Function at 0x140166070
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
sub rsp, 0x260
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
movaps xmmword [rax - 0xa8], xmm15
lea rbp, [rax - 0x1e8]
and rbp, 0xffffffffffffffe0
mov rax, rdx
movzx esi, r8b
shr rax, 5
lea r9, [rbp + 0x120]
mov rbx, rcx
lea r8, [rbp + 0x20]
xor edx, edx
lea rcx, [rsi + 1]
div rcx
mov rdi, qword [rbx + 0xe0]
lea rdx, [rbp]
mov r14, rax
mov rcx, rbx
lea rax, [rbp + 0x40]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
call fcn.140165990
test sil, sil
je 0x140166177
cmp byte [rbx + 0x1b0], 0
jne 0x140166177
mov r8d, pe_nt_image_headers64
lea r9d, [r8 + 0x40]
lea r10d, [r8 + 0x60]
lea r11d, [r8 + 0x20]
jmp 0x140166189
mov r8d, 0x40
lea r9d, [r8 + 0x40]
lea r10d, [r8 + 0x60]
lea r11d, [r8 + 0x20]
vmovdqu ymm4, ymmword [rbx + r10]
vmovdqu ymm5, ymmword [rbx + r9]
vmovdqu ymm6, ymmword [r11 + rbx]
vmovdqu ymm7, ymmword [r8 + rbx]
vmovdqu ymm8, ymmword [rbp + 0x40]
vmovdqu ymm9, ymmword [rbp + 0x60]
vmovdqu ymm10, ymmword [rbp + 0x80]
vmovdqu ymm11, ymmword [rbp + 0xa0]
vmovdqu ymm12, ymmword [rbp + 0xc0]
vmovdqu ymm13, ymmword [rbp + 0xe0]
vmovdqu ymm14, ymmword [rbp + 0x100]
vmovdqu ymm15, ymmword [rbp + 0x120]
lea rcx, [r14 - 0x40]
shl rcx, 5
lea rdx, [rdi + 0x800]
add rcx, rdi
xor eax, eax
nop
prefetcht0 byte [rdx]
prefetcht0 byte [rdx + 0x40]
vaesenc ymm0, ymm7, ymmword [rbp]
vaesenc ymm1, ymm0, ymmword [rbp + 0x20]
vaesenc ymm2, ymm1, ymm15
vaesenc ymm3, ymm2, ymm14
vaesenc ymm0, ymm3, ymm13
vaesenc ymm1, ymm0, ymm12
vaesenc ymm2, ymm1, ymm11
vaesenc ymm1, ymm6, ymmword [rbp]
vaesenc ymm3, ymm2, ymm10
vaesenc ymm0, ymm3, ymm9
vaesenc ymm7, ymm0, ymm8
vaesenc ymm0, ymm1, ymmword [rbp + 0x20]
vaesenc ymm2, ymm0, ymm15
vaesenc ymm3, ymm2, ymm14
vaesenc ymm1, ymm3, ymm13
vaesenc ymm0, ymm1, ymm12
vaesenc ymm2, ymm0, ymm11
vaesenc ymm0, ymm5, ymmword [rbp]
vaesenc ymm3, ymm2, ymm10
vaesenc ymm1, ymm3, ymm9
vaesenc ymm6, ymm1, ymm8
vaesenc ymm1, ymm0, ymmword [rbp + 0x20]
vaesenc ymm2, ymm1, ymm15
vaesenc ymm3, ymm2, ymm14
vaesenc ymm0, ymm3, ymm13
vaesenc ymm1, ymm0, ymm12
vaesenc ymm2, ymm1, ymm11
vaesenc ymm1, ymm4, ymmword [rbp]
vaesenc ymm3, ymm2, ymm10
vaesenc ymm0, ymm3, ymm9
vmovdqu ymmword [rdi], ymm7
vaesenc ymm5, ymm0, ymm8
vaesenc ymm0, ymm1, ymmword [rbp + 0x20]
vaesenc ymm2, ymm0, ymm15
vaesenc ymm3, ymm2, ymm14
vaesenc ymm1, ymm3, ymm13
vmovdqu ymmword [rdi + 0x20], ymm6
vaesenc ymm0, ymm1, ymm12
vmovdqu ymmword [rdi + 0x40], ymm5
vaesenc ymm2, ymm0, ymm11
vaesenc ymm3, ymm2, ymm10
vaesenc ymm1, ymm3, ymm9
vaesenc ymm4, ymm1, ymm8
vmovdqu ymmword [rdi + 0x60], ymm4
sub rdi, 0xffffffffffffff80
lea rdx, [rdx + 0x80]
cmp rdi, rcx
jb 0x1401661f0
add rcx, 0x800
inc eax
mov rdx, rdi
cmp eax, 2
jl 0x1401661f0
test sil, sil
je 0x140166331
cmp byte [rbx + 0x1b0], 0
je 0x140166331
vmovdqu ymmword [rbx + 0x130], ymm7
vmovdqu ymmword [rbx + 0x150], ymm6
vmovdqu ymmword [rbx + 0x170], ymm5
vmovdqu ymmword [rbx + 0x190], ymm4
vzeroupper
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop rbp
ret