Function at 0x140190f50
Capabilities:
Access the windows event log
Write file on windows

Disassembly:
mov r13, qword [r11]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
add ecx, ecx
add dword [rdx + 0x53], esp
std
sub byte [rbx], al
rol byte [rcx], cl
add ecx, ecx
add dword [rdx + 0x53], esp
std
sub byte [rbx], al
rol byte [rcx], cl
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
mov r13, qword [r11 + 8]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
valignq ymm10, ymm0, ymm10, 1
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
mov r13, qword [r11 + 0x10]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
valignq ymm10, ymm0, ymm10, 1
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
mov r13, qword [r11 + 0x18]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
valignq ymm10, ymm0, ymm10, 1
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
lea r11, [r11 + 0x20]
dec ebx
jne 0x140050420
mov r13, qword [r11]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
valignq ymm10, ymm0, ymm10, 1
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
mov r13, qword [r11 + 8]
vpbroadcastq ymm1, r13
mov rdx, qword [rsi]
mulx r12, r13, r13
add r9, r13
mov r10, r12
adc r10, 0
mov r13, r8
imul r13, r9
and r13, rax
vpbroadcastq ymm2, r13
mov rdx, qword [rcx]
mulx r12, r13, r13
add r9, r13
adc r10, r12
shr r9, 0x34
shl r10, 0xc
or r9, r10
vpmadd52luq ymm3, ymm1, ymmword [rsi]
vpmadd52luq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52luq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52luq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52luq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52luq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52luq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52luq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52luq ymm3, ymm2, ymmword [rcx]
vpmadd52luq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52luq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52luq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52luq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52luq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52luq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52luq ymm10, ymm2, ymmword [rcx + 0xe0]
valignq ymm3, ymm4, ymm3, 1
valignq ymm4, ymm5, ymm4, 1
valignq ymm5, ymm6, ymm5, 1
valignq ymm6, ymm7, ymm6, 1
valignq ymm7, ymm8, ymm7, 1
valignq ymm8, ymm9, ymm8, 1
valignq ymm9, ymm10, ymm9, 1
valignq ymm10, ymm0, ymm10, 1
vmovq r13, xmm3
add r9, r13
vpmadd52huq ymm3, ymm1, ymmword [rsi]
vpmadd52huq ymm4, ymm1, ymmword [rsi + 0x20]
vpmadd52huq ymm5, ymm1, ymmword [rsi + 0x40]
vpmadd52huq ymm6, ymm1, ymmword [rsi + 0x60]
vpmadd52huq ymm7, ymm1, ymmword [rsi + 0x80]
vpmadd52huq ymm8, ymm1, ymmword [rsi + 0xa0]
vpmadd52huq ymm9, ymm1, ymmword [rsi + 0xc0]
vpmadd52huq ymm10, ymm1, ymmword [rsi + 0xe0]
vpmadd52huq ymm3, ymm2, ymmword [rcx]
vpmadd52huq ymm4, ymm2, ymmword [rcx + 0x20]
vpmadd52huq ymm5, ymm2, ymmword [rcx + 0x40]
vpmadd52huq ymm6, ymm2, ymmword [rcx + 0x60]
vpmadd52huq ymm7, ymm2, ymmword [rcx + 0x80]
vpmadd52huq ymm8, ymm2, ymmword [rcx + 0xa0]
vpmadd52huq ymm9, ymm2, ymmword [rcx + 0xc0]
vpmadd52huq ymm10, ymm2, ymmword [rcx + 0xe0]
vpbroadcastq ymm0, r9
vpblendd ymm3, ymm3, ymm0, 3
vpsrlq ymm0, ymm3, 0x34
vpsrlq ymm1, ymm4, 0x34
vpsrlq ymm2, ymm5, 0x34
vpsrlq ymm19, ymm6, 0x34
vpsrlq ymm20, ymm7, 0x34
vpsrlq ymm21, ymm8, 0x34
vpsrlq ymm22, ymm9, 0x34
vpsrlq ymm23, ymm10, 0x34
valignq ymm23, ymm23, ymm22, 3
valignq ymm22, ymm22, ymm21, 3
valignq ymm21, ymm21, ymm20, 3
valignq ymm20, ymm20, ymm19, 3
valignq ymm19, ymm19, ymm2, 3
valignq ymm2, ymm2, ymm1, 3
valignq ymm1, ymm1, ymm0, 3
valignq ymm0, ymm0, ymmword [0x14039a020], 3
vpandq ymm3, ymm3, ymmword [0x140399fe0]
vpandq ymm4, ymm4, ymmword [0x140399fe0]
vpandq ymm5, ymm5, ymmword [0x140399fe0]
vpandq ymm6, ymm6, ymmword [0x140399fe0]
vpandq ymm7, ymm7, ymmword [0x140399fe0]
vpandq ymm8, ymm8, ymmword [0x140399fe0]
vpandq ymm9, ymm9, ymmword [0x140399fe0]
vpandq ymm10, ymm10, ymmword [0x140399fe0]
vpaddq ymm3, ymm3, ymm0
vpaddq ymm4, ymm4, ymm1
vpaddq ymm5, ymm5, ymm2
vpaddq ymm6, ymm6, ymm19
vpaddq ymm7, ymm7, ymm20
vpaddq ymm8, ymm8, ymm21
vpaddq ymm9, ymm9, ymm22
vpaddq ymm10, ymm10, ymm23
vpcmpnleuq k1, ymm3, ymmword [0x140399fe0]
vpcmpnleuq k2, ymm4, ymmword [0x140399fe0]
kmovb r14d, k1
kmovb r13d, k2
shl r13b, 4
or r14b, r13b
vpcmpnleuq k1, ymm5, ymmword [0x140399fe0]
vpcmpnleuq k2, ymm6, ymmword [0x140399fe0]
kmovb r13d, k1
kmovb r12d, k2
shl r12b, 4
or r13b, r12b
vpcmpnleuq k1, ymm7, ymmword [0x140399fe0]
vpcmpnleuq k2, ymm8, ymmword [0x140399fe0]
kmovb r12d, k1
kmovb r11d, k2
shl r11b, 4
or r12b, r11b
vpcmpnleuq k1, ymm9, ymmword [0x140399fe0]
vpcmpnleuq k2, ymm10, ymmword [0x140399fe0]
kmovb r11d, k1
kmovb r10d, k2
shl r10b, 4
or r11b, r10b
add r14b, r14b
adc r13b, r13b
adc r12b, r12b
adc r11b, r11b
vpcmpequq k1, ymm3, ymmword [0x140399fe0]
vpcmpequq k2, ymm4, ymmword [0x140399fe0]
kmovb r9d, k1
kmovb r8d, k2
shl r8b, 4
or r9b, r8b
vpcmpequq k1, ymm5, ymmword [0x140399fe0]
vpcmpequq k2, ymm6, ymmword [0x140399fe0]
kmovb r8d, k1
kmovb edx, k2
shl dl, 4
or r8b, dl
vpcmpequq k1, ymm7, ymmword [0x140399fe0]
vpcmpequq k2, ymm8, ymmword [0x140399fe0]
kmovb edx, k1
kmovb ecx, k2
shl cl, 4
or dl, cl
vpcmpequq k1, ymm9, ymmword [0x140399fe0]
vpcmpequq k2, ymm10, ymmword [0x140399fe0]
kmovb ecx, k1
kmovb ebx, k2
shl bl, 4
or cl, bl
add r14b, r9b
adc r13b, r8b
adc r12b, dl
adc r11b, cl
xor r14b, r9b
xor r13b, r8b
xor r12b, dl
xor r11b, cl
kmovb k1, r14d
shr r14b, 4
kmovb k2, r14d
kmovb k3, r13d
shr r13b, 4
kmovb k4, r13d
kmovb k5, r12d
shr r12b, 4
kmovb k6, r12d
kmovb k7, r11d
vpsubq ymm3 {k1}, ymm3, ymmword [0x140399fe0]
vpsubq ymm4 {k2}, ymm4, ymmword [0x140399fe0]
vpsubq ymm5 {k3}, ymm5, ymmword [0x140399fe0]
vpsubq ymm6 {k4}, ymm6, ymmword [0x140399fe0]
vpsubq ymm7 {k5}, ymm7, ymmword [0x140399fe0]
vpsubq ymm8 {k6}, ymm8, ymmword [0x140399fe0]
vpsubq ymm9 {k7}, ymm9, ymmword [0x140399fe0]
vpandq ymm3, ymm3, ymmword [0x140399fe0]
vpandq ymm4, ymm4, ymmword [0x140399fe0]
vpandq ymm5, ymm5, ymmword [0x140399fe0]
vpandq ymm6, ymm6, ymmword [0x140399fe0]
vpandq ymm7, ymm7, ymmword [0x140399fe0]
vpandq ymm8, ymm8, ymmword [0x140399fe0]
vpandq ymm9, ymm9, ymmword [0x140399fe0]
shr r11b, 4
kmovb k1, r11d
vpsubq ymm10 {k1}, ymm10, ymmword [0x140399fe0]
vpandq ymm10, ymm10, ymmword [0x140399fe0]
vmovdqu64 ymmword [rdi], ymm3
vmovdqu64 ymmword [rdi + 0x20], ymm4
vmovdqu64 ymmword [rdi + 0x40], ymm5
vmovdqu64 ymmword [rdi + 0x60], ymm6
vmovdqu64 ymmword [rdi + 0x80], ymm7
vmovdqu64 ymmword [rdi + 0xa0], ymm8
vmovdqu64 ymmword [rdi + 0xc0], ymm9
vmovdqu64 ymmword [rdi + 0xe0], ymm10
vzeroupper
lea rax, [rsp]
vmovdqa64 xmm6, xmmword [rax]
vmovdqa64 xmm7, xmmword [rax + 0x10]
vmovdqa64 xmm8, xmmword [rax + 0x20]
vmovdqa64 xmm9, xmmword [rax + 0x30]
vmovdqa64 xmm10, xmmword [rax + 0x40]
vmovdqa64 xmm11, xmmword [rax + 0x50]
vmovdqa64 xmm12, xmmword [rax + 0x60]
vmovdqa64 xmm13, xmmword [rax + 0x70]
vmovdqa64 xmm14, xmmword [rax + 0x80]
vmovdqa64 xmm15, xmmword [rax + 0x90]
lea rax, [rsp + 0xa8]
mov r15, qword [rax]
mov r14, qword [rax + 8]
mov r13, qword [rax + 0x10]
mov r12, qword [rax + 0x18]
mov rbp, qword [rax + 0x20]
mov rbx, qword [rax + 0x28]
lea rsp, [rax + 0x30]
mov rdi, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
repz ret
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r14
push r15
mov eax, 0x278
call fcn.1402c5820
sub rsp, rax
lea rbp, [rsp + 0x50]
mov rax, qword [0x14039ac80]
xor rax, rbp
mov qword [rbp + 0x210], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
test rax, rax
je 0x140191014
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
test eax, eax
je 0x140191014
lea rdi, [rbp + 0x268]
call fcn.140140fd0
mov r9, qword [rbp + 0x260]
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x28], rdi
xor esi, esi
mov edi, 0x200
mov qword [rsp + 0x20], rsi
mov rcx, qword [rax]
mov r8d, edi
or rcx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vsprintf]
mov ecx, 0xffffffff
mov qword [rsp + 0x20], rsi
test eax, eax
lea r9, [rbp]
lea rdx, [rbp + 0x10]
cmovs eax, ecx
mov rcx, rbx
test eax, eax
cmovs eax, edi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14019128e
mov r8, qword [rbp + 0x260]
mov rcx, r8
call fcn.14018e3c0
lea r9d, [rax + 1]
lea rax, [r9 + r9]
mov ebx, r9d
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140191041
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1402c5820
sub rsp, rcx
xor esi, esi
lea rdi, [rsp + 0x50]
test rdi, rdi
jne 0x140191068
lea rdi, str.no_stack_
jmp 0x1401911db
mov dword [rsp + 0x28], r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x14019115d
mov rcx, rsi
test rbx, rbx
je 0x1401911db
cmp rbx, 0x20
jb 0x140191142
mov rdx, qword [rbp + 0x260]
lea r8, [rbx - 1]
lea r8, [rdi + r8*2]
lea rax, [rdx - 1]
add rax, rbx
cmp rdi, rax
ja 0x1401910be
cmp r8, rdx
jae 0x140191150
mov r8, rbx
and r8, 0xffffffffffffffe0
mov rax, qword [rbp + 0x260]
lea rdx, [rdi + 0x20]
add rax, 0x10
nop dword [rax]
nop dword [rax + rax]
movq xmm0, qword [rax - 0x10]
lea rdx, [rdx + 0x40]
movq xmm1, qword [rax - 8]
lea rax, [rax + 0x20]
punpcklbw xmm0, xmm0
add rcx, 0x20
punpcklbw xmm1, xmm1
psraw xmm0, 8
psraw xmm1, 8
movdqu xmmword [rdx - 0x60], xmm0
movq xmm0, qword [rax - 0x20]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [rdx - 0x50], xmm1
movq xmm1, qword [rax - 0x18]
punpcklbw xmm1, xmm1
psraw xmm1, 8
movdqu xmmword [rdx - 0x40], xmm0
movdqu xmmword [rdx - 0x30], xmm1
cmp rcx, r8
jb 0x1401910e0
cmp rcx, rbx
jae 0x140191162
mov rdx, qword [rbp + 0x260]
nop dword [rax]
movsx eax, byte [rcx + rdx]
mov word [rdi + rcx*2], ax
inc rcx
jmp 0x14019113d
test rbx, rbx
je 0x1401911db
mov r10d, 0x53
lea r9, [0x140000000]
mov r8, rsi
lea r11d, [r10 + 0x20]
lea r14d, [r10 - 0x10]
lea r15d, [r10 + 0x10]
nop
cmp word [rdi + r8*2], 0x25
jne case.0x1401911b2.47
lea rdx, [rdi + 2]
lea rdx, [rdx + r8*2]
movzx eax, word [rdx]
add eax, 0xffffffd6
cmp eax, 0x49
ja case.0x1401911b2.47
movsxd rcx, eax
movzx eax, byte [r9 + rcx + 0x1912c8]
mov ecx, dword [r9 + rax*4 + 0x1912b0]
add rcx, r9
jmp rcx
inc r8
add rdx, 2
jmp 0x140191190
mov word [rdx], r10w
jmp case.0x1401911b2.47
mov word [rdx], r11w
jmp case.0x1401911b2.47
mov word [rdx], r14w
jmp case.0x1401911b2.47
mov word [rdx], r15w
inc r8
cmp r8, rbx
jb 0x140191180
lea rbx, [rbp + 0x268]
call fcn.140140fd0
mov qword [rsp + 0x28], rbx
lea rdx, [rbp + 0x10]
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8d, 0xff
mov rcx, qword [rax]
or rcx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vswprintf]
mov word [rbp + 0x20e], si
call fcn.140190de0
xor ecx, ecx
test eax, eax
jle 0x140191277
lea rdx, str.OpenSSL
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceW]
mov rbx, rax
test rax, rax
je 0x14019128e
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x10]
mov ecx, 1
mov qword [rbp], rax
lea rax, [rbp]
mov edx, ecx
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor r9d, r9d
mov word [rsp + 0x28], cx
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_ReportEventW]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
jmp 0x14019128e
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.OpenSSL:_FATAL
lea rdx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x210]
xor rcx, rbp
call fcn.1402c5880
lea rsp, [rbp + 0x228]
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret