Function at 0x14015c6c0
Capabilities:
Access the windows event log
Write file on windows

Disassembly:
shrd ebx, ebx, 2
vmovdqu xmm13, xmmword [r12]
vpxor xmm13, xmm13, xmm15
vpxor xmm12, xmm12, xmm13
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x50]
xor esi, edx
vpalignr xmm4, xmm1, xmm0, 8
mov edi, eax
add ebp, dword [rsp]
vpaddd xmm9, xmm10, xmm3
xor ebx, ecx
shld eax, eax, 5
vpsrldq xmm8, xmm3, 4
add ebp, esi
and edi, ebx
vpxor xmm4, xmm4, xmm0
xor ebx, ecx
add ebp, eax
vpxor xmm8, xmm8, xmm2
shrd eax, eax, 7
xor edi, ecx
mov esi, ebp
add edx, dword [rsp + 4]
vpxor xmm4, xmm4, xmm8
xor eax, ebx
shld ebp, ebp, 5
vmovdqa xmmword [rsp + 0x30], xmm9
add edx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x40]
and esi, eax
vpsrld xmm8, xmm4, 0x1f
xor eax, ebx
add edx, ebp
shrd ebp, ebp, 7
xor esi, ebx
vpslldq xmm9, xmm4, 0xc
vpaddd xmm4, xmm4, xmm4
mov edi, edx
add ecx, dword [rsp + 8]
xor ebp, eax
shld edx, edx, 5
vpor xmm4, xmm4, xmm8
vpsrld xmm8, xmm9, 0x1e
add ecx, esi
and edi, ebp
xor ebp, eax
add ecx, edx
vpslld xmm9, xmm9, 2
vpxor xmm4, xmm4, xmm8
shrd edx, edx, 7
xor edi, eax
mov esi, ecx
add ebx, dword [rsp + 0xc]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x30]
vpxor xmm4, xmm4, xmm9
xor edx, ebp
shld ecx, ecx, 5
add ebx, edi
and esi, edx
xor edx, ebp
add ebx, ecx
shrd ecx, ecx, 7
xor esi, ebp
vpalignr xmm5, xmm2, xmm1, 8
mov edi, ebx
add eax, dword [rsp + 0x10]
vpaddd xmm9, xmm10, xmm4
xor ecx, edx
shld ebx, ebx, 5
vpsrldq xmm8, xmm4, 4
add eax, esi
and edi, ecx
vpxor xmm5, xmm5, xmm1
xor ecx, edx
add eax, ebx
vpxor xmm8, xmm8, xmm3
shrd ebx, ebx, 7
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x20]
xor edi, edx
mov esi, eax
add ebp, dword [rsp + 0x14]
vpxor xmm5, xmm5, xmm8
xor ebx, ecx
shld eax, eax, 5
vmovdqa xmmword [rsp], xmm9
add ebp, edi
and esi, ebx
vpsrld xmm8, xmm5, 0x1f
xor ebx, ecx
add ebp, eax
shrd eax, eax, 7
xor esi, ecx
vpslldq xmm9, xmm5, 0xc
vpaddd xmm5, xmm5, xmm5
mov edi, ebp
add edx, dword [rsp + 0x18]
xor eax, ebx
shld ebp, ebp, 5
vpor xmm5, xmm5, xmm8
vpsrld xmm8, xmm9, 0x1e
add edx, esi
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x10]
and edi, eax
xor eax, ebx
add edx, ebp
vpslld xmm9, xmm9, 2
vpxor xmm5, xmm5, xmm8
shrd ebp, ebp, 7
xor edi, ebx
mov esi, edx
add ecx, dword [rsp + 0x1c]
vpxor xmm5, xmm5, xmm9
xor ebp, eax
shld edx, edx, 5
vmovdqa xmm10, xmmword [r11 + 0x10]
add ecx, edi
and esi, ebp
xor ebp, eax
add ecx, edx
shrd edx, edx, 7
xor esi, eax
vpalignr xmm6, xmm3, xmm2, 8
mov edi, ecx
add ebx, dword [rsp + 0x20]
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15]
vpaddd xmm9, xmm10, xmm5
xor edx, ebp
shld ecx, ecx, 5
vpsrldq xmm8, xmm5, 4
add ebx, esi
and edi, edx
vpxor xmm6, xmm6, xmm2
xor edx, ebp
add ebx, ecx
vpxor xmm8, xmm8, xmm4
shrd ecx, ecx, 7
xor edi, ebp
mov esi, ebx
add eax, dword [rsp + 0x24]
vpxor xmm6, xmm6, xmm8
xor ecx, edx
shld ebx, ebx, 5
vmovdqa xmmword [rsp + 0x10], xmm9
add eax, edi
and esi, ecx
vpsrld xmm8, xmm6, 0x1f
xor ecx, edx
add eax, ebx
shrd ebx, ebx, 7
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x10]
xor esi, edx
vpslldq xmm9, xmm6, 0xc
vpaddd xmm6, xmm6, xmm6
mov edi, eax
add ebp, dword [rsp + 0x28]
xor ebx, ecx
shld eax, eax, 5
vpor xmm6, xmm6, xmm8
vpsrld xmm8, xmm9, 0x1e
add ebp, esi
and edi, ebx
xor ebx, ecx
add ebp, eax
vpslld xmm9, xmm9, 2
vpxor xmm6, xmm6, xmm8
shrd eax, eax, 7
xor edi, ecx
mov esi, ebp
add edx, dword [rsp + 0x2c]
vpxor xmm6, xmm6, xmm9
xor eax, ebx
shld ebp, ebp, 5
add edx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x20]
and esi, eax
xor eax, ebx
add edx, ebp
shrd ebp, ebp, 7
xor esi, ebx
vpalignr xmm7, xmm4, xmm3, 8
mov edi, edx
add ecx, dword [rsp + 0x30]
vpaddd xmm9, xmm10, xmm6
xor ebp, eax
shld edx, edx, 5
vpsrldq xmm8, xmm6, 4
add ecx, esi
and edi, ebp
vpxor xmm7, xmm7, xmm3
xor ebp, eax
add ecx, edx
vpxor xmm8, xmm8, xmm5
shrd edx, edx, 7
xor edi, eax
mov esi, ecx
add ebx, dword [rsp + 0x34]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x30]
vpxor xmm7, xmm7, xmm8
xor edx, ebp
shld ecx, ecx, 5
vmovdqa xmmword [rsp + 0x20], xmm9
add ebx, edi
and esi, edx
vpsrld xmm8, xmm7, 0x1f
xor edx, ebp
add ebx, ecx
shrd ecx, ecx, 7
xor esi, ebp
vpslldq xmm9, xmm7, 0xc
vpaddd xmm7, xmm7, xmm7
mov edi, ebx
add eax, dword [rsp + 0x38]
xor ecx, edx
shld ebx, ebx, 5
vpor xmm7, xmm7, xmm8
vpsrld xmm8, xmm9, 0x1e
add eax, esi
and edi, ecx
xor ecx, edx
add eax, ebx
vpslld xmm9, xmm9, 2
vpxor xmm7, xmm7, xmm8
shrd ebx, ebx, 7
cmp r8d, 0xb
jb 0x14005011b
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x40]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x50]
je 0x14005011b
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x60]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x70]
vaesenclast xmm12, xmm12, xmm15
vmovups xmm15, xmmword [r15 - 0x70]
vmovups xmm14, xmmword [r15 - 0x60]
xor edi, edx
mov esi, eax
add ebp, dword [rsp + 0x3c]
vpxor xmm7, xmm7, xmm9
xor ebx, ecx
shld eax, eax, 5
add ebp, edi
and esi, ebx
xor ebx, ecx
add ebp, eax
vpalignr xmm8, xmm7, xmm6, 8
vpxor xmm0, xmm0, xmm4
shrd eax, eax, 7
xor esi, ecx
mov edi, ebp
add edx, dword [rsp]
vpxor xmm0, xmm0, xmm1
xor eax, ebx
shld ebp, ebp, 5
vpaddd xmm9, xmm10, xmm7
add edx, esi
vmovdqu xmm13, xmmword [r12 + 0x10]
vpxor xmm13, xmm13, xmm15
vmovups xmmword [r12 + r13], xmm12
vpxor xmm12, xmm12, xmm13
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x50]
and edi, eax
vpxor xmm0, xmm0, xmm8
xor eax, ebx
add edx, ebp
shrd ebp, ebp, 7
xor edi, ebx
vpsrld xmm8, xmm0, 0x1e
vmovdqa xmmword [rsp + 0x30], xmm9
mov esi, edx
add ecx, dword [rsp + 4]
xor ebp, eax
shld edx, edx, 5
vpslld xmm0, xmm0, 2
add ecx, edi
and esi, ebp
xor ebp, eax
add ecx, edx
shrd edx, edx, 7
xor esi, eax
mov edi, ecx
add ebx, dword [rsp + 8]
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x40]
vpor xmm0, xmm0, xmm8
xor edx, ebp
shld ecx, ecx, 5
add ebx, esi
and edi, edx
xor edx, ebp
add ebx, ecx
add eax, dword [rsp + 0xc]
xor edi, ebp
mov esi, ebx
shld ebx, ebx, 5
add eax, edi
xor esi, edx
shrd ecx, ecx, 7
add eax, ebx
vpalignr xmm8, xmm0, xmm7, 8
vpxor xmm1, xmm1, xmm5
add ebp, dword [rsp + 0x10]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x30]
xor esi, ecx
mov edi, eax
shld eax, eax, 5
vpxor xmm1, xmm1, xmm2
add ebp, esi
xor edi, ecx
vpaddd xmm9, xmm10, xmm0
shrd ebx, ebx, 7
add ebp, eax
vpxor xmm1, xmm1, xmm8
add edx, dword [rsp + 0x14]
xor edi, ebx
mov esi, ebp
shld ebp, ebp, 5
vpsrld xmm8, xmm1, 0x1e
vmovdqa xmmword [rsp], xmm9
add edx, edi
xor esi, ebx
shrd eax, eax, 7
add edx, ebp
vpslld xmm1, xmm1, 2
add ecx, dword [rsp + 0x18]
xor esi, eax
mov edi, edx
shld edx, edx, 5
add ecx, esi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x20]
xor edi, eax
shrd ebp, ebp, 7
add ecx, edx
vpor xmm1, xmm1, xmm8
add ebx, dword [rsp + 0x1c]
xor edi, ebp
mov esi, ecx
shld ecx, ecx, 5
add ebx, edi
xor esi, ebp
shrd edx, edx, 7
add ebx, ecx
vpalignr xmm8, xmm1, xmm0, 8
vpxor xmm2, xmm2, xmm6
add eax, dword [rsp + 0x20]
xor esi, edx
mov edi, ebx
shld ebx, ebx, 5
vpxor xmm2, xmm2, xmm3
add eax, esi
xor edi, edx
vpaddd xmm9, xmm10, xmm1
vmovdqa xmm10, xmmword [r11 + 0x20]
shrd ecx, ecx, 7
add eax, ebx
vpxor xmm2, xmm2, xmm8
add ebp, dword [rsp + 0x24]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x10]
xor edi, ecx
mov esi, eax
shld eax, eax, 5
vpsrld xmm8, xmm2, 0x1e
vmovdqa xmmword [rsp + 0x10], xmm9
add ebp, edi
xor esi, ecx
shrd ebx, ebx, 7
add ebp, eax
vpslld xmm2, xmm2, 2
add edx, dword [rsp + 0x28]
xor esi, ebx
mov edi, ebp
shld ebp, ebp, 5
add edx, esi
xor edi, ebx
shrd eax, eax, 7
add edx, ebp
vpor xmm2, xmm2, xmm8
add ecx, dword [rsp + 0x2c]
xor edi, eax
mov esi, edx
shld edx, edx, 5
add ecx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15]
xor esi, eax
shrd ebp, ebp, 7
add ecx, edx
vpalignr xmm8, xmm2, xmm1, 8
vpxor xmm3, xmm3, xmm7
add ebx, dword [rsp + 0x30]
xor esi, ebp
mov edi, ecx
shld ecx, ecx, 5
vpxor xmm3, xmm3, xmm4
add ebx, esi
xor edi, ebp
vpaddd xmm9, xmm10, xmm2
shrd edx, edx, 7
add ebx, ecx
vpxor xmm3, xmm3, xmm8
add eax, dword [rsp + 0x34]
xor edi, edx
mov esi, ebx
shld ebx, ebx, 5
vpsrld xmm8, xmm3, 0x1e
vmovdqa xmmword [rsp + 0x20], xmm9
add eax, edi
xor esi, edx
shrd ecx, ecx, 7
add eax, ebx
vpslld xmm3, xmm3, 2
add ebp, dword [rsp + 0x38]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x10]
xor esi, ecx
mov edi, eax
shld eax, eax, 5
add ebp, esi
xor edi, ecx
shrd ebx, ebx, 7
add ebp, eax
vpor xmm3, xmm3, xmm8
add edx, dword [rsp + 0x3c]
xor edi, ebx
mov esi, ebp
shld ebp, ebp, 5
add edx, edi
xor esi, ebx
shrd eax, eax, 7
add edx, ebp
vpalignr xmm8, xmm3, xmm2, 8
vpxor xmm4, xmm4, xmm0
add ecx, dword [rsp]
xor esi, eax
mov edi, edx
shld edx, edx, 5
vpxor xmm4, xmm4, xmm5
add ecx, esi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x20]
xor edi, eax
vpaddd xmm9, xmm10, xmm3
shrd ebp, ebp, 7
add ecx, edx
vpxor xmm4, xmm4, xmm8
add ebx, dword [rsp + 4]
xor edi, ebp
mov esi, ecx
shld ecx, ecx, 5
vpsrld xmm8, xmm4, 0x1e
vmovdqa xmmword [rsp + 0x30], xmm9
add ebx, edi
xor esi, ebp
shrd edx, edx, 7
add ebx, ecx
vpslld xmm4, xmm4, 2
add eax, dword [rsp + 8]
xor esi, edx
mov edi, ebx
shld ebx, ebx, 5
add eax, esi
xor edi, edx
shrd ecx, ecx, 7
add eax, ebx
vpor xmm4, xmm4, xmm8
add ebp, dword [rsp + 0xc]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x30]
xor edi, ecx
mov esi, eax
shld eax, eax, 5
add ebp, edi
xor esi, ecx
shrd ebx, ebx, 7
add ebp, eax
vpalignr xmm8, xmm4, xmm3, 8
vpxor xmm5, xmm5, xmm1
add edx, dword [rsp + 0x10]
xor esi, ebx
mov edi, ebp
shld ebp, ebp, 5
vpxor xmm5, xmm5, xmm6
add edx, esi
xor edi, ebx
vpaddd xmm9, xmm10, xmm4
shrd eax, eax, 7
add edx, ebp
vpxor xmm5, xmm5, xmm8
add ecx, dword [rsp + 0x14]
xor edi, eax
mov esi, edx
shld edx, edx, 5
vpsrld xmm8, xmm5, 0x1e
vmovdqa xmmword [rsp], xmm9
add ecx, edi
cmp r8d, 0xb
jb 0x1400504dc
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x40]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x50]
je 0x1400504dc
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x60]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x70]
vaesenclast xmm12, xmm12, xmm15
vmovups xmm15, xmmword [r15 - 0x70]
vmovups xmm14, xmmword [r15 - 0x60]
xor esi, eax
shrd ebp, ebp, 7
add ecx, edx
vpslld xmm5, xmm5, 2
add ebx, dword [rsp + 0x18]
xor esi, ebp
mov edi, ecx
shld ecx, ecx, 5
add ebx, esi
xor edi, ebp
shrd edx, edx, 7
add ebx, ecx
vpor xmm5, xmm5, xmm8
add eax, dword [rsp + 0x1c]
shrd ecx, ecx, 7
mov esi, ebx
xor edi, edx
shld ebx, ebx, 5
add eax, edi
xor esi, ecx
xor ecx, edx
add eax, ebx
vpalignr xmm8, xmm5, xmm4, 8
vpxor xmm6, xmm6, xmm2
add ebp, dword [rsp + 0x20]
vmovdqu xmm13, xmmword [r12 + 0x20]
vpxor xmm13, xmm13, xmm15
vmovups xmmword [r13 + r12 + 0x10], xmm12
vpxor xmm12, xmm12, xmm13
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x50]
and esi, ecx
xor ecx, edx
shrd ebx, ebx, 7
vpxor xmm6, xmm6, xmm7
mov edi, eax
xor esi, ecx
vpaddd xmm9, xmm10, xmm5
shld eax, eax, 5
add ebp, esi
vpxor xmm6, xmm6, xmm8
xor edi, ebx
xor ebx, ecx
add ebp, eax
add edx, dword [rsp + 0x24]
vpsrld xmm8, xmm6, 0x1e
vmovdqa xmmword [rsp + 0x10], xmm9
and edi, ebx
xor ebx, ecx
shrd eax, eax, 7
mov esi, ebp
vpslld xmm6, xmm6, 2
xor edi, ebx
shld ebp, ebp, 5
add edx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x40]
xor esi, eax
xor eax, ebx
add edx, ebp
add ecx, dword [rsp + 0x28]
and esi, eax
vpor xmm6, xmm6, xmm8
xor eax, ebx
shrd ebp, ebp, 7
mov edi, edx
xor esi, eax
shld edx, edx, 5
add ecx, esi
xor edi, ebp
xor ebp, eax
add ecx, edx
add ebx, dword [rsp + 0x2c]
and edi, ebp
xor ebp, eax
shrd edx, edx, 7
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x30]
mov esi, ecx
xor edi, ebp
shld ecx, ecx, 5
add ebx, edi
xor esi, edx
xor edx, ebp
add ebx, ecx
vpalignr xmm8, xmm6, xmm5, 8
vpxor xmm7, xmm7, xmm3
add eax, dword [rsp + 0x30]
and esi, edx
xor edx, ebp
shrd ecx, ecx, 7
vpxor xmm7, xmm7, xmm0
mov edi, ebx
xor esi, edx
vpaddd xmm9, xmm10, xmm6
vmovdqa xmm10, xmmword [r11 + 0x30]
shld ebx, ebx, 5
add eax, esi
vpxor xmm7, xmm7, xmm8
xor edi, ecx
xor ecx, edx
add eax, ebx
add ebp, dword [rsp + 0x34]
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x20]
vpsrld xmm8, xmm7, 0x1e
vmovdqa xmmword [rsp + 0x20], xmm9
and edi, ecx
xor ecx, edx
shrd ebx, ebx, 7
mov esi, eax
vpslld xmm7, xmm7, 2
xor edi, ecx
shld eax, eax, 5
add ebp, edi
xor esi, ebx
xor ebx, ecx
add ebp, eax
add edx, dword [rsp + 0x38]
and esi, ebx
vpor xmm7, xmm7, xmm8
xor ebx, ecx
shrd eax, eax, 7
mov edi, ebp
xor esi, ebx
shld ebp, ebp, 5
add edx, esi
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x10]
xor edi, eax
xor eax, ebx
add edx, ebp
add ecx, dword [rsp + 0x3c]
and edi, eax
xor eax, ebx
shrd ebp, ebp, 7
mov esi, edx
xor edi, eax
shld edx, edx, 5
add ecx, edi
xor esi, ebp
xor ebp, eax
add ecx, edx
vpalignr xmm8, xmm7, xmm6, 8
vpxor xmm0, xmm0, xmm4
add ebx, dword [rsp]
and esi, ebp
xor ebp, eax
shrd edx, edx, 7
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15]
vpxor xmm0, xmm0, xmm1
mov edi, ecx
xor esi, ebp
vpaddd xmm9, xmm10, xmm7
shld ecx, ecx, 5
add ebx, esi
vpxor xmm0, xmm0, xmm8
xor edi, edx
xor edx, ebp
add ebx, ecx
add eax, dword [rsp + 4]
vpsrld xmm8, xmm0, 0x1e
vmovdqa xmmword [rsp + 0x30], xmm9
and edi, edx
xor edx, ebp
shrd ecx, ecx, 7
mov esi, ebx
vpslld xmm0, xmm0, 2
xor edi, edx
shld ebx, ebx, 5
add eax, edi
xor esi, ecx
xor ecx, edx
add eax, ebx
add ebp, dword [rsp + 8]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x10]
and esi, ecx
vpor xmm0, xmm0, xmm8
xor ecx, edx
shrd ebx, ebx, 7
mov edi, eax
xor esi, ecx
shld eax, eax, 5
add ebp, esi
xor edi, ebx
xor ebx, ecx
add ebp, eax
add edx, dword [rsp + 0xc]
and edi, ebx
xor ebx, ecx
shrd eax, eax, 7
mov esi, ebp
xor edi, ebx
shld ebp, ebp, 5
add edx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x20]
xor esi, eax
xor eax, ebx
add edx, ebp
vpalignr xmm8, xmm0, xmm7, 8
vpxor xmm1, xmm1, xmm5
add ecx, dword [rsp + 0x10]
and esi, eax
xor eax, ebx
shrd ebp, ebp, 7
vpxor xmm1, xmm1, xmm2
mov edi, edx
xor esi, eax
vpaddd xmm9, xmm10, xmm0
shld edx, edx, 5
add ecx, esi
vpxor xmm1, xmm1, xmm8
xor edi, ebp
xor ebp, eax
add ecx, edx
add ebx, dword [rsp + 0x14]
vpsrld xmm8, xmm1, 0x1e
vmovdqa xmmword [rsp], xmm9
and edi, ebp
xor ebp, eax
shrd edx, edx, 7
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x30]
mov esi, ecx
vpslld xmm1, xmm1, 2
xor edi, ebp
shld ecx, ecx, 5
add ebx, edi
xor esi, edx
xor edx, ebp
add ebx, ecx
add eax, dword [rsp + 0x18]
and esi, edx
vpor xmm1, xmm1, xmm8
xor edx, ebp
shrd ecx, ecx, 7
mov edi, ebx
xor esi, edx
shld ebx, ebx, 5
add eax, esi
xor edi, ecx
xor ecx, edx
add eax, ebx
add ebp, dword [rsp + 0x1c]
cmp r8d, 0xb
jb 0x140050837
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x40]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x50]
je 0x140050837
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x60]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x70]
vaesenclast xmm12, xmm12, xmm15
vmovups xmm15, xmmword [r15 - 0x70]
vmovups xmm14, xmmword [r15 - 0x60]
and edi, ecx
xor ecx, edx
shrd ebx, ebx, 7
mov esi, eax
xor edi, ecx
shld eax, eax, 5
add ebp, edi
xor esi, ebx
xor ebx, ecx
add ebp, eax
vpalignr xmm8, xmm1, xmm0, 8
vpxor xmm2, xmm2, xmm6
add edx, dword [rsp + 0x20]
and esi, ebx
xor ebx, ecx
shrd eax, eax, 7
vpxor xmm2, xmm2, xmm3
mov edi, ebp
xor esi, ebx
vpaddd xmm9, xmm10, xmm1
shld ebp, ebp, 5
add edx, esi
vmovdqu xmm13, xmmword [r12 + 0x30]
vpxor xmm13, xmm13, xmm15
vmovups xmmword [r13 + r12 + 0x20], xmm12
vpxor xmm12, xmm12, xmm13
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x50]
vpxor xmm2, xmm2, xmm8
xor edi, eax
xor eax, ebx
add edx, ebp
add ecx, dword [rsp + 0x24]
vpsrld xmm8, xmm2, 0x1e
vmovdqa xmmword [rsp + 0x10], xmm9
and edi, eax
xor eax, ebx
shrd ebp, ebp, 7
mov esi, edx
vpslld xmm2, xmm2, 2
xor edi, eax
shld edx, edx, 5
add ecx, edi
xor esi, ebp
xor ebp, eax
add ecx, edx
add ebx, dword [rsp + 0x28]
and esi, ebp
vpor xmm2, xmm2, xmm8
xor ebp, eax
shrd edx, edx, 7
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x40]
mov edi, ecx
xor esi, ebp
shld ecx, ecx, 5
add ebx, esi
xor edi, edx
xor edx, ebp
add ebx, ecx
add eax, dword [rsp + 0x2c]
and edi, edx
xor edx, ebp
shrd ecx, ecx, 7
mov esi, ebx
xor edi, edx
shld ebx, ebx, 5
add eax, edi
xor esi, edx
add eax, ebx
vpalignr xmm8, xmm2, xmm1, 8
vpxor xmm3, xmm3, xmm7
add ebp, dword [rsp + 0x30]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x30]
xor esi, ecx
mov edi, eax
shld eax, eax, 5
vpxor xmm3, xmm3, xmm4
add ebp, esi
xor edi, ecx
vpaddd xmm9, xmm10, xmm2
shrd ebx, ebx, 7
add ebp, eax
vpxor xmm3, xmm3, xmm8
add edx, dword [rsp + 0x34]
xor edi, ebx
mov esi, ebp
shld ebp, ebp, 5
vpsrld xmm8, xmm3, 0x1e
vmovdqa xmmword [rsp + 0x20], xmm9
add edx, edi
xor esi, ebx
shrd eax, eax, 7
add edx, ebp
vpslld xmm3, xmm3, 2
add ecx, dword [rsp + 0x38]
xor esi, eax
mov edi, edx
shld edx, edx, 5
add ecx, esi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 - 0x20]
xor edi, eax
shrd ebp, ebp, 7
add ecx, edx
vpor xmm3, xmm3, xmm8
add ebx, dword [rsp + 0x3c]
xor edi, ebp
mov esi, ecx
shld ecx, ecx, 5
add ebx, edi
xor esi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp]
vpaddd xmm9, xmm10, xmm3
xor esi, edx
mov edi, ebx
shld ebx, ebx, 5
add eax, esi
vmovdqa xmmword [rsp + 0x30], xmm9
xor edi, edx
shrd ecx, ecx, 7
add eax, ebx
add ebp, dword [rsp + 4]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 - 0x10]
xor edi, ecx
mov esi, eax
shld eax, eax, 5
add ebp, edi
xor esi, ecx
shrd ebx, ebx, 7
add ebp, eax
add edx, dword [rsp + 8]
xor esi, ebx
mov edi, ebp
shld ebp, ebp, 5
add edx, esi
xor edi, ebx
shrd eax, eax, 7
add edx, ebp
add ecx, dword [rsp + 0xc]
xor edi, eax
mov esi, edx
shld edx, edx, 5
add ecx, edi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15]
xor esi, eax
shrd ebp, ebp, 7
add ecx, edx
cmp r10, r14
je 0x140050c46
vmovdqa xmm9, xmmword [r11 + 0x40]
vmovdqa xmm10, xmmword [r11]
vmovdqu xmm0, xmmword [r10]
vmovdqu xmm1, xmmword [r10 + 0x10]
vmovdqu xmm2, xmmword [r10 + 0x20]
vmovdqu xmm3, xmmword [r10 + 0x30]
vpshufb xmm0, xmm0, xmm9
add r10, 0x40
add ebx, dword [rsp + 0x10]
xor esi, ebp
vpshufb xmm1, xmm1, xmm9
mov edi, ecx
shld ecx, ecx, 5
vpaddd xmm8, xmm0, xmm10
add ebx, esi
xor edi, ebp
shrd edx, edx, 7
add ebx, ecx
vmovdqa xmmword [rsp], xmm8
add eax, dword [rsp + 0x14]
xor edi, edx
mov esi, ebx
shld ebx, ebx, 5
add eax, edi
xor esi, edx
shrd ecx, ecx, 7
add eax, ebx
add ebp, dword [rsp + 0x18]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x10]
xor esi, ecx
mov edi, eax
shld eax, eax, 5
add ebp, esi
xor edi, ecx
shrd ebx, ebx, 7
add ebp, eax
add edx, dword [rsp + 0x1c]
xor edi, ebx
mov esi, ebp
shld ebp, ebp, 5
add edx, edi
xor esi, ebx
shrd eax, eax, 7
add edx, ebp
add ecx, dword [rsp + 0x20]
xor esi, eax
vpshufb xmm2, xmm2, xmm9
mov edi, edx
shld edx, edx, 5
vpaddd xmm8, xmm1, xmm10
add ecx, esi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x20]
xor edi, eax
shrd ebp, ebp, 7
add ecx, edx
vmovdqa xmmword [rsp + 0x10], xmm8
add ebx, dword [rsp + 0x24]
xor edi, ebp
mov esi, ecx
shld ecx, ecx, 5
add ebx, edi
xor esi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp + 0x28]
xor esi, edx
mov edi, ebx
shld ebx, ebx, 5
add eax, esi
xor edi, edx
shrd ecx, ecx, 7
add eax, ebx
add ebp, dword [rsp + 0x2c]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x30]
xor edi, ecx
mov esi, eax
shld eax, eax, 5
add ebp, edi
xor esi, ecx
shrd ebx, ebx, 7
add ebp, eax
add edx, dword [rsp + 0x30]
xor esi, ebx
vpshufb xmm3, xmm3, xmm9
mov edi, ebp
shld ebp, ebp, 5
vpaddd xmm8, xmm2, xmm10
add edx, esi
xor edi, ebx
shrd eax, eax, 7
add edx, ebp
vmovdqa xmmword [rsp + 0x20], xmm8
add ecx, dword [rsp + 0x34]
xor edi, eax
mov esi, edx
shld edx, edx, 5
add ecx, edi
cmp r8d, 0xb
jb 0x140050bc4
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x40]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x50]
je 0x140050bc4
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x60]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x70]
vaesenclast xmm12, xmm12, xmm15
vmovups xmm15, xmmword [r15 - 0x70]
vmovups xmm14, xmmword [r15 - 0x60]
xor esi, eax
shrd ebp, ebp, 7
add ecx, edx
add ebx, dword [rsp + 0x38]
xor esi, ebp
mov edi, ecx
shld ecx, ecx, 5
add ebx, esi
xor edi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp + 0x3c]
xor edi, edx
mov esi, ebx
shld ebx, ebx, 5
add eax, edi
shrd ecx, ecx, 7
add eax, ebx
vmovups xmmword [r13 + r12 + 0x30], xmm12
lea r12, [r12 + 0x40]
add eax, dword [r9]
add esi, dword [r9 + 4]
add ecx, dword [r9 + 8]
add edx, dword [r9 + 0xc]
mov dword [r9], eax
add ebp, dword [r9 + 0x10]
mov dword [r9 + 4], esi
mov ebx, esi
mov dword [r9 + 8], ecx
mov edi, ecx
mov dword [r9 + 0xc], edx
xor edi, edx
mov dword [r9 + 0x10], ebp
and esi, edi
jmp 0x14004fdc0
add ebx, dword [rsp + 0x10]
xor esi, ebp
mov edi, ecx
shld ecx, ecx, 5
add ebx, esi
xor edi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp + 0x14]
xor edi, edx
mov esi, ebx
shld ebx, ebx, 5
add eax, edi
xor esi, edx
shrd ecx, ecx, 7
add eax, ebx
add ebp, dword [rsp + 0x18]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x10]
xor esi, ecx
mov edi, eax
shld eax, eax, 5
add ebp, esi
xor edi, ecx
shrd ebx, ebx, 7
add ebp, eax
add edx, dword [rsp + 0x1c]
xor edi, ebx
mov esi, ebp
shld ebp, ebp, 5
add edx, edi
xor esi, ebx
shrd eax, eax, 7
add edx, ebp
add ecx, dword [rsp + 0x20]
xor esi, eax
mov edi, edx
shld edx, edx, 5
add ecx, esi
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x20]
xor edi, eax
shrd ebp, ebp, 7
add ecx, edx
add ebx, dword [rsp + 0x24]
xor edi, ebp
mov esi, ecx
shld ecx, ecx, 5
add ebx, edi
xor esi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp + 0x28]
xor esi, edx
mov edi, ebx
shld ebx, ebx, 5
add eax, esi
xor edi, edx
shrd ecx, ecx, 7
add eax, ebx
add ebp, dword [rsp + 0x2c]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x30]
xor edi, ecx
mov esi, eax
shld eax, eax, 5
add ebp, edi
xor esi, ecx
shrd ebx, ebx, 7
add ebp, eax
add edx, dword [rsp + 0x30]
xor esi, ebx
mov edi, ebp
shld ebp, ebp, 5
add edx, esi
xor edi, ebx
shrd eax, eax, 7
add edx, ebp
add ecx, dword [rsp + 0x34]
xor edi, eax
mov esi, edx
shld edx, edx, 5
add ecx, edi
cmp r8d, 0xb
jb 0x140050d6f
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x40]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x50]
je 0x140050d6f
vaesenc xmm12, xmm12, xmm15
vmovups xmm14, xmmword [r15 + 0x60]
vaesenc xmm12, xmm12, xmm14
vmovups xmm15, xmmword [r15 + 0x70]
vaesenclast xmm12, xmm12, xmm15
vmovups xmm15, xmmword [r15 - 0x70]
vmovups xmm14, xmmword [r15 - 0x60]
xor esi, eax
shrd ebp, ebp, 7
add ecx, edx
add ebx, dword [rsp + 0x38]
xor esi, ebp
mov edi, ecx
shld ecx, ecx, 5
add ebx, esi
xor edi, ebp
shrd edx, edx, 7
add ebx, ecx
add eax, dword [rsp + 0x3c]
xor edi, edx
mov esi, ebx
shld ebx, ebx, 5
add eax, edi
shrd ecx, ecx, 7
add eax, ebx
vmovups xmmword [r13 + r12 + 0x30], xmm12
mov r8, qword [rsp + 0x58]
add eax, dword [r9]
add esi, dword [r9 + 4]
add ecx, dword [r9 + 8]
mov dword [r9], eax
add edx, dword [r9 + 0xc]
mov dword [r9 + 4], esi
add ebp, dword [r9 + 0x10]
mov dword [r9 + 8], ecx
mov dword [r9 + 0xc], edx
mov dword [r9 + 0x10], ebp
vmovups xmmword [r8], xmm12
vzeroall
movaps xmm6, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm9, xmmword [rsp + 0x90]
movaps xmm10, xmmword [rsp + 0xa0]
movaps xmm11, xmmword [rsp + 0xb0]
movaps xmm12, xmmword [rsp + 0xc0]
movaps xmm13, xmmword [rsp + 0xd0]
movaps xmm14, xmmword [rsp + 0xe0]
movaps xmm15, xmmword [rsp + 0xf0]
lea rsi, [rsp + 0x108]
mov r15, qword [rsi]
mov r14, qword [rsi + 8]
mov r13, qword [rsi + 0x10]
mov r12, qword [rsi + 0x18]
mov rbp, qword [rsi + 0x20]
mov rbx, qword [rsi + 0x28]
lea rsp, [rsi + 0x30]
mov rdi, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
repz ret
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r14
push r15
mov eax, 0x278
call fcn.1402a15c0
sub rsp, rax
lea rbp, [rsp + 0x50]
mov rax, qword [0x14038ce18]
xor rax, rbp
mov qword [rbp + 0x210], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
test rax, rax
je 0x14015c783
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileType]
test eax, eax
je 0x14015c783
lea rdi, [rbp + 0x268]
call fcn.140129d90
mov r9, qword [rbp + 0x260]
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x28], rdi
xor esi, esi
mov edi, 0x200
mov qword [rsp + 0x20], rsi
mov rcx, qword [rax]
mov r8d, edi
or rcx, 1
call fcn.1402abda0
test eax, eax
mov qword [rsp + 0x20], rsi
mov ecx, 0xffffffff
lea r9, [rbp]
cmovs eax, ecx
lea rdx, [rbp + 0x10]
test eax, eax
mov rcx, rbx
cmovs eax, edi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x14015ca3d
mov r8, qword [rbp + 0x260]
mov rcx, r8
call fcn.14015cac0
lea r9d, [rax + 1]
lea rax, [r9 + r9]
mov ebx, r9d
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14015c7b0
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1402a15c0
sub rsp, rcx
xor esi, esi
lea rdi, [rsp + 0x50]
test rdi, rdi
jne 0x14015c7d7
lea rdi, str.no_stack_
jmp 0x14015c98b
mov dword [rsp + 0x28], r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x14015c90d
mov rcx, rsi
test rbx, rbx
je 0x14015c8ec
cmp rbx, 4
jb 0x14015c8f1
mov rdx, qword [rbp + 0x260]
lea r8, [rbx - 1]
lea r8, [rdi + r8*2]
lea rax, [rdx - 1]
add rax, rbx
cmp rdi, rax
ja 0x14015c82d
cmp r8, rdx
jae 0x14015c900
cmp rbx, 0x20
jb 0x14015c8b9
mov rdx, rbx
mov r9, rbx
and edx, 0x1f
sub r9, rdx
mov rax, qword [rbp + 0x260]
lea r8, [rdi + 0x20]
add rax, 0x10
movq xmm0, qword [rax - 0x10]
lea r8, [r8 + 0x40]
movq xmm1, qword [rax - 8]
lea rax, [rax + 0x20]
punpcklbw xmm0, xmm0
add rcx, 0x20
punpcklbw xmm1, xmm1
psraw xmm0, 8
psraw xmm1, 8
movdqu xmmword [r8 - 0x60], xmm0
movq xmm0, qword [rax - 0x20]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r8 - 0x50], xmm1
movq xmm1, qword [rax - 0x18]
punpcklbw xmm1, xmm1
psraw xmm1, 8
movdqu xmmword [r8 - 0x40], xmm0
movdqu xmmword [r8 - 0x30], xmm1
cmp rcx, r9
jb 0x14015c852
cmp rdx, 4
jb 0x14015c8ec
mov rax, rbx
and rax, 0xfffffffffffffffc
mov rdx, qword [rbp + 0x260]
nop word [rax + rax]
movd xmm0, dword [rcx + rdx]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movq qword [rdi + rcx*2], xmm0
add rcx, 4
cmp rcx, rax
jb 0x14015c8d0
cmp rcx, rbx
jae 0x14015c90d
mov rdx, qword [rbp + 0x260]
nop dword [rax + rax]
movsx eax, byte [rcx + rdx]
mov word [rdi + rcx*2], ax
inc rcx
jmp 0x14015c8ec
mov r8, rsi
test rbx, rbx
je 0x14015c98b
mov r10d, 0x53
lea r9, [0x140000000]
lea r11d, [r10 + 0x20]
lea r14d, [r10 - 0x10]
lea r15d, [r10 + 0x10]
nop
cmp word [rdi + r8*2], 0x25
jne case.0x14015c962.47
lea rdx, [rdi + 2]
lea rdx, [rdx + r8*2]
movzx eax, word [rdx]
add eax, 0xffffffd6
cmp eax, 0x49
ja case.0x14015c962.47
movsxd rcx, eax
movzx eax, byte [r9 + rcx + 0x15ca74]
mov ecx, dword [r9 + rax*4 + 0x15ca5c]
add rcx, r9
jmp rcx
inc r8
add rdx, 2
jmp 0x14015c940
mov word [rdx], r10w
jmp case.0x14015c962.47
mov word [rdx], r11w
jmp case.0x14015c962.47
mov word [rdx], r14w
jmp case.0x14015c962.47
mov word [rdx], r15w
inc r8
cmp r8, rbx
jb 0x14015c930
lea rbx, [rbp + 0x268]
call fcn.140129d90
mov qword [rsp + 0x28], rbx
lea rdx, [rbp + 0x10]
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8d, 0xff
mov rcx, qword [rax]
or rcx, 1
call fcn.1402ac108
mov word [rbp + 0x20e], si
call fcn.14015c550
xor ecx, ecx
test eax, eax
jle 0x14015ca26
lea rdx, str.OpenSSL
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceW]
mov rbx, rax
test rax, rax
je 0x14015ca3d
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x10]
mov ecx, 1
mov qword [rbp], rax
lea rax, [rbp]
mov edx, ecx
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor r9d, r9d
mov word [rsp + 0x28], cx
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_ReportEventW]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
jmp 0x14015ca3d
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.OpenSSL:_FATAL
lea rdx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x210]
xor rcx, rbp
call fcn.1402a12f0
lea rsp, [rbp + 0x228]
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret