Function at 0x1e85730a9
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x27a0
call fcn.1e8582dc0
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.1e8582110
lea rax, [rbp + 0x36f]
mov qword [rbp + 0x2708], rax
nop
nop
lea rdx, [rbp + 0x36f]
lea rax, [rbp + 0x340]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x320]
lea rdx, [rbp + 0x340]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1e86a8ebd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x1e86a8ec9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x1e86a8ed1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa0]
lea rdx, [rbp + 0xc0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0xa0]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x36f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3038], rax
lea rax, [rbp + 0x5ff]
mov qword [rbp + 0x2700], rax
nop
nop
lea rdx, [rbp + 0x5ff]
lea rax, [rbp + 0x5d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x1e86a8ed7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x1e86a8ec9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x1e86a8ed1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x3b0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x370]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x370]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x5ff]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3040], rax
lea rax, [rbp + 0x8cf]
mov qword [rbp + 0x26f8], rax
nop
nop
lea rdx, [rbp + 0x8cf]
lea rax, [rbp + 0x8a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1e86a8ed9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x1e86a8ec9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x1e86a8ed1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x640]
lea rdx, [rbp + 0x660]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x620]
lea rdx, [rbp + 0x640]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x600]
lea rdx, [rbp + 0x620]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x600]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x600]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x620]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x8cf]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3048], rax
lea rax, [rbp + 0xadf]
mov qword [rbp + 0x26f0], rax
nop
nop
lea rdx, [rbp + 0xadf]
lea rax, [rbp + 0xab0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x1e86a8edb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x930]
lea rdx, [rbp + 0x950]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x910]
lea rdx, [rbp + 0x930]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x8f0]
lea rdx, [rbp + 0x910]
lea r8, [0x1e86a8ee3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x8d0]
lea rdx, [rbp + 0x8f0]
lea r8, [0x1e86a8ee5]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x8d0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x8d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x8f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x910]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xadf]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3050], rax
lea rax, [rbp + 0xcaf]
mov qword [rbp + 0x26e8], rax
nop
nop
lea rdx, [rbp + 0xcaf]
lea rax, [rbp + 0xc80]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x1e86a8ee7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xb60]
lea rdx, [rbp + 0xb80]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xb40]
lea rdx, [rbp + 0xb60]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xb20]
lea rdx, [rbp + 0xb40]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xb00]
lea rdx, [rbp + 0xb20]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xae0]
lea rdx, [rbp + 0xb00]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0xae0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0xae0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xb00]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xb20]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xb40]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xcaf]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3058], rax
lea rax, [rbp + 0xf5f]
mov qword [rbp + 0x26e0], rax
nop
nop
lea rdx, [rbp + 0xf5f]
lea rax, [rbp + 0xf30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1e86a8ed7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x1e86a8eeb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x1e86a8eed]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x1e86a8ef1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xd50]
lea rdx, [rbp + 0xd70]
lea r8, [0x1e86a8ef3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xd30]
lea rdx, [rbp + 0xd50]
lea r8, [0x1e86a8ef5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xd10]
lea rdx, [rbp + 0xd30]
lea r8, [0x1e86a8ef7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xcf0]
lea rdx, [rbp + 0xd10]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xcd0]
lea rdx, [rbp + 0xcf0]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xcb0]
lea rdx, [rbp + 0xcd0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0xcb0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0xcb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xcd0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xcf0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xd10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xd30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xf5f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3060], rax
lea rax, [rbp + 0x128f]
mov qword [rbp + 0x26d8], rax
nop
nop
lea rdx, [rbp + 0x128f]
lea rax, [rbp + 0x1260]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1e86a8ef9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1e86a8efb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x1e86a8efd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1020]
lea rdx, [rbp + 0x1040]
lea r8, [0x1e86a8ed9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1000]
lea rdx, [rbp + 0x1020]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xfe0]
lea rdx, [rbp + 0x1000]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xfc0]
lea rdx, [rbp + 0xfe0]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xfa0]
lea rdx, [rbp + 0xfc0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xf80]
lea rdx, [rbp + 0xfa0]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0xf60]
lea rdx, [rbp + 0xf80]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0xf60]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0xf60]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xf80]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xfa0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xfc0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0xfe0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1000]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x128f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3068], rax
lea rax, [rbp + 0x14ff]
mov qword [rbp + 0x26d0], rax
nop
nop
lea rdx, [rbp + 0x14ff]
lea rax, [rbp + 0x14d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1e86a8ee7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x1e86a8ec9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1370]
lea rdx, [rbp + 0x1390]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1350]
lea rdx, [rbp + 0x1370]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1330]
lea rdx, [rbp + 0x1350]
lea r8, [0x1e86a8ed1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1310]
lea rdx, [rbp + 0x1330]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x12f0]
lea rdx, [rbp + 0x1310]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x12d0]
lea rdx, [rbp + 0x12f0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x12b0]
lea rdx, [rbp + 0x12d0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1290]
lea rdx, [rbp + 0x12b0]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x1290]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x1290]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x12b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x12d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x12f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1310]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1330]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1350]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x14ff]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3070], rax
lea rax, [rbp + 0x15ef]
mov qword [rbp + 0x26c8], rax
nop
nop
lea rdx, [rbp + 0x15ef]
lea rax, [rbp + 0x15c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x15a0]
lea rdx, [rbp + 0x15c0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1580]
lea rdx, [rbp + 0x15a0]
lea r8, [0x1e86a8edb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1560]
lea rdx, [rbp + 0x1580]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1540]
lea rdx, [rbp + 0x1560]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1520]
lea rdx, [rbp + 0x1540]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1500]
lea rdx, [rbp + 0x1520]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x1500]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x1500]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1520]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1540]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1560]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1580]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x15a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x15c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x15ef]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3078], rax
lea rax, [rbp + 0x179f]
mov qword [rbp + 0x26c0], rax
nop
nop
lea rdx, [rbp + 0x179f]
lea rax, [rbp + 0x1770]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1e86a8ef3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1710]
lea rdx, [rbp + 0x1730]
lea r8, [0x1e86a8eff]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x16f0]
lea rdx, [rbp + 0x1710]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x16d0]
lea rdx, [rbp + 0x16f0]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x16b0]
lea rdx, [rbp + 0x16d0]
lea r8, [0x1e86a8ed9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1690]
lea rdx, [rbp + 0x16b0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1670]
lea rdx, [rbp + 0x1690]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1650]
lea rdx, [rbp + 0x1670]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1630]
lea rdx, [rbp + 0x1650]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1610]
lea rdx, [rbp + 0x1630]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x15f0]
lea rdx, [rbp + 0x1610]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x15f0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x15f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1610]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1630]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1650]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1670]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1690]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x16b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x16d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x16f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x179f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3080], rax
lea rax, [rbp + 0x19af]
mov qword [rbp + 0x26b8], rax
nop
nop
lea rdx, [rbp + 0x19af]
lea rax, [rbp + 0x1980]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x1e86a8ef9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x18e0]
lea rdx, [rbp + 0x1900]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x18c0]
lea rdx, [rbp + 0x18e0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x18a0]
lea rdx, [rbp + 0x18c0]
lea r8, [0x1e86a8ebd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1880]
lea rdx, [rbp + 0x18a0]
lea r8, [0x1e86a8eff]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1860]
lea rdx, [rbp + 0x1880]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1840]
lea rdx, [rbp + 0x1860]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1820]
lea rdx, [rbp + 0x1840]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1800]
lea rdx, [rbp + 0x1820]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x17e0]
lea rdx, [rbp + 0x1800]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x17c0]
lea rdx, [rbp + 0x17e0]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x17a0]
lea rdx, [rbp + 0x17c0]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x17a0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x17a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x17c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x17e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1800]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1820]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1840]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1860]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1880]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x18a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x18c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x19af]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3088], rax
lea rax, [rbp + 0x1c1f]
mov qword [rbp + 0x26b0], rax
nop
nop
lea rdx, [rbp + 0x1c1f]
lea rax, [rbp + 0x1bf0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1e86a8ebd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1b10]
lea rdx, [rbp + 0x1b30]
lea r8, [0x1e86a8ee7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1af0]
lea rdx, [rbp + 0x1b10]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ad0]
lea rdx, [rbp + 0x1af0]
lea r8, [0x1e86a8ee9]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ad0]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a90]
lea rdx, [rbp + 0x1ab0]
lea r8, [0x1e86a8ed3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a70]
lea rdx, [rbp + 0x1a90]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a50]
lea rdx, [rbp + 0x1a70]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a30]
lea rdx, [rbp + 0x1a50]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1a10]
lea rdx, [rbp + 0x1a30]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x19f0]
lea rdx, [rbp + 0x1a10]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x19d0]
lea rdx, [rbp + 0x19f0]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x19b0]
lea rdx, [rbp + 0x19d0]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x19b0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x19b0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x19d0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x19f0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1a90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ab0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ad0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1af0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1c1f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3090], rax
lea rax, [rbp + 0x1e6f]
mov qword [rbp + 0x26a8], rax
nop
nop
lea rdx, [rbp + 0x1e6f]
lea rax, [rbp + 0x1e40]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x1e86a8f01]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1da0]
lea rdx, [rbp + 0x1dc0]
lea r8, [0x1e86a8edb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1d80]
lea rdx, [rbp + 0x1da0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1d60]
lea rdx, [rbp + 0x1d80]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1d40]
lea rdx, [rbp + 0x1d60]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1d20]
lea rdx, [rbp + 0x1d40]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1d00]
lea rdx, [rbp + 0x1d20]
lea r8, [0x1e86a8ee5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ce0]
lea rdx, [rbp + 0x1d00]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1cc0]
lea rdx, [rbp + 0x1ce0]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ca0]
lea rdx, [rbp + 0x1cc0]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1c80]
lea rdx, [rbp + 0x1ca0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1c60]
lea rdx, [rbp + 0x1c80]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1c40]
lea rdx, [rbp + 0x1c60]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c40]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x1c20]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x1c20]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1c40]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1c60]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1c80]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ca0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1cc0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ce0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1d00]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1d20]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1d40]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1d60]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1d80]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e6f]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b3098], rax
lea rax, [rbp + 0x20bf]
mov qword [rbp + 0x26a0], rax
nop
nop
lea rdx, [rbp + 0x20bf]
lea rax, [rbp + 0x2090]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x1e86a8eed]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2010]
lea rdx, [rbp + 0x2030]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ff0]
lea rdx, [rbp + 0x2010]
lea r8, [0x1e86a8edb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1fd0]
lea rdx, [rbp + 0x1ff0]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1fb0]
lea rdx, [rbp + 0x1fd0]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1f90]
lea rdx, [rbp + 0x1fb0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1f70]
lea rdx, [rbp + 0x1f90]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1f50]
lea rdx, [rbp + 0x1f70]
lea r8, [0x1e86a8ee5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1f30]
lea rdx, [rbp + 0x1f50]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1f10]
lea rdx, [rbp + 0x1f30]
lea r8, [0x1e86a8edd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ef0]
lea rdx, [rbp + 0x1f10]
lea r8, [0x1e86a8edf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1ed0]
lea rdx, [rbp + 0x1ef0]
lea r8, [0x1e86a8ecd]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1eb0]
lea rdx, [rbp + 0x1ed0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1e90]
lea rdx, [rbp + 0x1eb0]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x1e70]
lea rdx, [rbp + 0x1e90]
lea r8, [0x1e86a8ee1]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x1e70]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x1e70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1e90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1eb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ed0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ef0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1f10]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1f30]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1f50]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1f70]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1f90]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1fb0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1fd0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x1ff0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x20bf]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b30a0], rax
lea rax, [rbp + 0x22ce]
mov qword [rbp + 0x2698], rax
nop
nop
lea rdx, [rbp + 0x22ce]
lea rax, [rbp + 0x22a0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmyWPCThdExRsFSngObjQIfpGD_n
mov rcx, rax
call fcn.1e8599d10
lea rax, [rbp + 0x2280]
lea rdx, [rbp + 0x22a0]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2260]
lea rdx, [rbp + 0x2280]
lea r8, [0x1e86a8f03]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2240]
lea rdx, [rbp + 0x2260]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2220]
lea rdx, [rbp + 0x2240]
lea r8, [0x1e86a8ebf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2200]
lea rdx, [rbp + 0x2220]
lea r8, [0x1e86a8ec5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x21e0]
lea rdx, [rbp + 0x2200]
lea r8, [0x1e86a8ed5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x21c0]
lea rdx, [rbp + 0x21e0]
lea r8, [0x1e86a8ee3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x21a0]
lea rdx, [rbp + 0x21c0]
lea r8, [0x1e86a8ee5]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2180]
lea rdx, [rbp + 0x21a0]
lea r8, [0x1e86a8ec7]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2160]
lea rdx, [rbp + 0x2180]
lea r8, [0x1e86a8ec3]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2140]
lea rdx, [rbp + 0x2160]
lea r8, [0x1e86a8ecf]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2120]
lea rdx, [rbp + 0x2140]
lea r8, [0x1e86a8ebb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x2100]
lea rdx, [rbp + 0x2120]
lea r8, [0x1e86a8ecb]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x20e0]
lea rdx, [rbp + 0x2100]
lea r8, [0x1e86a8ec1]
mov rcx, rax
call fcn.1e859abe0
lea rax, [rbp + 0x20c0]
lea rdx, [rbp + 0x20e0]
lea r8, [0x1e86a8eef]
mov rcx, rax
call fcn.1e859abe0
lea rdx, [rbp + 0x20c0]
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a510
lea rax, [rbp + 0x20c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x20e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2100]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2120]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2140]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2160]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2180]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x21a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x21c0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x21e0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2200]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2220]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2240]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2260]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1e859a4d0
lea rax, [rbp + 0x22ce]
mov rcx, rax
call fcn.1e8596d10
nop
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e85921d0
mov rsi, rax
lea rax, str.ntdll.dll
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov rdx, rsi
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1e86b30a8], rax
call fcn.1e85714a5
test eax, eax
setne al
test al, al
je 0x1e85765bc
lea rax, [rbp + 0x22d0]
lea rdx, [rbp + 0x22cf]
mov rcx, rax
call fcn.1e8571646
mov rax, qword [rbp + 0x22d0]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x22d8]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x22e0]
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x22e8]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1e858e660
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x22ff]
mov rcx, rax
call fcn.1e8571758
mov rax, qword [rbp + 0x2300]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x2308]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x230e]
mov qword [rbp + 0x3e], rax
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1e858e4a0
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call rax
mov qword [rbp + 0x2718], rax
mov dword [rbp + 0x7c], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov rax, qword [0x1e86a7988]
mov qword [rbp + 0x58], rax
call fcn.1e857159f
mov r10, qword [0x1e86b3038]
lea rdx, [rbp + 0x58]
lea rax, [rbp + 0x70]
mov rcx, qword [rbp + 0x2718]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rdx
mov r8d, 0
mov rdx, rax
call r10
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e8576723
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x231f]
mov rcx, rax
call fcn.1e857181a
mov rax, qword [rbp + 0x2320]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2328]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2330]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2338]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2340]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2348]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2350]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2358]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x2360]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x2368]
mov qword [rbp + 0x28], rax
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858ef20
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x237f]
mov rcx, rax
call fcn.1e8571aac
mov rax, qword [rbp + 0x2380]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2388]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2390]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2398]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x23a0]
mov qword [rbp], rax
mov rax, qword [rbp + 0x23a8]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x23b0]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x23b8]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x23c0]
mov qword [rbp + 0x20], rax
movzx eax, byte [rbp + 0x23c8]
mov byte [rbp + 0x28], al
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858ec80
mov r10, qword [0x1e86b3040]
mov r9, qword [0x1e86a7988]
mov r8, qword [0x1e86b3020]
mov rdx, qword [rbp + 0x70]
mov rax, qword [rbp + 0x2718]
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e8576899
lea rax, [rbp + 0x23d0]
lea rdx, [rbp + 0x23cf]
mov rcx, rax
call fcn.1e8571d06
mov rax, qword [rbp + 0x23d0]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x23d8]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x23e0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x23e8]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x23f0]
mov qword [rbp], rax
mov rax, qword [rbp + 0x23f8]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2400]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2408]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x2410]
mov qword [rbp + 0x20], rax
movzx eax, word [rbp + 0x2418]
mov word [rbp + 0x28], ax
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858ed60
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x241f]
mov rcx, rax
call fcn.1e8571f68
mov rax, qword [rbp + 0x2420]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2428]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2430]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2438]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2440]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2448]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2450]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2458]
mov qword [rbp + 0x18], rax
mov rax, qword [rbp + 0x2460]
mov qword [rbp + 0x20], rax
mov eax, dword [rbp + 0x2468]
mov dword [rbp + 0x28], eax
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858ee40
mov r10, qword [0x1e86b3048]
lea rax, [rbp + 0x70]
mov rcx, qword [rbp + 0x2718]
lea rdx, [rbp + 0x7c]
mov qword [rsp + 0x20], rdx
mov r9d, 1
lea r8, [0x1e86a7988]
mov rdx, rax
call r10
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e85769ea
lea rax, [rbp + 0x2470]
lea rdx, [rbp + 0x246f]
mov rcx, rax
call fcn.1e85721da
mov rax, qword [rbp + 0x2470]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2478]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2480]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2488]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2490]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2498]
mov qword [rbp + 8], rax
mov eax, dword [rbp + 0x249f]
mov dword [rbp + 0xf], eax
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e740
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x24b0]
lea rdx, [rbp + 0x24af]
mov rcx, rax
call fcn.1e8572384
mov rax, qword [rbp + 0x24b0]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x24b8]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x24c0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x24c8]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x24d0]
mov qword [rbp], rax
mov rax, qword [rbp + 0x24d8]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x24df]
mov qword [rbp + 0xf], rax
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e900
mov r10, qword [0x1e86b3050]
mov rdx, qword [rbp + 0x70]
mov rcx, qword [rbp + 0x2718]
lea rax, [rbp + 0x68]
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rdx
mov r9, rcx
mov r8d, 0
mov edx, 0x20000000
mov rcx, rax
call r10
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e8576b69
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x24ef]
mov rcx, rax
call fcn.1e857254e
mov rax, qword [rbp + 0x24f0]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x24f8]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2500]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2508]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2510]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2518]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2520]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2528]
mov qword [rbp + 0x18], rax
movzx eax, byte [rbp + 0x2530]
mov byte [rbp + 0x20], al
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858eac0
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x2540]
lea rdx, [rbp + 0x253f]
mov rcx, rax
call fcn.1e8572768
mov rax, qword [rbp + 0x2540]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2548]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2550]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2558]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2560]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2568]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2570]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x2578]
mov qword [rbp + 0x18], rax
mov eax, dword [rbp + 0x2580]
mov dword [rbp + 0x20], eax
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858eba0
mov r10, qword [0x1e86b3048]
lea rax, [rbp + 0x70]
mov rcx, qword [rbp + 0x2718]
lea rdx, [rbp + 0x7c]
mov qword [rsp + 0x20], rdx
mov r9d, 0x20
lea r8, [0x1e86a7988]
mov rdx, rax
call r10
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e8576caf
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x258f]
mov rcx, rax
call fcn.1e857299a
mov rax, qword [rbp + 0x2590]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2598]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x25a0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x25a8]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x25b0]
mov qword [rbp], rax
mov rax, qword [rbp + 0x25b8]
mov qword [rbp + 8], rax
mov eax, dword [rbp + 0x25bf]
mov dword [rbp + 0xf], eax
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e740
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25cf]
mov rcx, rax
call fcn.1e8572b44
mov rax, qword [rbp + 0x25d0]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x25d8]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x25e0]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x25e8]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x25f0]
mov qword [rbp], rax
mov rax, qword [rbp + 0x25f8]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x25ff]
mov qword [rbp + 0xf], rax
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e900
mov r8, qword [0x1e86b3058]
mov rax, qword [rbp + 0x68]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2714], eax
cmp dword [rbp + 0x2714], 0
je 0x1e8576dcb
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x260f]
mov rcx, rax
call fcn.1e8572d0e
mov rax, qword [rbp + 0x2610]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2618]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2620]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2628]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2630]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2638]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x263e]
mov qword [rbp + 0xe], rax
mov edx, dword [rbp + 0x2714]
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e820
mov ebx, 0
mov esi, 0
jmp 0x1e8576e6b
lea rax, [rbp + 0x2650]
lea rdx, [rbp + 0x264f]
mov rcx, rax
call fcn.1e8572ed0
mov rax, qword [rbp + 0x2650]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x2658]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x2660]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp + 0x2668]
mov qword [rbp - 8], rax
mov rax, qword [rbp + 0x2670]
mov qword [rbp], rax
mov rax, qword [rbp + 0x2678]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 0x2680]
mov qword [rbp + 0x10], rax
movzx eax, byte [rbp + 0x2688]
mov byte [rbp + 0x18], al
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1e858e9e0
mov r9, qword [0x1e86b3060]
mov rax, qword [rbp + 0x68]
mov r8d, 0
mov edx, 0xff
mov rcx, rax
call r9
mov dword [rbp + 0x2714], eax
mov esi, 1
lea rax, [rbp + 0x80]
mov rcx, rax
call fcn.1e859a4d0
cmp esi, 1
jne 0x1e8576e84
mov ebx, 0
mov eax, ebx
jmp 0x1e85783c3
add rsp, 0x27a0
pop rbx
pop rsi
pop rbp
ret