Function at 0x1800091b0
Capabilities:
Create thread
Encode data using base64

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x338
movdqa xmm0, xmmword [0x1800ada00]
xor ebx, ebx
movdqu xmmword [rbp - 0xe], xmm0
mov r15, r9
mov r12, r8
movdqu xmmword [rbp - 0x3e], xmm0
lea ecx, [rbx + 0x30]
mov r14, rdx
xorps xmm0, xmm0
movaps xmmword [rax - 0x68], xmm7
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], bl
mov qword [rbp - 0x28], rbx
mov word [rbp - 0x20], bx
mov byte [rbp - 0x1e], bl
mov qword [rbp - 0x58], rbx
mov word [rbp - 0x50], bx
mov byte [rbp - 0x4e], bl
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rbx
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x50], rbx
call fcn.18007be94
mov r13d, dword [rbp + 0x2a0]
xorps xmm0, xmm0
xorps xmm2, xmm2
xorps xmm1, xmm1
mov qword [rax], rax
mov qword [rax + 8], rax
lea edi, [r13 + 0xa60]
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x48], rax
xor eax, eax
mov qword [rbp + 0x110], rax
mov byte [rbp + 0x118], al
mov word [rbp + 0x160], ax
movsd qword [rbp + 0x60], xmm2
movsd qword [rbp + 0x158], xmm2
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
mov dword [rbp + 0x78], 1
movdqa xmmword [rbp + 0x80], xmm0
movdqa xmmword [rbp + 0x90], xmm1
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmmword [rbp + 0xb0], xmm1
mov qword [rbp + 0xc0], 0xffffffffffffffff
mov dword [rbp + 0xc8], ebx
mov qword [rbp + 0x128], rbx
mov qword [rbp + 0x130], 0xf
mov word [rbp + 0x138], bx
mov dword [rbp + 0x13c], ebx
mov qword [rbp + 0x140], rbx
mov dword [rsp + 0x30], edi
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x162], al
cmp r13d, edi
jae 0x1800099d6
movzx edi, byte [rsp + 0x38]
mov ecx, 0x1bb
movss xmm7, dword [rsp + 0x30]
movabs rsi, 0x1fffffffffffffff
mov eax, dword [rsp + 0x30]
nop word [rax + rax]
cmp r13d, 0x1c1
ja 0x180009778
je 0x18000973d
cmp r13d, 0x113
ja 0x180009666
je 0x1800099d6
mov eax, r13d
sub eax, 0x45
je 0x1800095f2
sub eax, 0x28
je 0x1800095ab
sub eax, 0x53
je 0x18000956e
cmp eax, 0x2b
jne 0x1800098da
mov word [rsp + 0x38], cx
lea r9d, [rax + 0x27]
lea rcx, [0x1800c7dd8]
lea r8, [rsp + 0x38]
lea rdx, [rbp - 0x58]
call fcn.180019f60
xor r9d, r9d
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x88
call fcn.180053e40
mov rcx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x58]
cmp r15, rcx
je 0x180009418
lea rax, [rbp - 0x28]
mov qword [r15], rax
add qword [rsp + 0x58], 8
mov r15, qword [rbp + 0x298]
jmp 0x1800098d5
mov rax, qword [rsp + 0x50]
mov r14, r15
sub r14, rax
sar r14, 3
cmp r14, rsi
je 0x180009c48
sub rcx, rax
lea r12, [r14 + 1]
sar rcx, 3
mov rax, rsi
mov rdx, rcx
shr rdx, 1
sub rax, rdx
cmp rcx, rax
jbe 0x180009451
mov rax, r12
jmp 0x18000945c
lea rax, [rdx + rcx]
cmp rax, r12
cmovb rax, r12
cmp rax, rsi
ja 0x180009c42
lea rsi, [rax*8]
cmp rsi, 0x1000
jb 0x18000949f
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x180009c42
call fcn.18007be94
test rax, rax
je 0x180009c3c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800094af
test rsi, rsi
je 0x1800094af
mov rcx, rsi
call fcn.18007be94
mov rbx, rax
lea rax, [rbp - 0x28]
mov rcx, rbx
mov qword [rbx + r14*8], rax
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
cmp r15, r8
jne 0x1800094ce
sub r8, rdx
jmp 0x1800094ec
mov r8, r15
sub r8, rdx
call fcn.18007ce90
mov r8, qword [rsp + 0x58]
lea rcx, [r14 + 1]
sub r8, r15
lea rcx, [rbx + rcx*8]
mov rdx, r15
call fcn.18007ce90
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180009531
mov rdx, qword [rsp + 0x60]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x18000952c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009c3c
call fcn.18007bed0
mov r14, qword [rbp + 0x288]
lea rax, [rbx + r12*8]
mov r15, qword [rbp + 0x298]
mov r12, qword [rbp + 0x290]
mov qword [rsp + 0x58], rax
lea rax, [rsi + rbx]
mov qword [rsp + 0x50], rbx
movabs rsi, 0x1fffffffffffffff
mov qword [rsp + 0x60], rax
xor ebx, ebx
jmp 0x1800098d5
mov rax, qword [r15]
lea rcx, [rsp + 0x38]
mov r8, qword [rbp + 0x2b8]
mov r9, r12
mov rdx, qword [rbp + 0x2a8]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x20], 0x5c
call fcn.180022410
mov qword [rsp + 0x38], rax
xor ebx, ebx
movss xmm7, dword [rsp + 0x38]
jmp 0x1800098d5
mov r8d, 0xa2
mov rdx, r14
xor ecx, ecx
call fcn.18004a330
xor esi, esi
xor r9d, r9d
mov r8d, 0x11c
mov qword [rsp + 0x20], rsi
mov rdx, r14
xor ecx, ecx
mov rbx, rax
call fcn.180049a40
imul rax, rbx
xor ebx, ebx
movabs rsi, 0x1fffffffffffffff
mov qword [rsp + 0x40], rax
jmp 0x1800098d5
xor r9d, r9d
lea rdx, [0x1800c7d70]
xor r8d, r8d
mov ecx, 0x117
call fcn.1800089b0
lea rax, [0x1800c7d78]
mov r9d, 0xe5
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
call fcn.1800543f0
test al, al
je 0x1800099ce
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.180081784
mov eax, 0x1bb
lea r8, [rsp + 0x38]
mov r9d, 0x10c
mov word [rsp + 0x38], ax
lea rdx, [rbp - 0x28]
lea rcx, [0x1800c7db8]
call fcn.18005b780
jmp 0x1800098d5
mov eax, r13d
sub eax, 0x11b
je 0x1800096c2
sub eax, 0x4b
je 0x1800098f3
cmp eax, 0x2b
jne 0x1800098da
lea rax, [rbp - 0x58]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x58]
cmp rax, qword [rsp + 0x60]
je 0x1800096a9
lea rcx, [rbp - 0x58]
mov qword [rax], rcx
add qword [rsp + 0x58], 8
jmp 0x1800098d5
mov rdx, qword [rsp + 0x58]
lea r8, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.180001b50
jmp 0x1800098d5
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x1800096cf
mov rcx, qword [r14]
movzx eax, word [r14 + 0x60]
lea rdx, [rsp + 0x38]
mov rbx, qword [rbp + 0x2b8]
mov r9d, 0x5e
mov r8, rbx
mov word [rsp + 0x38], ax
call fcn.18001b310
test al, al
je 0x1800099c7
mov r9d, 0x3d
lea rcx, [rbp + 0x20]
mov r8, r14
xor edx, edx
call fcn.180020dd0
mov rax, qword [rbx]
lea r9, [rsp + 0x38]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x38], rax
mov edx, 0x28
lea rcx, [rbp + 8]
call fcn.18004fb40
test al, al
je 0x1800099c7
xor ebx, ebx
jmp 0x1800098d5
mov rax, qword [rbp + 0x2b8]
lea r9, [rbp + 0x20]
mov rcx, qword [rbp - 0x60]
lea rdx, [rsp + 0x38]
mov r8d, 0xbb
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x2a8]
mov qword [rsp + 0x20], rax
call fcn.18000c470
mov rdi, rax
jmp 0x1800098d5
cmp r13d, 0x30d
ja 0x18000987b
je 0x1800099d6
mov eax, r13d
sub eax, 0x237
je 0x18000980a
sub eax, 0x30
je 0x1800097e6
cmp eax, 0x76
jne 0x1800098da
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x1800099ce
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [0x1800081a0]
xor r9d, r9d
lea r8, [rsp + 0x38]
mov qword [rsp + 0x38], rax
mov edx, 0x91
lea rcx, [rbp + 0x180]
call fcn.180006350
xor ebx, ebx
jmp 0x1800098d5
xor edx, edx
lea rax, [rbp + 8]
lea r9, [rbp - 0x60]
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8d, [rdx + 0x66]
call fcn.1800146c0
mov byte [rsp + 0x40], dil
jmp 0x1800098d5
mov eax, dword [0x1800c7e00]
lea rdx, [rsp + 0x38]
xor r9d, r9d
mov dword [rsp + 0x38], eax
mov r8d, 0xaf
lea rcx, [rsp + 0x50]
call fcn.18006c3d0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
mov qword [rbp + 0x10], rax
lea r9, [rbp + 0x170]
mov eax, dword [0x1800c7e00]
lea r8, [0x180010b40]
mov dword [rbp + 0x18], eax
xor edx, edx
mov eax, dword [0x1800c7e04]
xor ecx, ecx
mov dword [rbp + 0x1c], eax
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x170], xmm0
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x48], rax
jmp 0x1800098d5
cmp r13d, 0x383
je 0x1800098bb
cmp r13d, 0x429
je 0x18000989c
cmp r13d, 0x4cf
je 0x1800099d6
jmp 0x1800098de
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor edx, edx
lea rcx, [rbp + 0x40]
mov r8d, 0x85
call fcn.180064f70
mov dword [rsp + 0x40], ebx
jmp 0x1800098d5
lea r9, [rbp + 0x40]
mov ecx, 0x73
lea r8, [0x1800c7d70]
lea rdx, [rsp + 0x50]
call fcn.180007400
mov ecx, 0x1bb
mov eax, dword [rsp + 0x30]
add r13d, 0xa6
cmp r13d, eax
jb 0x180009370
jmp 0x1800099d6
mov rsi, qword [rbp + 0x2b0]
mov rdi, rbx
cmp qword [rsi], 0
jbe 0x1800099d6
mov r13, qword [rbp + 0x280]
movaps xmmword [rsp + 0x320], xmm6
movss xmm6, dword [0x1800adb20]
nop
mov ebx, 0x15
cmp ebx, 0x15
jne 0x18000999f
mov r8, qword [rsi]
lea rcx, [rbp + 0x190]
mov rdx, qword [rbp + 0x2a8]
shl r8, 2
call fcn.18007ce90
movss xmm0, dword [rbp + rdi*4 + 0x190]
lea rdx, [rbp + 0x190]
addss xmm0, dword [r13]
mov rax, qword [r15]
lea rcx, [rsp + 0x48]
mov r8, qword [rbp + 0x2b8]
mov r9, r12
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x20], 0x5c
movss dword [rbp + rdi*4 + 0x190], xmm0
call fcn.180022410
mov qword [rsp + 0x48], rax
movss xmm0, dword [rsp + 0x48]
subss xmm0, xmm7
xorps xmm0, xmm6
movss dword [r14 + rdi*4], xmm0
add ebx, 0x70e
cmp ebx, 0x70e
jbe 0x180009925
inc rdi
cmp rdi, qword [rsi]
jb 0x180009920
movaps xmm6, xmmword [rsp + 0x320]
jmp 0x1800099d6
mov byte [rsp + 0x40], 0
jmp 0x1800099d6
mov dword [rsp + 0x40], 1
lea rcx, [rbp + 0xc0]
call fcn.180004d40
mov rbx, qword [rbp + 0xa8]
test rbx, rbx
je 0x180009a4b
mov rdi, qword [rbp + 0xb0]
cmp rbx, rdi
je 0x180009a18
nop word [rax + rax]
mov rcx, rbx
call fcn.180019af0
add rbx, 0x20
cmp rbx, rdi
jne 0x180009a00
mov rbx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rbp + 0xa8]
sub r8, rbx
mov rdx, rbx
sar r8, 5
call fcn.1800278d0
xor esi, esi
xorps xmm0, xmm0
mov qword [rbp + 0xa8], rsi
movdqa xmmword [rbp + 0xb0], xmm0
jmp 0x180009a4d
xor esi, esi
mov rdx, qword [rbp + 0x90]
test rdx, rdx
je 0x180009a85
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp + 0x90]
sub r8, rdx
sar r8, 4
call fcn.180027880
xorps xmm0, xmm0
mov qword [rbp + 0xa0], rsi
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x48]
call fcn.180004ce0
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x180009b22
mov rdi, qword [rsp + 0x70]
cmp rbx, rdi
je 0x180009abc
mov rcx, rbx
call fcn.180004c80
add rbx, 0x28
cmp rbx, rdi
jne 0x180009aa6
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
movabs rax, 0x6666666666666667
sub rcx, rbx
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rbx
lea rdx, [rdx + rdx*4]
shl rdx, 3
cmp rdx, 0x1000
jb 0x180009b0c
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009c3c
mov rcx, rbx
call fcn.18007bed0
xorps xmm0, xmm0
mov qword [rsp + 0x68], rsi
movdqa xmmword [rsp + 0x70], xmm0
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x180009b50
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x50]
sub r8, rdx
sar r8, 3
call fcn.180027830
xorps xmm0, xmm0
mov qword [rsp + 0x60], rsi
movdqa xmmword [rsp + 0x50], xmm0
mov rdx, qword [rbp - 0x36]
cmp rdx, 0x10
jb 0x180009b8b
mov rcx, qword [rbp - 0x4e]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009b86
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009c3c
call fcn.18007bed0
mov rdx, qword [rbp - 6]
movdqa xmm0, xmmword [0x1800ada00]
mov byte [rbp - 0x4e], 0
movdqu xmmword [rbp - 0x3e], xmm0
cmp rdx, 0x10
jb 0x180009bd3
mov rcx, qword [rbp - 0x1e]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009bce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009c3c
call fcn.18007bed0
mov rdx, qword [rbp + 0x38]
movdqa xmm0, xmmword [0x1800ada00]
mov byte [rbp - 0x1e], 0
movdqu xmmword [rbp - 0xe], xmm0
cmp rdx, 0x10
jb 0x180009c1b
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009c16
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009c3c
call fcn.18007bed0
mov rax, qword [rsp + 0x40]
movaps xmm7, xmmword [rsp + 0x310]
add rsp, 0x338
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180080234
int3
call fcn.1800199a0
int3
call fcn.180019f20
int3