Function at 0x1400045f9
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x2a40
call fcn.140014d80
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140013dd0
call fcn.1400015a0
mov dword [rbp + 0x8c], 0
mov qword [rbp + 0x80], 0
mov rax, qword [0x14002f3c8]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x35f]
mov qword [rbp + 0x2990], rax
nop
nop
lea rdx, [rbp + 0x35f]
lea rax, [rbp + 0x330]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x310]
lea rdx, [rbp + 0x330]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2f0]
lea rdx, [rbp + 0x310]
lea r8, [0x1400305f5]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2d0]
lea rdx, [rbp + 0x2f0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2b0]
lea rdx, [rbp + 0x2d0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x270]
lea rdx, [rbp + 0x290]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x250]
lea rdx, [rbp + 0x270]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x230]
lea rdx, [rbp + 0x250]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x210]
lea rdx, [rbp + 0x230]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f0]
lea rdx, [rbp + 0x210]
lea r8, [0x140030601]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d0]
lea rdx, [rbp + 0x1f0]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b0]
lea rdx, [rbp + 0x1d0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x130]
lea rdx, [rbp + 0x150]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x130]
lea r8, [0x140030609]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xf0]
lea rdx, [rbp + 0x110]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd0]
lea rdx, [rbp + 0xf0]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb0]
lea rdx, [rbp + 0xd0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x90]
lea rdx, [rbp + 0xb0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x50]
lea rdx, [rbp + 0x90]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x90]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x110]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x130]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x170]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x190]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x210]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x230]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x250]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x270]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x290]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x310]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x330]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x35f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0b8], rax
lea rax, [rbp + 0x5ef]
mov qword [rbp + 0x2988], rax
nop
nop
lea rdx, [rbp + 0x5ef]
lea rax, [rbp + 0x5c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x5a0]
lea rdx, [rbp + 0x5c0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x580]
lea rdx, [rbp + 0x5a0]
lea r8, [0x14003060f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x580]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x540]
lea rdx, [rbp + 0x560]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x520]
lea rdx, [rbp + 0x540]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x500]
lea rdx, [rbp + 0x520]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x4e0]
lea rdx, [rbp + 0x500]
lea r8, [0x140030601]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x4c0]
lea rdx, [rbp + 0x4e0]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x4a0]
lea rdx, [rbp + 0x4c0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x480]
lea rdx, [rbp + 0x4a0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x460]
lea rdx, [rbp + 0x480]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x440]
lea rdx, [rbp + 0x460]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x420]
lea rdx, [rbp + 0x440]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x400]
lea rdx, [rbp + 0x420]
lea r8, [0x140030609]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x3e0]
lea rdx, [rbp + 0x400]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x3c0]
lea rdx, [rbp + 0x3e0]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x3a0]
lea rdx, [rbp + 0x3c0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x380]
lea rdx, [rbp + 0x3a0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x360]
lea rdx, [rbp + 0x380]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x360]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x360]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x380]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x3a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x3c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x3e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x400]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x420]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x440]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x460]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x480]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x500]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x520]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x540]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x580]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x5a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x5c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x5ef]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0c0], rax
lea rax, [rbp + 0x8bf]
mov qword [rbp + 0x2980], rax
nop
nop
lea rdx, [rbp + 0x8bf]
lea rax, [rbp + 0x890]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x870]
lea rdx, [rbp + 0x890]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x850]
lea rdx, [rbp + 0x870]
lea r8, [0x140030611]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x830]
lea rdx, [rbp + 0x850]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x810]
lea rdx, [rbp + 0x830]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x7f0]
lea rdx, [rbp + 0x810]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x7d0]
lea rdx, [rbp + 0x7f0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x7b0]
lea rdx, [rbp + 0x7d0]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x790]
lea rdx, [rbp + 0x7b0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x770]
lea rdx, [rbp + 0x790]
lea r8, [0x140030601]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x750]
lea rdx, [rbp + 0x770]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x730]
lea rdx, [rbp + 0x750]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x710]
lea rdx, [rbp + 0x730]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x6f0]
lea rdx, [rbp + 0x710]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x6d0]
lea rdx, [rbp + 0x6f0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x6b0]
lea rdx, [rbp + 0x6d0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x690]
lea rdx, [rbp + 0x6b0]
lea r8, [0x140030609]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x670]
lea rdx, [rbp + 0x690]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x650]
lea rdx, [rbp + 0x670]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x630]
lea rdx, [rbp + 0x650]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x610]
lea rdx, [rbp + 0x630]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x5f0]
lea rdx, [rbp + 0x610]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x5f0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x610]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x630]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x650]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x670]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x690]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x6b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x6d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x6f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x710]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x730]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x750]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x770]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x790]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x7b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x7d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x7f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x810]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x830]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x850]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x870]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x890]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x8bf]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0c8], rax
lea rax, [rbp + 0xacf]
mov qword [rbp + 0x2978], rax
nop
nop
lea rdx, [rbp + 0xacf]
lea rax, [rbp + 0xaa0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0xa80]
lea rdx, [rbp + 0xaa0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xa60]
lea rdx, [rbp + 0xa80]
lea r8, [0x140030613]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xa40]
lea rdx, [rbp + 0xa60]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xa20]
lea rdx, [rbp + 0xa40]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xa00]
lea rdx, [rbp + 0xa20]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x9e0]
lea rdx, [rbp + 0xa00]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x9c0]
lea rdx, [rbp + 0x9e0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x9a0]
lea rdx, [rbp + 0x9c0]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x980]
lea rdx, [rbp + 0x9a0]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x960]
lea rdx, [rbp + 0x980]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x940]
lea rdx, [rbp + 0x960]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x920]
lea rdx, [rbp + 0x940]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x900]
lea rdx, [rbp + 0x920]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x8e0]
lea rdx, [rbp + 0x900]
lea r8, [0x14003061b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x14003061d]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x8c0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x900]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x920]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x940]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x960]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x980]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x9a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x9c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x9e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xa00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xa20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xa40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xa60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xa80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xaa0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xacf]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0d0], rax
lea rax, [rbp + 0xc9f]
mov qword [rbp + 0x2970], rax
nop
nop
lea rdx, [rbp + 0xc9f]
lea rax, [rbp + 0xc70]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0xc50]
lea rdx, [rbp + 0xc70]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xc30]
lea rdx, [rbp + 0xc50]
lea r8, [0x14003061f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xc10]
lea rdx, [rbp + 0xc30]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xbf0]
lea rdx, [rbp + 0xc10]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xbd0]
lea rdx, [rbp + 0xbf0]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xbb0]
lea rdx, [rbp + 0xbd0]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb90]
lea rdx, [rbp + 0xbb0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb70]
lea rdx, [rbp + 0xb90]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb50]
lea rdx, [rbp + 0xb70]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb30]
lea rdx, [rbp + 0xb50]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xb10]
lea rdx, [rbp + 0xb30]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xaf0]
lea rdx, [rbp + 0xb10]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0xad0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb30]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb50]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb70]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xb90]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xbb0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xbd0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xbf0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xc10]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xc30]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xc50]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xc70]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xc9f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0d8], rax
lea rax, [rbp + 0xf4f]
mov qword [rbp + 0x2968], rax
nop
nop
lea rdx, [rbp + 0xf4f]
lea rax, [rbp + 0xf20]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0xf00]
lea rdx, [rbp + 0xf20]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xee0]
lea rdx, [rbp + 0xf00]
lea r8, [0x14003060f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xec0]
lea rdx, [rbp + 0xee0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xea0]
lea rdx, [rbp + 0xec0]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xe80]
lea rdx, [rbp + 0xea0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xe60]
lea rdx, [rbp + 0xe80]
lea r8, [0x140030623]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xe40]
lea rdx, [rbp + 0xe60]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xe20]
lea rdx, [rbp + 0xe40]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xe00]
lea rdx, [rbp + 0xe20]
lea r8, [0x140030625]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xde0]
lea rdx, [rbp + 0xe00]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xdc0]
lea rdx, [rbp + 0xde0]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xda0]
lea rdx, [rbp + 0xdc0]
lea r8, [0x140030629]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd80]
lea rdx, [rbp + 0xda0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd60]
lea rdx, [rbp + 0xd80]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd40]
lea rdx, [rbp + 0xd60]
lea r8, [0x14003062b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd20]
lea rdx, [rbp + 0xd40]
lea r8, [0x14003062d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xd00]
lea rdx, [rbp + 0xd20]
lea r8, [0x14003062f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xce0]
lea rdx, [rbp + 0xd00]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0xca0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xd80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xda0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xdc0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xde0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xe00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xe20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xe40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xe60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xe80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xea0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xec0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xee0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf4f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0e0], rax
lea rax, [rbp + 0x127f]
mov qword [rbp + 0x2960], rax
nop
nop
lea rdx, [rbp + 0x127f]
lea rax, [rbp + 0x1250]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1230]
lea rdx, [rbp + 0x1250]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1210]
lea rdx, [rbp + 0x1230]
lea r8, [0x140030631]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x11f0]
lea rdx, [rbp + 0x1210]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x11d0]
lea rdx, [rbp + 0x11f0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x11b0]
lea rdx, [rbp + 0x11d0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1190]
lea rdx, [rbp + 0x11b0]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1170]
lea rdx, [rbp + 0x1190]
lea r8, [0x140030633]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1150]
lea rdx, [rbp + 0x1170]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1130]
lea rdx, [rbp + 0x1150]
lea r8, [0x140030635]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1110]
lea rdx, [rbp + 0x1130]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x10f0]
lea rdx, [rbp + 0x1110]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x10d0]
lea rdx, [rbp + 0x10f0]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x10b0]
lea rdx, [rbp + 0x10d0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1090]
lea rdx, [rbp + 0x10b0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1070]
lea rdx, [rbp + 0x1090]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1050]
lea rdx, [rbp + 0x1070]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1030]
lea rdx, [rbp + 0x1050]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1010]
lea rdx, [rbp + 0x1030]
lea r8, [0x140030611]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xff0]
lea rdx, [rbp + 0x1010]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xfd0]
lea rdx, [rbp + 0xff0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0xf50]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0xff0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1010]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1030]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1050]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1070]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1090]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x10b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x10d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x10f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1110]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1130]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1150]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1170]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1190]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x11b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x11d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x11f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1210]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1230]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1250]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x127f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0e8], rax
lea rax, [rbp + 0x14ef]
mov qword [rbp + 0x2958], rax
nop
nop
lea rdx, [rbp + 0x14ef]
lea rax, [rbp + 0x14c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x14a0]
lea rdx, [rbp + 0x14c0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1480]
lea rdx, [rbp + 0x14a0]
lea r8, [0x14003061f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1460]
lea rdx, [rbp + 0x1480]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1440]
lea rdx, [rbp + 0x1460]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1420]
lea rdx, [rbp + 0x1440]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1400]
lea rdx, [rbp + 0x1420]
lea r8, [0x140030601]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x13e0]
lea rdx, [rbp + 0x1400]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x13c0]
lea rdx, [rbp + 0x13e0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x13a0]
lea rdx, [rbp + 0x13c0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1380]
lea rdx, [rbp + 0x13a0]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1360]
lea rdx, [rbp + 0x1380]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1340]
lea rdx, [rbp + 0x1360]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1320]
lea rdx, [rbp + 0x1340]
lea r8, [0x140030609]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1300]
lea rdx, [rbp + 0x1320]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x1280]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1320]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1340]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1360]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1380]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x13a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x13c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x13e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1400]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1420]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1440]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1460]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1480]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x14a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x14c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x14ef]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0f0], rax
lea rax, [rbp + 0x15df]
mov qword [rbp + 0x2950], rax
nop
nop
lea rdx, [rbp + 0x15df]
lea rax, [rbp + 0x15b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x140030613]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x14f0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x15df]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d0f8], rax
lea rax, [rbp + 0x178f]
mov qword [rbp + 0x2948], rax
nop
nop
lea rdx, [rbp + 0x178f]
lea rax, [rbp + 0x1760]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1740]
lea rdx, [rbp + 0x1760]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1720]
lea rdx, [rbp + 0x1740]
lea r8, [0x14003062b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1700]
lea rdx, [rbp + 0x1720]
lea r8, [0x140030637]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x16e0]
lea rdx, [rbp + 0x1700]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x16c0]
lea rdx, [rbp + 0x16e0]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x16a0]
lea rdx, [rbp + 0x16c0]
lea r8, [0x140030611]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1600]
lea rdx, [rbp + 0x1620]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x15e0]
lea rdx, [rbp + 0x1600]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x15e0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x15e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x16c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x16e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1700]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1720]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1740]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1760]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x178f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d100], rax
lea rax, [rbp + 0x199f]
mov qword [rbp + 0x2940], rax
nop
nop
lea rdx, [rbp + 0x199f]
lea rax, [rbp + 0x1970]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1950]
lea rdx, [rbp + 0x1970]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1930]
lea rdx, [rbp + 0x1950]
lea r8, [0x140030631]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1910]
lea rdx, [rbp + 0x1930]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x18f0]
lea rdx, [rbp + 0x1910]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x18d0]
lea rdx, [rbp + 0x18f0]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x18b0]
lea rdx, [rbp + 0x18d0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1890]
lea rdx, [rbp + 0x18b0]
lea r8, [0x1400305f5]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1870]
lea rdx, [rbp + 0x1890]
lea r8, [0x140030637]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x1790]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1890]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x18b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x18d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x18f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1910]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1930]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1950]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1970]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x199f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d108], rax
lea rax, [rbp + 0x1c0f]
mov qword [rbp + 0x2938], rax
nop
nop
lea rdx, [rbp + 0x1c0f]
lea rax, [rbp + 0x1be0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1bc0]
lea rdx, [rbp + 0x1be0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ba0]
lea rdx, [rbp + 0x1bc0]
lea r8, [0x1400305f5]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b80]
lea rdx, [rbp + 0x1ba0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b60]
lea rdx, [rbp + 0x1b80]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b40]
lea rdx, [rbp + 0x1b60]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b20]
lea rdx, [rbp + 0x1b40]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1b00]
lea rdx, [rbp + 0x1b20]
lea r8, [0x14003061f]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ae0]
lea rdx, [rbp + 0x1b00]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ac0]
lea rdx, [rbp + 0x1ae0]
lea r8, [0x140030621]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1aa0]
lea rdx, [rbp + 0x1ac0]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x19a0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ae0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1b80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1bc0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1be0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1c0f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d110], rax
lea rax, [rbp + 0x1e5f]
mov qword [rbp + 0x2930], rax
nop
nop
lea rdx, [rbp + 0x1e5f]
lea rax, [rbp + 0x1e30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x1e10]
lea rdx, [rbp + 0x1e30]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1df0]
lea rdx, [rbp + 0x1e10]
lea r8, [0x140030639]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1dd0]
lea rdx, [rbp + 0x1df0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1db0]
lea rdx, [rbp + 0x1dd0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d90]
lea rdx, [rbp + 0x1db0]
lea r8, [0x140030613]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d70]
lea rdx, [rbp + 0x1d90]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d50]
lea rdx, [rbp + 0x1d70]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x14003061d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x1c10]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d70]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1d90]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1db0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1dd0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1df0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1e10]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1e30]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1e5f]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d118], rax
lea rax, [rbp + 0x20af]
mov qword [rbp + 0x2928], rax
nop
nop
lea rdx, [rbp + 0x20af]
lea rax, [rbp + 0x2080]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x2060]
lea rdx, [rbp + 0x2080]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2040]
lea rdx, [rbp + 0x2060]
lea r8, [0x140030625]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2020]
lea rdx, [rbp + 0x2040]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2000]
lea rdx, [rbp + 0x2020]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1fe0]
lea rdx, [rbp + 0x2000]
lea r8, [0x140030613]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1fc0]
lea rdx, [rbp + 0x1fe0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x14003061d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x140030615]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x140030617]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x140030619]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x1e60]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x1fe0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2000]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2020]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2040]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2060]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2080]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x20af]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d120], rax
lea rax, [rbp + 0x22bf]
mov qword [rbp + 0x2920], rax
nop
nop
lea rdx, [rbp + 0x22bf]
lea rax, [rbp + 0x2290]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x2270]
lea rdx, [rbp + 0x2290]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2250]
lea rdx, [rbp + 0x2270]
lea r8, [0x14003063b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2250]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x14003061b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x14003061d]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x1400305fb]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x140030627]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x20b0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2250]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2270]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2290]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x22bf]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d128], rax
lea rax, [rbp + 0x252e]
mov qword [rbp + 0x2918], rax
nop
nop
lea rdx, [rbp + 0x252e]
lea rax, [rbp + 0x2500]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD
mov rcx, rax
call fcn.14002c420
lea rax, [rbp + 0x24e0]
lea rdx, [rbp + 0x2500]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x24c0]
lea rdx, [rbp + 0x24e0]
lea r8, [0x140030623]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x24a0]
lea rdx, [rbp + 0x24c0]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2480]
lea rdx, [rbp + 0x24a0]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2460]
lea rdx, [rbp + 0x2480]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2440]
lea rdx, [rbp + 0x2460]
lea r8, [0x140030601]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x140030603]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1400305f3]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x140030607]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1400305fd]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1400305f7]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x140030609]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1400305ff]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x14003060b]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1400305f9]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x140030605]
mov rcx, rax
call fcn.14002d310
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x14003060d]
mov rcx, rax
call fcn.14002d310
lea rdx, [rbp + 0x22c0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc60
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2480]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x24a0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x24c0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x24e0]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x2500]
mov rcx, rax
call fcn.14002cc20
lea rax, [rbp + 0x252e]
mov rcx, rax
call fcn.140029360
nop
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140024880
mov rbx, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rbx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x14003d130], rax
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x252f]
mov rcx, rax
call fcn.140002c44
mov rax, qword [rbp + 0x2530]
mov rdx, qword [rbp + 0x2538]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov eax, dword [rbp + 0x2540]
mov dword [rbp + 0x20], eax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140020900
call fcn.140001ecf
mov qword [rbp + 0x29b8], rax
cmp qword [rbp + 0x29b8], 0
jne 0x140007ec5
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x254f]
mov rcx, rax
call fcn.140002cf6
mov rax, qword [rbp + 0x2550]
mov rdx, qword [rbp + 0x2558]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov eax, dword [rbp + 0x2560]
mov dword [rbp + 0x20], eax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140020900
mov esi, 0xffffffff
mov ebx, 0
jmp 0x140008974
mov rax, qword [rbp + 0x29b8]
mov rcx, rax
call fcn.1400021ed
test eax, eax
sete al
test al, al
je 0x140007f2f
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x256f]
mov rcx, rax
call fcn.140002da8
mov rax, qword [rbp + 0x2570]
mov rdx, qword [rbp + 0x2578]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x257d]
mov qword [rbp + 0x1d], rax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.1400209d0
mov esi, 0xfffffffe
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x258f]
mov rcx, rax
call fcn.140002e62
mov rax, qword [rbp + 0x2590]
mov rdx, qword [rbp + 0x2598]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov eax, dword [rbp + 0x259f]
mov dword [rbp + 0x1f], eax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140020830
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25af]
mov rcx, rax
call fcn.140002f0c
mov rax, qword [rbp + 0x25b0]
mov rdx, qword [rbp + 0x25b8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
movzx eax, byte [rbp + 0x25c0]
mov byte [rbp + 0x20], al
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140020760
call fcn.140001a19
test eax, eax
sete al
test al, al
je 0x140008012
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25cf]
mov rcx, rax
call fcn.140002fa6
mov rax, qword [rbp + 0x25d0]
mov rdx, qword [rbp + 0x25d8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x25df]
mov qword [rbp + 0x1f], rax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.140020aa0
mov esi, 0xfffffffd
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x25ef]
mov rcx, rax
call fcn.140003070
mov rax, qword [rbp + 0x25f0]
mov rdx, qword [rbp + 0x25f8]
mov qword [rbp], rax
mov qword [rbp + 8], rdx
mov rax, rbp
mov rcx, rax
call fcn.140020670
lea rax, [0x14002f020]
mov rcx, rax
call fcn.140002b2a
mov dword [rbp + 0x29b4], 0xffffffff
cmp dword [rbp + 0x29b4], 0
jne 0x14000807a
lea rax, [0x14003063d]
mov rcx, rax
call fcn.140001540
lea rax, [rbp + 0x2603]
lea rdx, [rbp + 0x2610]
mov rcx, rax
call fcn.140003102
lea rax, [rbp + 0x2603]
mov qword [rbp + 0x2910], rax
mov rax, qword [rbp + 0x2910]
mov qword [rbp + 0x2908], rax
mov rax, qword [rbp + 0x2908]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140008157
mov rax, qword [rbp + 0x2910]
mov rdx, qword [rbp + 0x2910]
mov qword [rbp + 0x2900], rdx
mov qword [rbp + 0x28f8], rax
mov dword [rbp + 0x28f4], 0
jmp 0x14000814d
mov eax, dword [rbp + 0x28f4]
movsxd rdx, eax
mov rax, qword [rbp + 0x28f8]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x28f4]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2900]
mov eax, dword [rbp + 0x28f4]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x28f4], 1
cmp dword [rbp + 0x28f4], 0xc
jle 0x1400080ec
nop
lea rax, [rbp + 0x2603]
mov rcx, rax
call fcn.140002511
mov qword [rbp + 0x29a8], rax
cmp qword [rbp + 0x29a8], 0xffffffffffffffff
jne 0x140008186
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2611]
lea rdx, [rbp + 0x261e]
mov rcx, rax
call fcn.14000317c
lea rax, [rbp + 0x2611]
mov qword [rbp + 0x28e8], rax
mov rax, qword [rbp + 0x28e8]
mov qword [rbp + 0x28e0], rax
mov rax, qword [rbp + 0x28e0]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x140008263
mov rax, qword [rbp + 0x28e8]
mov rdx, qword [rbp + 0x28e8]
mov qword [rbp + 0x28d8], rdx
mov qword [rbp + 0x28d0], rax
mov dword [rbp + 0x28cc], 0
jmp 0x140008259
mov eax, dword [rbp + 0x28cc]
movsxd rdx, eax
mov rax, qword [rbp + 0x28d0]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x28cc]
movsxd rdx, eax
imul rdx, rdx, 0xffffffffa0a0a0a1
shr rdx, 0x20
add edx, eax
sar edx, 5
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x33
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x35
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x28d8]
mov eax, dword [rbp + 0x28cc]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x28cc], 1
cmp dword [rbp + 0x28cc], 0xc
jle 0x1400081f8
nop
lea rdx, [rbp + 0x2611]
lea rax, [rbp + 0x30]
mov rcx, qword [rbp + 0x29a8]
mov r8, rcx
mov rcx, rax
call fcn.1400026d1
mov rax, qword [rbp + 0x30]
cmp rax, 0xffffffffffffffff
je 0x140008294
mov rax, qword [rbp + 0x38]
cmp rax, 0xffffffffffffffff
jne 0x1400082a3
mov esi, 0
mov ebx, 0
jmp 0x140008974
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x29a0], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x2998], rax
mov r10, qword [0x14003d0b8]
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x80]
mov rax, qword [rbp + 0x29a0]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x29b4], eax
cmp dword [rbp + 0x29b4], 0
je 0x1400083a9
lea rax, [rbp + 0x2620]
lea rdx, [rbp + 0x261f]
mov rcx, rax
call fcn.1400031f6
mov rax, qword [rbp + 0x2620]
mov rdx, qword [rbp + 0x2628]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2630]
mov rdx, qword [rbp + 0x2638]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2640]
mov rdx, qword [rbp + 0x2648]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2650]
mov rdx, qword [rbp + 0x2658]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x265c]
mov rdx, qword [rbp + 0x2664]
mov qword [rbp - 0x14], rax
mov qword [rbp - 0xc], rdx
mov edx, dword [rbp + 0x29b4]
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140021680
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2670]
lea rdx, [rbp + 0x266f]
mov rcx, rax
call fcn.140003468
mov rax, qword [rbp + 0x2670]
mov rdx, qword [rbp + 0x2678]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2680]
mov rdx, qword [rbp + 0x2688]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2690]
mov rdx, qword [rbp + 0x2698]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x26a0]
mov rdx, qword [rbp + 0x26a8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x26a9]
mov rdx, qword [rbp + 0x26b1]
mov qword [rbp - 0x17], rax
mov qword [rbp - 0xf], rdx
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140021400
mov r10, qword [0x14003d0c0]
mov r9, qword [0x14002f3c8]
mov r8, qword [0x14003d0a0]
mov rdx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x29a0]
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x29b4], eax
cmp dword [rbp + 0x29b4], 0
je 0x140008523
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26bf]
mov rcx, rax
call fcn.1400036c2
mov rax, qword [rbp + 0x26c0]
mov rdx, qword [rbp + 0x26c8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x26d0]
mov rdx, qword [rbp + 0x26d8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x26e0]
mov rdx, qword [rbp + 0x26e8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x26f0]
mov rdx, qword [rbp + 0x26f8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x26fa]
mov rdx, qword [rbp + 0x2702]
mov qword [rbp - 0x16], rax
mov qword [rbp - 0xe], rdx
mov edx, dword [rbp + 0x29b4]
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.1400214d0
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2710]
lea rdx, [rbp + 0x270f]
mov rcx, rax
call fcn.140003924
mov rax, qword [rbp + 0x2710]
mov rdx, qword [rbp + 0x2718]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2720]
mov rdx, qword [rbp + 0x2728]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2730]
mov rdx, qword [rbp + 0x2738]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2740]
mov rdx, qword [rbp + 0x2748]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x274c]
mov rdx, qword [rbp + 0x2754]
mov qword [rbp - 0x14], rax
mov qword [rbp - 0xc], rdx
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.1400215b0
mov r10, qword [0x14003d0c8]
lea rdx, [rbp + 0x80]
mov rax, qword [rbp + 0x29a0]
lea rcx, [rbp + 0x8c]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x14002f3c8]
mov rcx, rax
call r10
mov dword [rbp + 0x29b4], eax
cmp dword [rbp + 0x29b4], 0
je 0x14000867c
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x275f]
mov rcx, rax
call fcn.140003b96
mov rax, qword [rbp + 0x2760]
mov rdx, qword [rbp + 0x2768]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2770]
mov rdx, qword [rbp + 0x2778]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2780]
mov rdx, qword [rbp + 0x2788]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov eax, dword [rbp + 0x278f]
mov dword [rbp - 0x21], eax
mov edx, dword [rbp + 0x29b4]
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.1400210a0
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x279f]
mov rcx, rax
call fcn.140003d40
mov rax, qword [rbp + 0x27a0]
mov rdx, qword [rbp + 0x27a8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x27b0]
mov rdx, qword [rbp + 0x27b8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x27c0]
mov rdx, qword [rbp + 0x27c8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x27cf]
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140021180
mov r10, qword [0x14003d108]
mov rax, qword [rbp + 0x80]
mov rdx, rax
mov rax, qword [rbp + 0x2998]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x29b4], eax
cmp dword [rbp + 0x29b4], 0
je 0x1400087c0
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x27df]
mov rcx, rax
call fcn.140003f0a
mov rax, qword [rbp + 0x27e0]
mov rdx, qword [rbp + 0x27e8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x27f0]
mov rdx, qword [rbp + 0x27f8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2800]
mov rdx, qword [rbp + 0x2808]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2809]
mov rdx, qword [rbp + 0x2811]
mov qword [rbp - 0x27], rax
mov qword [rbp - 0x1f], rdx
mov edx, dword [rbp + 0x29b4]
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140021250
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x281f]
mov rcx, rax
call fcn.1400040e4
mov rax, qword [rbp + 0x2820]
mov rdx, qword [rbp + 0x2828]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2830]
mov rdx, qword [rbp + 0x2838]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2840]
mov rdx, qword [rbp + 0x2848]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x284d]
mov rdx, qword [rbp + 0x2855]
mov qword [rbp - 0x23], rax
mov qword [rbp - 0x1b], rdx
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140021330
mov r8, qword [0x14003d110]
mov rax, qword [rbp + 0x2998]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x29b4], eax
cmp dword [rbp + 0x29b4], 0
je 0x1400088db
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x285f]
mov rcx, rax
call fcn.1400042de
mov rax, qword [rbp + 0x2860]
mov rdx, qword [rbp + 0x2868]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x2870]
mov rdx, qword [rbp + 0x2878]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x287e]
mov rdx, qword [rbp + 0x2886]
mov qword [rbp - 0x32], rax
mov qword [rbp - 0x2a], rdx
mov edx, dword [rbp + 0x29b4]
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140020ef0
mov esi, 0
mov ebx, 0
jmp 0x140008974
lea rax, [rbp + 0x2890]
lea rdx, [rbp + 0x288f]
mov rcx, rax
call fcn.140004460
mov rax, qword [rbp + 0x2890]
mov rdx, qword [rbp + 0x2898]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
mov rax, qword [rbp + 0x28a0]
mov rdx, qword [rbp + 0x28a8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x28b0]
mov rdx, qword [rbp + 0x28b8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
movzx eax, byte [rbp + 0x28c0]
mov byte [rbp - 0x20], al
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.140020fd0
mov rdx, qword [0x14003d0f8]
mov rax, qword [rbp + 0x29a0]
mov rcx, rax
call rdx
mov rdx, qword [0x14003d0f8]
mov rax, qword [rbp + 0x2998]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.14002cc20
cmp ebx, 1
jne 0x14000898a
mov esi, 0
mov eax, esi
jmp 0x14000a046
add rsp, 0x2a40
pop rbx
pop rsi
pop rbp
ret