca
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x27df]
mov rcx, rax
call fcn.140003a16
mov rax, qword [rbp + 0x27e0]
mov rdx, qword [rbp + 0x27e8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x27ef]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140025a10
mov esi, 0xfffffffd
mov ebx, 0
jmp 0x14000841e
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x27ff]
mov rcx, rax
call fcn.140003ae0
mov rax, qword [rbp + 0x2800]
mov rdx, qword [rbp + 0x2808]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.1400255e0
lea rax, section..data
mov rcx, rax
call fcn.14000359a
mov dword [rbp + 0x150], 0x130
mov edx, 0
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov qword [rbp + 0x2988], rax
mov dword [rbp + 0x299c], 0
mov byte [rbp + 0x143], 0x51
mov byte [rbp + 0x144], 0x4d
mov byte [rbp + 0x145], 0x46
mov byte [rbp + 0x146], 0x5b
mov byte [rbp + 0x147], 0x57
mov byte [rbp + 0x148], 0x4b
mov byte [rbp + 0x149], 0x5f
mov byte [rbp + 0x14a], 0x49
mov byte [rbp + 0x14b], 0x12
mov byte [rbp + 0x14c], 0x58
mov byte [rbp + 0x14d], 0x46
mov byte [rbp + 0x14e], 0x5a
mov byte [rbp + 0x14f], 0x40
lea rdx, [rbp + 0x150]
mov rax, qword [rbp + 0x2988]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
cmp eax, 1
sete al
test al, al
je 0x14000792d
jmp 0x140007909
lea rax, [rbp + 0x143]
mov qword [rbp + 0x28f8], rax
mov rax, qword [rbp + 0x28f8]
mov qword [rbp + 0x28f0], rax
mov rax, qword [rbp + 0x28f0]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140007784
mov rax, qword [rbp + 0x28f8]
mov rdx, qword [rbp + 0x28f8]
mov qword [rbp + 0x28e8], rdx
mov qword [rbp + 0x28e0], rax
mov dword [rbp + 0x28dc], 0
jmp 0x14000777a
mov eax, dword [rbp + 0x28dc]
movsxd rdx, eax
mov rax, qword [rbp + 0x28e0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x28dc]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x28e8]
mov eax, dword [rbp + 0x28dc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x28dc], 1
cmp dword [rbp + 0x28dc], 0xc
jle 0x14000771b
nop
lea rax, [rbp + 0x143]
lea rdx, [rbp + 0x150]
lea rcx, [rdx + 0x2c]
mov rdx, rax
call sub.msvcrt.dll__stricmp
test eax, eax
sete al
test al, al
je 0x140007909
mov eax, dword [rbp + 0x158]
mov dword [rbp + 0x299c], eax
mov byte [rbp + 0x31], 0x64
mov byte [rbp + 0x32], 0x7c
mov byte [rbp + 0x33], 0x72
mov byte [rbp + 0x34], 0x17
mov byte [rbp + 0x35], 0x5e
mov byte [rbp + 0x36], 0x56
mov byte [rbp + 0x37], 0x4f
mov byte [rbp + 0x38], 0x55
mov byte [rbp + 0x39], 0x58
mov byte [rbp + 0x3a], 0x1d
mov byte [rbp + 0x3b], 0x58
mov byte [rbp + 0x3c], 0x50
mov byte [rbp + 0x3d], 0x32
mov byte [rbp + 0x3e], 0x61
mov byte [rbp + 0x3f], 0x42
lea rax, [rbp + 0x31]
mov qword [rbp + 0x28d0], rax
mov rax, qword [rbp + 0x28d0]
movzx eax, byte [rax + 0xe]
test al, al
setne al
test al, al
je 0x1400078a1
lea rax, [rbp + 0x31]
lea rdx, [rbp + 0x31]
mov qword [rbp + 0x28c8], rdx
mov qword [rbp + 0x28c0], rax
mov dword [rbp + 0x28bc], 0
jmp 0x140007897
mov eax, dword [rbp + 0x28bc]
movsxd rdx, eax
mov rax, qword [rbp + 0x28c0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x28bc]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x28c8]
mov eax, dword [rbp + 0x28bc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x28bc], 1
cmp dword [rbp + 0x28bc], 0xe
jle 0x140007838
nop
lea rax, [rbp + 0x31]
mov rdx, qword [rbp + 0x143]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x148]
mov qword [rbp - 0x3b], rdx
mov ecx, dword [rbp + 0x299c]
lea rdx, [rbp - 0x40]
mov r9d, ecx
mov r8, rdx
mov rdx, rax
lea rax, [0x1400d05f4]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x28b8], 0
jmp 0x1400078fd
mov eax, dword [rbp + 0x28b8]
cdqe
mov byte [rbp + rax + 0x31], 0
add dword [rbp + 0x28b8], 1
cmp dword [rbp + 0x28b8], 0xe
jle 0x1400078e9
nop
jmp 0x14000792d
lea rdx, [rbp + 0x150]
mov rax, qword [rbp + 0x2988]
mov rcx, rax
call sub.KERNEL32.dll_Process32Next
cmp eax, 1
sete al
test al, al
jne 0x1400076bf
mov rax, qword [rbp + 0x2988]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
cmp dword [rbp + 0x299c], 0
jne 0x140007b77
mov byte [rbp - 0x20], 0x75
mov byte [rbp - 0x1f], 0x47
mov byte [rbp - 0x1e], 0x53
mov byte [rbp - 0x1d], 0x17
mov byte [rbp - 0x1c], 0x41
mov byte [rbp - 0x1b], 0x56
mov byte [rbp - 0x1a], 0x4f
mov byte [rbp - 0x19], 0x1b
mov byte [rbp - 0x18], 0x4f
mov byte [rbp - 0x17], 0x48
mov byte [rbp - 0x16], 0x4c
mov byte [rbp - 0x15], 0x5a
mov byte [rbp - 0x14], 0x60
mov byte [rbp - 0x13], 0x35
mov byte [rbp - 0x12], 0x2a
mov byte [rbp - 0x11], 0x26
mov byte [rbp - 0x10], 0x64
mov byte [rbp - 0xf], 0x31
mov byte [rbp - 0xe], 0x27
mov byte [rbp - 0xd], 0x35
mov byte [rbp - 0xc], 0x2f
mov byte [rbp - 0xb], 0x2c
mov byte [rbp - 0xa], 0x3e
mov byte [rbp - 9], 0x6b
mov byte [rbp - 8], 0x3c
mov byte [rbp - 7], 0x3f
mov byte [rbp - 6], 0x21
mov byte [rbp - 5], 0x2c
mov byte [rbp - 4], 0x35
mov byte [rbp - 3], 0x22
mov byte [rbp - 2], 0x21
mov byte [rbp - 1], 0x73
mov byte [rbp], 0x3d
mov byte [rbp + 1], 0x26
mov byte [rbp + 2], 0x76
mov byte [rbp + 3], 0x25
mov byte [rbp + 4], 0x2d
mov byte [rbp + 5], 0x37
mov byte [rbp + 6], 0x34
mov byte [rbp + 7], 0x32
mov byte [rbp + 8], 0x32
mov byte [rbp + 9], 0x3a
mov byte [rbp + 0xa], 0x61
mov byte [rbp + 0xb], 0x55
mov byte [rbp + 0xc], 0x26
mov byte [rbp + 0xd], 0
mov byte [rbp + 0xe], 0xb
mov byte [rbp + 0xf], 0xf
mov byte [rbp + 0x10], 1
mov byte [rbp + 0x11], 1
mov byte [rbp + 0x12], 0x14
mov byte [rbp + 0x13], 0x41
mov byte [rbp + 0x14], 0x59
mov byte [rbp + 0x15], 0x17
mov byte [rbp + 0x16], 0x5e
mov byte [rbp + 0x17], 0x50
mov byte [rbp + 0x18], 0x54
mov byte [rbp + 0x19], 0x5f
mov byte [rbp + 0x1a], 0x1c
mov byte [rbp + 0x1b], 0x6d
mov byte [rbp + 0x1c], 0x77
mov byte [rbp + 0x1d], 0x7b
mov byte [rbp + 0x1e], 0x60
mov byte [rbp + 0x1f], 0x27
mov byte [rbp + 0x20], 0x2d
mov byte [rbp + 0x21], 0x31
mov byte [rbp + 0x22], 0x64
mov byte [rbp + 0x23], 0x45
lea rax, [rbp - 0x20]
mov qword [rbp + 0x28b0], rax
mov rax, qword [rbp + 0x28b0]
movzx eax, byte [rax + 0x43]
test al, al
setne al
test al, al
je 0x140007b0b
lea rax, [rbp - 0x20]
lea rdx, [rbp - 0x20]
mov qword [rbp + 0x28a8], rdx
mov qword [rbp + 0x28a0], rax
mov dword [rbp + 0x289c], 0
jmp 0x140007b01
mov eax, dword [rbp + 0x289c]
movsxd rdx, eax
mov rax, qword [rbp + 0x28a0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x289c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x28a8]
mov eax, dword [rbp + 0x289c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x289c], 1
cmp dword [rbp + 0x289c], 0x43
jle 0x140007aa2
nop
lea rax, [rbp - 0x20]
mov rdx, qword [rbp + 0x143]
mov qword [rbp - 0x40], rdx
mov rdx, qword [rbp + 0x148]
mov qword [rbp - 0x3b], rdx
lea rdx, [rbp - 0x40]
mov r8, rdx
mov rdx, rax
lea rax, str._s_s
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2898], 0
jmp 0x140007b5e
mov eax, dword [rbp + 0x2898]
cdqe
mov byte [rbp + rax - 0x20], 0
add dword [rbp + 0x2898], 1
cmp dword [rbp + 0x2898], 0x43
jle 0x140007b4a
nop
mov esi, 1
mov ebx, 0
jmp 0x14000841e
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x128], 0
mov eax, dword [rbp + 0x158]
mov ecx, eax
call fcn.1400014a4
mov qword [rbp + 0x120], rax
mov dword [rbp + 0xf0], 0x30
mov qword [rbp + 0xf8], 0
mov dword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x118], 0
mov r10, qword [0x1400fe090]
lea rcx, [rbp + 0x120]
lea rdx, [rbp + 0xf0]
lea rax, [rbp + 0x138]
mov r9, rcx
mov r8, rdx
mov edx, 0x478
mov rcx, rax
call r10
mov qword [rbp + 0xe8], 0
mov dword [rbp + 0xe4], 0
mov rax, qword [0x1400cc118]
mov qword [rbp + 0xd8], rax
mov r10, qword [0x1400fe048]
mov rax, qword [rbp + 0x138]
lea rcx, [rbp + 0xd8]
lea rdx, [rbp + 0xe8]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2984], eax
mov byte [rbp + 0xb0], 0x45
mov byte [rbp + 0xb1], 0x43
mov byte [rbp + 0xb2], 0x41
mov byte [rbp + 0xb3], 0x41
mov byte [rbp + 0xb4], 0x73
mov byte [rbp + 0xb5], 0x43
mov byte [rbp + 0xb6], 0x60
mov byte [rbp + 0xb7], 0x51
mov byte [rbp + 0xb8], 0x70
mov byte [rbp + 0xb9], 0x67
mov byte [rbp + 0xba], 0x48
mov byte [rbp + 0xbb], 0x79
mov byte [rbp + 0xbc], 0x2c
mov byte [rbp + 0xbd], 6
mov byte [rbp + 0xbe], 4
mov byte [rbp + 0xbf], 0x10
mov byte [rbp + 0xc0], 0x23
mov byte [rbp + 0xc1], 0x22
mov byte [rbp + 0xc2], 0x2b
mov byte [rbp + 0xc3], 0x67
mov byte [rbp + 0xc4], 0x3a
mov byte [rbp + 0xc5], 0x2c
mov byte [rbp + 0xc6], 0x39
mov byte [rbp + 0xc7], 0x6b
mov byte [rbp + 0xc8], 0x64
mov byte [rbp + 0xc9], 0x2f
mov byte [rbp + 0xca], 0x2f
mov byte [rbp + 0xcb], 0x3c
mov byte [rbp + 0xcc], 0x35
mov byte [rbp + 0xcd], 0xe
mov byte [rbp + 0xce], 0x33
mov byte [rbp + 0xcf], 0x37
mov byte [rbp + 0xd0], 0x30
mov byte [rbp + 0xd1], 0x27
mov byte [rbp + 0xd2], 0x7f
mov byte [rbp + 0xd3], 0x6d
mov byte [rbp + 0xd4], 0x78
mov byte [rbp + 0xd5], 0x69
mov byte [rbp + 0xd6], 0x22
mov byte [rbp + 0xd7], 0x5b
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x2890], rax
mov rax, qword [rbp + 0x2890]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140007e41
lea rax, [rbp + 0xb0]
lea rdx, [rbp + 0xb0]
mov qword [rbp + 0x2888], rdx
mov qword [rbp + 0x2880], rax
mov dword [rbp + 0x287c], 0
jmp 0x140007e37
mov eax, dword [rbp + 0x287c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2880]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x287c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2888]
mov eax, dword [rbp + 0x287c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x287c], 1
cmp dword [rbp + 0x287c], 0x27
jle 0x140007dd8
nop
lea rax, [rbp + 0xb0]
mov edx, dword [rbp + 0x2984]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400d01e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2858], 0
jmp 0x140007e86
mov eax, dword [rbp + 0x2858]
cdqe
mov byte [rbp + rax + 0xb0], 0
add dword [rbp + 0x2858], 1
cmp dword [rbp + 0x2858], 0x27
jle 0x140007e6f
nop
mov byte [rbp + 0xa2], 0x56
mov byte [rbp + 0xa3], 0x54
mov byte [rbp + 0xa4], 0x45
mov byte [rbp + 0xa5], 0x52
mov byte [rbp + 0xa6], 0x67
mov byte [rbp + 0xa7], 0x58
mov byte [rbp + 0xa8], 0x5e
mov byte [rbp + 0xa9], 0x5f
mov byte [rbp + 0xaa], 0x4e
mov byte [rbp + 0xab], 7
mov byte [rbp + 0xac], 0x1e
mov byte [rbp + 0xad], 0x1f
mov byte [rbp + 0xae], 0x60
mov byte [rbp + 0xaf], 0x41
mov r8, qword [rbp + 0xe8]
lea rax, [rbp + 0xa2]
mov qword [rbp + 0x2870], rax
mov rax, qword [rbp + 0x2870]
movzx eax, byte [rax + 0xd]
test al, al
setne al
test al, al
je 0x140007fb0
lea rax, [rbp + 0xa2]
lea rdx, [rbp + 0xa2]
mov qword [rbp + 0x2868], rdx
mov qword [rbp + 0x2860], rax
mov dword [rbp + 0x285c], 0
jmp 0x140007fa6
mov eax, dword [rbp + 0x285c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2860]
add rax, rdx
movzx r9d, byte [rax]
mov eax, dword [rbp + 0x285c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r9d
xor ecx, eax
mov rdx, qword [rbp + 0x2868]
mov eax, dword [rbp + 0x285c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x285c], 1
cmp dword [rbp + 0x285c], 0xd
jle 0x140007f47
nop
lea rax, [rbp + 0xa2]
mov rdx, rax
lea rax, str._s_p_n
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2854], 0
jmp 0x140007fec
mov eax, dword [rbp + 0x2854]
cdqe
mov byte [rbp + rax + 0xa2], 0
add dword [rbp + 0x2854], 1
cmp dword [rbp + 0x2854], 0xd
jle 0x140007fd5
nop
mov r10, qword [0x1400fe050]
mov r9, qword [rbp + 0xd8]
mov r8, qword [0x1400fe030]
mov rdx, qword [rbp + 0xe8]
mov rax, qword [rbp + 0x138]
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2984], eax
mov byte [rbp + 0x70], 0x50
mov byte [rbp + 0x71], 0x58
mov byte [rbp + 0x72], 0x7f
mov byte [rbp + 0x73], 0x46
mov byte [rbp + 0x74], 0x7f
mov byte [rbp + 0x75], 0x75
mov byte [rbp + 0x76], 0x48
mov byte [rbp + 0x77], 0x7d
mov byte [rbp + 0x78], 0x6c
mov byte [rbp + 0x79], 0x6a
mov byte [rbp + 0x7a], 0x52
mov byte [rbp + 0x7b], 0x70
mov byte [rbp + 0x7c], 0xb
mov byte [rbp + 0x7d], 0x31
mov byte [rbp + 0x7e], 0x32
mov byte [rbp + 0x7f], 0x2f
mov byte [rbp + 0x80], 0x29
mov byte [rbp + 0x81], 0x2c
mov byte [rbp + 0x82], 0x2a
mov byte [rbp + 0x83], 0x67
mov byte [rbp + 0x84], 0x3a
mov byte [rbp + 0x85], 0x2c
mov byte [rbp + 0x86], 0x39
mov byte [rbp + 0x87], 0x6b
mov byte [rbp + 0x88], 0x64
mov byte [rbp + 0x89], 0x2f
mov byte [rbp + 0x8a], 0x2f
mov byte [rbp + 0x8b], 0x3c
mov byte [rbp + 0x8c], 0x35
mov byte [rbp + 0x8d], 0xe
mov byte [rbp + 0x8e], 0x33
mov byte [rbp + 0x8f], 0x37
mov byte [rbp + 0x90], 0x30
mov byte [rbp + 0x91], 0x27
mov byte [rbp + 0x92], 0x7f
mov byte [rbp + 0x93], 0x6d
mov byte [rbp + 0x94], 0x78
mov byte [rbp + 0x95], 0x69
mov byte [rbp + 0x96], 0x22
mov byte [rbp + 0x97], 0x5b
lea rax, [rbp + 0x70]
mov qword [rbp + 0x2848], rax
mov rax, qword [rbp + 0x2848]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x1400081c7
lea rax, [rbp + 0x70]
lea rdx, [rbp + 0x70]
mov qword [rbp + 0x2840], rdx
mov qword [rbp + 0x2838], rax
mov dword [rbp + 0x2834], 0
jmp 0x1400081bd
mov eax, dword [rbp + 0x2834]
movsxd rdx, eax
mov rax, qword [rbp + 0x2838]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2834]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2840]
mov eax, dword [rbp + 0x2834]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2834], 1
cmp dword [rbp + 0x2834], 0x27
jle 0x14000815e
nop
lea rax, [rbp + 0x70]
mov edx, dword [rbp + 0x2984]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400d01e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2830], 0
jmp 0x140008206
mov eax, dword [rbp + 0x2830]
cdqe
mov byte [rbp + rax + 0x70], 0
add dword [rbp + 0x2830], 1
cmp dword [rbp + 0x2830], 0x27
jle 0x1400081f2
nop
mov r10, qword [0x1400fe058]
mov rax, qword [rbp + 0x138]
lea r8, [rbp + 0xd8]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xe4]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
mov rcx, rax
call r10
mov dword [rbp + 0x2984], eax
mov byte [rbp + 0x40], 0x63
mov byte [rbp + 0x41], 0x5c
mov byte [rbp + 0x42], 0x6e
mov byte [rbp + 0x43], 0x62
mov byte [rbp + 0x44], 0x4a
mov byte [rbp + 0x45], 0x5d
mov byte [rbp + 0x46], 0x59
mov byte [rbp + 0x47], 0x75
mov byte [rbp + 0x48], 0x54
mov byte [rbp + 0x49], 0x6b
mov byte [rbp + 0x4a], 0x6f
mov byte [rbp + 0x4b], 0x51
mov byte [rbp + 0x4c], 0x3a
mov byte [rbp + 0x4d], 7
mov byte [rbp + 0x4e], 0x17
mov byte [rbp + 0x4f], 0x2d
mov byte [rbp + 0x50], 0xe
mov byte [rbp + 0x51], 2
mov byte [rbp + 0x52], 0xb
mov byte [rbp + 0x53], 0x67
mov byte [rbp + 0x54], 0x3a
mov byte [rbp + 0x55], 0x2c
mov byte [rbp + 0x56], 0x39
mov byte [rbp + 0x57], 0x6b
mov byte [rbp + 0x58], 0x64
mov byte [rbp + 0x59], 0x2f
mov byte [rbp + 0x5a], 0x2f
mov byte [rbp + 0x5b], 0x3c
mov byte [rbp + 0x5c], 0x35
mov byte [rbp + 0x5d], 0xe
mov byte [rbp + 0x5e], 0x33
mov byte [rbp + 0x5f], 0x37
mov byte [rbp + 0x60], 0x30
mov byte [rbp + 0x61], 0x27
mov byte [rbp + 0x62], 0x7f
mov byte [rbp + 0x63], 0x6d
mov byte [rbp + 0x64], 0x78
mov byte [rbp + 0x65], 0x69
mov byte [rbp + 0x66], 0x22
mov byte [rbp + 0x67], 0x5b
lea rax, [rbp + 0x40]
mov qword [rbp + 0x2828], rax
mov rax, qword [rbp + 0x2828]
movzx eax, byte [rax + 0x27]
test al, al
setne al
test al, al
je 0x140008398
lea rax, [rbp + 0x40]
lea rdx, [rbp + 0x40]
mov qword [rbp + 0x2820], rdx
mov qword [rbp + 0x2818], rax
mov dword [rbp + 0x2814], 0
jmp 0x14000838e
mov eax, dword [rbp + 0x2814]
movsxd rdx, eax
mov rax, qword [rbp + 0x2818]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2814]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2820]
mov eax, dword [rbp + 0x2814]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2814], 1
cmp dword [rbp + 0x2814], 0x27
jle 0x14000832f
nop
lea rax, [rbp + 0x40]
mov edx, dword [rbp + 0x2984]
mov r8d, edx
mov rdx, rax
lea rax, [0x1400d01e1]
mov rcx, rax
call fcn.140001450
mov dword [rbp + 0x2810], 0
jmp 0x1400083d7
mov eax, dword [rbp + 0x2810]
cdqe
mov byte [rbp + rax + 0x40], 0
add dword [rbp + 0x2810], 1
cmp dword [rbp + 0x2810], 0x27
jle 0x1400083c3
nop
mov rax, qword [rbp + 0x138]
mov rcx, rax
call fcn.1400032d9
mov rdx, qword [rbp + 0xe8]
mov rax, qword [rbp + 0x138]
mov rcx, rax
call fcn.140002ddf
mov rdx, qword [0x1400fe088]
mov rax, qword [rbp + 0x138]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b7e00
cmp ebx, 1
jne 0x140008437
mov esi, 0
mov eax, esi
jmp 0x140009af6
add rsp, 0x2a20
pop rbx
pop rsi
pop rbp
ret