Function at 0x14021f930
Capabilities:
Access the windows event log
Write file on windows

Disassembly:
cmp rdx, 0x10
jne 0x140050560
movdqu xmm2, xmmword [rdi]
movdqu xmm3, xmmword [r8]
movdqa xmm4, xmm2
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x20]
xorps xmm2, xmm0
aesdec xmm2, xmm1
dec r10d
movups xmm1, xmmword [rcx]
lea rcx, [rcx + 0x10]
jne 0x140050521
aesdeclast xmm2, xmm1
pxor xmm0, xmm0
pxor xmm1, xmm1
movdqu xmmword [r8], xmm4
xorps xmm2, xmm3
pxor xmm3, xmm3
movups xmmword [rsi], xmm2
pxor xmm2, xmm2
jmp 0x140050e3c
lea r11, [rsp]
push rbp
sub rsp, 0xb0
and rsp, 0xfffffffffffffff0
movaps xmmword [rsp + 0x10], xmm6
movaps xmmword [rsp + 0x20], xmm7
movaps xmmword [rsp + 0x30], xmm8
movaps xmmword [rsp + 0x40], xmm9
movaps xmmword [rsp + 0x50], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x70], xmm12
movaps xmmword [rsp + 0x80], xmm13
movaps xmmword [rsp + 0x90], xmm14
movaps xmmword [rsp + 0xa0], xmm15
mov rbp, rcx
movups xmm10, xmmword [r8]
mov eax, r10d
cmp rdx, 0x50
jbe 0x140050bbf
movups xmm0, xmmword [rcx]
movdqu xmm2, xmmword [rdi]
movdqu xmm3, xmmword [rdi + 0x10]
movdqa xmm11, xmm2
movdqu xmm4, xmmword [rdi + 0x20]
movdqa xmm12, xmm3
movdqu xmm5, xmmword [rdi + 0x30]
movdqa xmm13, xmm4
movdqu xmm6, xmmword [rdi + 0x40]
movdqa xmm14, xmm5
movdqu xmm7, xmmword [rdi + 0x50]
movdqa xmm15, xmm6
mov r9d, dword [0x140624d94]
cmp rdx, 0x70
jbe 0x140050a16
and r9d, 0x4400000
sub rdx, 0x50
cmp r9d, 0x400000
je 0x140050b4d
sub rdx, 0x20
lea rcx, [rcx + 0x70]
jmp 0x140050648
movups xmmword [rsi], xmm9
lea rsi, [rsi + 0x10]
movdqu xmm8, xmmword [rdi + 0x60]
pxor xmm2, xmm0
movdqu xmm9, xmmword [rdi + 0x70]
pxor xmm3, xmm0
movups xmm1, xmmword [rcx - 0x60]
pxor xmm4, xmm0
mov rbp, 0xffffffffffffffff
cmp rdx, 0x70
pxor xmm5, xmm0
pxor xmm6, xmm0
pxor xmm7, xmm0
pxor xmm8, xmm0
aesdec xmm2, xmm1
pxor xmm9, xmm0
movups xmm0, xmmword [rcx - 0x50]
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
adc rbp, 0
and rbp, 0x80
aesdec xmm9, xmm1
add rbp, rdi
movups xmm1, xmmword [rcx - 0x40]
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx - 0x30]
nop
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movups xmm1, xmmword [rcx - 0x20]
nop
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx - 0x10]
nop
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movups xmm1, xmmword [rcx]
nop
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx + 0x10]
nop
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movups xmm1, xmmword [rcx + 0x20]
cmp eax, 0xb
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx + 0x30]
jb 0x1400508e0
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movups xmm1, xmmword [rcx + 0x40]
nop
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx + 0x50]
je 0x1400508e0
aesdec xmm2, xmm1
aesdec xmm3, xmm1
aesdec xmm4, xmm1
aesdec xmm5, xmm1
aesdec xmm6, xmm1
aesdec xmm7, xmm1
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movups xmm1, xmmword [rcx + 0x60]
nop
aesdec xmm2, xmm0
aesdec xmm3, xmm0
aesdec xmm4, xmm0
aesdec xmm5, xmm0
aesdec xmm6, xmm0
aesdec xmm7, xmm0
aesdec xmm8, xmm0
aesdec xmm9, xmm0
movups xmm0, xmmword [rcx + 0x70]
jmp 0x1400508e0
aesdec xmm2, xmm1
aesdec xmm3, xmm1
pxor xmm10, xmm0
pxor xmm11, xmm0
aesdec xmm4, xmm1
aesdec xmm5, xmm1
pxor xmm12, xmm0
pxor xmm13, xmm0
aesdec xmm6, xmm1
aesdec xmm7, xmm1
pxor xmm14, xmm0
pxor xmm15, xmm0
aesdec xmm8, xmm1
aesdec xmm9, xmm1
movdqu xmm1, xmmword [rdi + 0x50]
aesdeclast xmm2, xmm10
movdqu xmm10, xmmword [rdi + 0x60]
pxor xmm1, xmm0
aesdeclast xmm3, xmm11
pxor xmm10, xmm0
movdqu xmm0, xmmword [rdi + 0x70]
aesdeclast xmm4, xmm12
lea rdi, [rdi + 0x80]
movdqu xmm11, xmmword [rbp]
aesdeclast xmm5, xmm13
aesdeclast xmm6, xmm14
movdqu xmm12, xmmword [rbp + 0x10]
movdqu xmm13, xmmword [rbp + 0x20]
aesdeclast xmm7, xmm15
aesdeclast xmm8, xmm1
movdqu xmm14, xmmword [rbp + 0x30]
movdqu xmm15, xmmword [rbp + 0x40]
aesdeclast xmm9, xmm10
movdqa xmm10, xmm0
movdqu xmm1, xmmword [rbp + 0x50]
movups xmm0, xmmword [rcx - 0x70]
movups xmmword [rsi], xmm2
movdqa xmm2, xmm11
movups xmmword [rsi + 0x10], xmm3
movdqa xmm3, xmm12
movups xmmword [rsi + 0x20], xmm4
movdqa xmm4, xmm13
movups xmmword [rsi + 0x30], xmm5
movdqa xmm5, xmm14
movups xmmword [rsi + 0x40], xmm6
movdqa xmm6, xmm15
movups xmmword [rsi + 0x50], xmm7
movdqa xmm7, xmm1
movups xmmword [rsi + 0x60], xmm8
lea rsi, [rsi + 0x70]
sub rdx, 0x80
ja 0x140050640
movaps xmm2, xmm9
lea rcx, [rcx - 0x70]
add rdx, 0x70
jle 0x140050d70
movups xmmword [rsi], xmm9
lea rsi, [rsi + 0x10]
cmp rdx, 0x50
jbe 0x140050bbf
movaps xmm2, xmm11
cmp rdx, 0x60
ja 0x140050a80
movaps xmm8, xmm7
call fcn.14004cf80
pxor xmm2, xmm10
movaps xmm10, xmm8
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm3, xmm3
pxor xmm5, xmm13
movdqu xmmword [rsi + 0x20], xmm4
pxor xmm4, xmm4
pxor xmm6, xmm14
movdqu xmmword [rsi + 0x30], xmm5
pxor xmm5, xmm5
pxor xmm7, xmm15
movdqu xmmword [rsi + 0x40], xmm6
pxor xmm6, xmm6
lea rsi, [rsi + 0x50]
movdqa xmm2, xmm7
pxor xmm7, xmm7
jmp 0x140050d7c
movups xmm8, xmmword [rdi + 0x60]
xorps xmm9, xmm9
call fcn.14004d170
movups xmm9, xmmword [rdi + 0x50]
pxor xmm2, xmm10
movups xmm10, xmmword [rdi + 0x60]
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm3, xmm3
pxor xmm5, xmm13
movdqu xmmword [rsi + 0x20], xmm4
pxor xmm4, xmm4
pxor xmm6, xmm14
movdqu xmmword [rsi + 0x30], xmm5
pxor xmm5, xmm5
pxor xmm7, xmm15
movdqu xmmword [rsi + 0x40], xmm6
pxor xmm6, xmm6
pxor xmm8, xmm9
movdqu xmmword [rsi + 0x50], xmm7
pxor xmm7, xmm7
lea rsi, [rsi + 0x60]
movdqa xmm2, xmm8
pxor xmm8, xmm8
pxor xmm9, xmm9
jmp 0x140050d7c
movups xmmword [rsi], xmm7
lea rsi, [rsi + 0x10]
movdqu xmm2, xmmword [rdi]
movdqu xmm3, xmmword [rdi + 0x10]
movdqa xmm11, xmm2
movdqu xmm4, xmmword [rdi + 0x20]
movdqa xmm12, xmm3
movdqu xmm5, xmmword [rdi + 0x30]
movdqa xmm13, xmm4
movdqu xmm6, xmmword [rdi + 0x40]
movdqa xmm14, xmm5
movdqu xmm7, xmmword [rdi + 0x50]
movdqa xmm15, xmm6
lea rdi, [rdi + 0x60]
movdqa xmm8, xmm7
call fcn.14004cf80
pxor xmm2, xmm10
movdqa xmm10, xmm8
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm5, xmm13
movdqu xmmword [rsi + 0x20], xmm4
pxor xmm6, xmm14
mov rcx, rbp
movdqu xmmword [rsi + 0x30], xmm5
pxor xmm7, xmm15
mov eax, r10d
movdqu xmmword [rsi + 0x40], xmm6
lea rsi, [rsi + 0x50]
sub rdx, 0x60
ja 0x140050b10
movdqa xmm2, xmm7
add rdx, 0x50
jle 0x140050d70
movups xmmword [rsi], xmm7
lea rsi, [rsi + 0x10]
movups xmm2, xmmword [rdi]
sub rdx, 0x10
jbe 0x140050c70
movups xmm3, xmmword [rdi + 0x10]
movaps xmm11, xmm2
sub rdx, 0x10
jbe 0x140050cb0
movups xmm4, xmmword [rdi + 0x20]
movaps xmm12, xmm3
sub rdx, 0x10
jbe 0x140050ce0
movups xmm5, xmmword [rdi + 0x30]
movaps xmm13, xmm4
sub rdx, 0x10
jbe 0x140050d20
movups xmm6, xmmword [rdi + 0x40]
movaps xmm14, xmm5
movaps xmm15, xmm6
xorps xmm7, xmm7
call fcn.14004cf80
pxor xmm2, xmm10
movaps xmm10, xmm15
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm3, xmm3
pxor xmm5, xmm13
movdqu xmmword [rsi + 0x20], xmm4
pxor xmm4, xmm4
pxor xmm6, xmm14
movdqu xmmword [rsi + 0x30], xmm5
pxor xmm5, xmm5
lea rsi, [rsi + 0x40]
movdqa xmm2, xmm6
pxor xmm6, xmm6
pxor xmm7, xmm7
sub rdx, 0x10
jmp 0x140050d7c
movaps xmm11, xmm2
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x20]
xorps xmm2, xmm0
aesdec xmm2, xmm1
dec eax
movups xmm1, xmmword [rcx]
lea rcx, [rcx + 0x10]
jne 0x140050c82
aesdeclast xmm2, xmm1
xorps xmm2, xmm10
movaps xmm10, xmm11
jmp 0x140050d7c
movaps xmm12, xmm3
call fcn.14004cc40
pxor xmm2, xmm10
movaps xmm10, xmm12
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
movdqa xmm2, xmm3
pxor xmm3, xmm3
lea rsi, [rsi + 0x10]
jmp 0x140050d7c
movaps xmm13, xmm4
call fcn.14004cd10
pxor xmm2, xmm10
movaps xmm10, xmm13
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm3, xmm3
movdqa xmm2, xmm4
pxor xmm4, xmm4
lea rsi, [rsi + 0x20]
jmp 0x140050d7c
movaps xmm14, xmm5
call fcn.14004ce10
pxor xmm2, xmm10
movaps xmm10, xmm14
pxor xmm3, xmm11
movdqu xmmword [rsi], xmm2
pxor xmm4, xmm12
movdqu xmmword [rsi + 0x10], xmm3
pxor xmm3, xmm3
pxor xmm5, xmm13
movdqu xmmword [rsi + 0x20], xmm4
pxor xmm4, xmm4
movdqa xmm2, xmm5
pxor xmm5, xmm5
lea rsi, [rsi + 0x30]
jmp 0x140050d7c
pxor xmm3, xmm3
pxor xmm4, xmm4
pxor xmm5, xmm5
movups xmmword [r8], xmm10
and rdx, 0xf
jne 0x140050d90
movups xmmword [rsi], xmm2
pxor xmm2, xmm2
jmp 0x140050db0
movaps xmmword [rsp], xmm2
pxor xmm2, xmm2
mov ecx, reloc.WS2_32.dll_recv
mov rdi, rsi
sub rcx, rdx
lea rsi, [rsp]
rep movsb byte [rdi], byte [rsi]
nop
movdqa xmmword [rsp], xmm2
xorps xmm0, xmm0
pxor xmm1, xmm1
movaps xmm6, xmmword [rsp + 0x10]
movaps xmmword [rsp + 0x10], xmm0
movaps xmm7, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
movaps xmm8, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x30], xmm0
movaps xmm9, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm10, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm11, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x60], xmm0
movaps xmm12, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm13, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x80], xmm0
movaps xmm14, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x90], xmm0
movaps xmm15, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0xa0], xmm0
mov rbp, qword [r11 - 8]
lea rsp, [r11]
mov rdi, qword [rsp + 8]
mov rsi, qword [rsp + 0x10]
repz ret
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rsi
push rdi
push r14
push r15
mov eax, 0x278
call fcn.1404881b0
sub rsp, rax
lea rbp, [rsp + 0x50]
mov rax, qword [0x1405e3440]
xor rax, rbp
mov qword [rbp + 0x210], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.DLL_GetStdHandle]
mov rbx, rax
test rax, rax
je 0x14021f9f3
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetFileType]
test eax, eax
je 0x14021f9f3
lea rdi, [rbp + 0x268]
call fcn.140208d70
mov r9, qword [rbp + 0x260]
lea rdx, [rbp + 0x10]
mov qword [rsp + 0x28], rdi
xor esi, esi
mov edi, 0x200
mov qword [rsp + 0x20], rsi
mov rcx, qword [rax]
mov r8d, edi
or rcx, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vsprintf
test eax, eax
mov qword [rsp + 0x20], rsi
mov ecx, 0xffffffff
lea r9, [rbp]
cmovs eax, ecx
lea rdx, [rbp + 0x10]
test eax, eax
mov rcx, rbx
cmovs eax, edi
mov r8d, eax
call qword [sym.imp.KERNEL32.DLL_WriteFile]
jmp 0x14021fca1
mov r8, qword [rbp + 0x260]
mov rcx, r8
call fcn.14021fd30
lea r9d, [rax + 1]
lea rax, [r9 + r9]
mov ebx, r9d
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14021fa20
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1404881b0
sub rsp, rcx
xor esi, esi
lea rdi, [rsp + 0x50]
test rdi, rdi
jne 0x14021fa47
lea rdi, str.no_stack_
jmp 0x14021fbef
mov dword [rsp + 0x28], r9d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
test eax, eax
jne 0x14021fb7d
mov rcx, rsi
test rbx, rbx
je 0x14021fb5c
cmp rbx, 4
jb 0x14021fb61
mov rdx, qword [rbp + 0x260]
lea r8, [rbx - 1]
lea r8, [rdi + r8*2]
lea rax, [rdx - 1]
add rax, rbx
cmp rdi, rax
ja 0x14021fa9d
cmp r8, rdx
jae 0x14021fb70
cmp rbx, 0x20
jb 0x14021fb29
mov rdx, rbx
mov r9, rbx
and edx, 0x1f
sub r9, rdx
mov rax, qword [rbp + 0x260]
lea r8, [rdi + 0x20]
add rax, 0x10
movq xmm0, qword [rax - 0x10]
lea r8, [r8 + 0x40]
movq xmm1, qword [rax - 8]
lea rax, [rax + 0x20]
punpcklbw xmm0, xmm0
add rcx, 0x20
punpcklbw xmm1, xmm1
psraw xmm0, 8
psraw xmm1, 8
movdqu xmmword [r8 - 0x60], xmm0
movq xmm0, qword [rax - 0x20]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movdqu xmmword [r8 - 0x50], xmm1
movq xmm1, qword [rax - 0x18]
punpcklbw xmm1, xmm1
psraw xmm1, 8
movdqu xmmword [r8 - 0x40], xmm0
movdqu xmmword [r8 - 0x30], xmm1
cmp rcx, r9
jb 0x14021fac2
cmp rdx, 4
jb 0x14021fb5c
mov rax, rbx
and rax, 0xfffffffffffffffc
mov rdx, qword [rbp + 0x260]
nop word [rax + rax]
movd xmm0, dword [rcx + rdx]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movq qword [rdi + rcx*2], xmm0
add rcx, 4
cmp rcx, rax
jb 0x14021fb40
cmp rcx, rbx
jae 0x14021fb7d
mov rdx, qword [rbp + 0x260]
nop dword [rax + rax]
movsx eax, byte [rcx + rdx]
mov word [rdi + rcx*2], ax
inc rcx
jmp 0x14021fb5c
mov r8, rsi
test rbx, rbx
je 0x14021fbef
lea r9, [0x140000000]
nop dword [rax]
cmp word [rdi + r8*2], 0x25
jne case.0x14021fbc2.47
lea rdx, [rdi + 2]
lea rdx, [rdx + r8*2]
movzx eax, word [rdx]
add eax, 0xffffffd6
cmp eax, 0x49
ja case.0x14021fbc2.47
movsxd rcx, eax
movzx eax, byte [r9 + rcx + 0x21fcd8]
mov ecx, dword [r9 + rax*4 + 0x21fcc0]
add rcx, r9
jmp rcx
inc r8
add rdx, 2
jmp 0x14021fba0
mov word [rdx], 0x53
jmp case.0x14021fbc2.47
mov word [rdx], reloc.WS2_32.dll_WSAStartup
jmp case.0x14021fbc2.47
mov word [rdx], 0x43
jmp case.0x14021fbc2.47
mov word [rdx], 0x63
inc r8
cmp r8, rbx
jb 0x14021fb90
lea rbx, [rbp + 0x268]
call fcn.140208d70
mov qword [rsp + 0x28], rbx
lea rdx, [rbp + 0x10]
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8d, 0xff
mov rcx, qword [rax]
or rcx, 1
call sub.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vswprintf
mov word [rbp + 0x20e], si
call fcn.14021f7c0
xor ecx, ecx
test eax, eax
jle 0x14021fc8a
lea rdx, str.OpenSSL
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceW]
mov rbx, rax
test rax, rax
je 0x14021fca1
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x10]
mov ecx, 1
mov qword [rbp], rax
lea rax, [rbp]
mov edx, ecx
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], esi
xor r9d, r9d
mov word [rsp + 0x28], cx
mov rcx, rbx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_ReportEventW]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
jmp 0x14021fca1
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.OpenSSL:_FATAL
lea rdx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x210]
xor rcx, rbp
call fcn.140487ca0
lea rsp, [rbp + 0x228]
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret