Function at 0x4cb240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov ebx, dword [rcx + 0xa8]
mov r13, rcx
and ebx, 0x7f
test r8, r8
je 0x4cc9c8
mov qword [rsp + 0x88], rdx
mov r15, r8
jmp 0x4cc978
mov rdx, qword [rsp + 0x88]
mov rbx, rax
mov r8, rax
call sub.msvcrt.dll_memcpy
add qword [rsp + 0x88], rbx
sub r15, rbx
mov eax, dword [r13]
rorx edx, dword [r13 + 0x9c], 0xb
mov ecx, dword [r13 + 0x84]
add eax, edx
mov edx, dword [r13 + 0x80]
and ecx, dword [r13 + 0x94]
and edx, dword [r13 + 0x98]
xor edx, ecx
mov ecx, dword [r13 + 0x8c]
xor edx, dword [r13 + 0x90]
xor ecx, dword [r13 + 0x90]
and ecx, dword [r13 + 0x88]
xor edx, ecx
rorx edx, edx, 7
add edx, eax
rorx eax, dword [r13 + 0x98], 0xb
add eax, dword [r13 + 4]
mov ecx, eax
mov eax, dword [r13 + 0x88]
rorx edi, dword [r13 + 0x94], 0xb
xor eax, dword [r13 + 0x8c]
and eax, dword [r13 + 0x84]
mov r8d, eax
mov eax, dword [r13 + 0x80]
mov r9d, dword [r13 + 0x84]
and eax, dword [r13 + 0x90]
xor eax, dword [r13 + 0x8c]
xor eax, r8d
mov r8d, dword [r13 + 0x94]
and r8d, edx
xor eax, r8d
rorx eax, eax, 7
add eax, ecx
mov ecx, dword [r13 + 8]
add ecx, edi
mov edi, dword [r13 + 0x84]
xor edi, dword [r13 + 0x88]
and edi, dword [r13 + 0x80]
xor edi, dword [r13 + 0x88]
mov r8d, edi
mov edi, dword [r13 + 0x8c]
and edi, edx
xor edi, r8d
mov r8d, dword [r13 + 0x90]
and r8d, eax
xor edi, r8d
rorx edi, edi, 7
add edi, ecx
mov ecx, dword [r13 + 0xc]
rorx r8d, dword [r13 + 0x90], 0xb
add ecx, r8d
mov r8d, dword [r13 + 0x80]
xor r8d, dword [r13 + 0x84]
and r8d, edx
xor r9d, r8d
mov r8d, dword [r13 + 0x88]
mov r10d, dword [r13 + 0x80]
and r8d, eax
xor r8d, r9d
mov r9d, dword [r13 + 0x8c]
rorx r11d, dword [r13 + 0x88], 0xb
and r9d, edi
xor r8d, r9d
rorx r8d, r8d, 7
add r8d, ecx
mov ecx, dword [r13 + 0x10]
rorx r9d, dword [r13 + 0x8c], 0xb
add ecx, r9d
mov r9d, dword [r13 + 0x80]
xor r9d, edx
and r9d, eax
xor r10d, r9d
mov r9d, dword [r13 + 0x84]
and r9d, edi
xor r9d, r10d
mov r10d, dword [r13 + 0x88]
and r10d, r8d
xor r9d, r10d
rorx r9d, r9d, 7
add r9d, ecx
mov ecx, dword [r13 + 0x14]
add ecx, r11d
mov r11d, edx
xor r11d, eax
and r11d, edi
xor r11d, edx
mov r10d, r11d
mov r11d, dword [r13 + 0x80]
and r11d, r8d
xor r11d, r10d
mov r10d, dword [r13 + 0x84]
and r10d, r9d
xor r11d, r10d
rorx r11d, r11d, 7
add r11d, ecx
mov ecx, dword [r13 + 0x18]
rorx r10d, dword [r13 + 0x84], 0xb
add ecx, r10d
mov r10d, eax
xor r10d, edi
and r10d, r8d
mov ebx, r10d
mov r10d, edx
xor ebx, eax
and r10d, r9d
xor r10d, ebx
mov ebx, dword [r13 + 0x80]
and ebx, r11d
xor r10d, ebx
rorx ebx, dword [r13 + 0x80], 0xb
add ebx, dword [r13 + 0x1c]
rorx r10d, r10d, 7
add r10d, ecx
mov ecx, ebx
mov ebx, edi
xor ebx, r8d
and ebx, r9d
xor ebx, edi
mov esi, ebx
mov ebx, eax
and ebx, r11d
xor ebx, esi
mov esi, edx
and esi, r10d
xor ebx, esi
mov esi, r8d
xor esi, r9d
and esi, r11d
rorx ebx, ebx, 7
add ebx, ecx
mov ecx, esi
mov esi, edi
xor ecx, r8d
and esi, r10d
xor esi, ecx
mov ecx, eax
and ecx, ebx
xor esi, ecx
mov ecx, r9d
xor ecx, r11d
and ecx, r10d
rorx edx, edx, 0xb
add edx, dword [r13 + 0x20]
rorx esi, esi, 7
add esi, edx
mov edx, ecx
mov ecx, r8d
xor edx, r9d
and ecx, ebx
xor ecx, edx
mov edx, edi
and edx, esi
xor ecx, edx
mov edx, r11d
xor edx, r10d
and edx, ebx
rorx eax, eax, 0xb
add eax, dword [r13 + 0x24]
rorx ecx, ecx, 7
add ecx, eax
mov eax, edx
mov edx, r9d
xor eax, r11d
and edx, esi
xor edx, eax
mov eax, r8d
rorx edi, edi, 0xb
add edi, dword [r13 + 0x28]
and eax, ecx
xor edx, eax
mov eax, dword [r13 + 0x2c]
rorx r8d, r8d, 0xb
add eax, r8d
mov r8d, r10d
xor r8d, ebx
and r8d, esi
rorx edx, edx, 7
add edx, edi
mov edi, r8d
mov r8d, r11d
xor edi, r10d
and r8d, ecx
xor r8d, edi
mov edi, r9d
and edi, edx
xor r8d, edi
rorx r8d, r8d, 7
add r8d, eax
mov eax, dword [r13 + 0x30]
rorx r9d, r9d, 0xb
add eax, r9d
mov r9d, ebx
xor r9d, esi
and r9d, ecx
mov edi, r9d
mov r9d, r10d
xor edi, ebx
and r9d, edx
xor r9d, edi
mov edi, r11d
and edi, r8d
xor r9d, edi
rorx r9d, r9d, 7
add r9d, eax
mov eax, dword [r13 + 0x34]
rorx r11d, r11d, 0xb
add eax, r11d
mov r11d, esi
xor r11d, ecx
and r11d, edx
mov edi, r11d
mov r11d, ebx
xor edi, esi
and r11d, r8d
xor r11d, edi
mov edi, r10d
and edi, r9d
xor r11d, edi
rorx r11d, r11d, 7
add r11d, eax
mov eax, dword [r13 + 0x38]
rorx r10d, r10d, 0xb
add eax, r10d
mov r10d, ecx
xor r10d, edx
and r10d, r8d
mov edi, r10d
mov r10d, esi
xor edi, ecx
and r10d, r9d
xor r10d, edi
mov edi, ebx
and edi, r11d
xor r10d, edi
rorx r10d, r10d, 7
add r10d, eax
mov eax, dword [r13 + 0x3c]
rorx ebx, ebx, 0xb
add eax, ebx
mov ebx, edx
xor ebx, r8d
and ebx, r9d
xor ebx, edx
mov edi, ebx
mov ebx, ecx
and ebx, r11d
xor ebx, edi
mov edi, esi
and edi, r10d
xor ebx, edi
rorx ebx, ebx, 7
add ebx, eax
mov eax, r8d
xor eax, r9d
and eax, r11d
xor eax, r8d
mov edi, eax
mov eax, edx
and eax, r10d
xor eax, edi
mov edi, ecx
and edi, ebx
xor eax, edi
rorx esi, esi, 0xb
rorx ecx, ecx, 0xb
add esi, dword [r13 + 0x40]
add ecx, dword [r13 + 0x44]
rorx eax, eax, 7
add eax, esi
mov esi, ecx
mov ecx, r9d
xor ecx, r11d
and ecx, r10d
xor ecx, r9d
mov edi, ecx
mov ecx, r8d
and ecx, ebx
xor ecx, edi
mov edi, edx
and edi, eax
xor ecx, edi
rorx edx, edx, 0xb
add edx, dword [r13 + 0x48]
rorx ecx, ecx, 7
add ecx, esi
mov esi, edx
mov edx, r11d
xor edx, r10d
and edx, ebx
xor edx, r11d
mov edi, edx
mov edx, r9d
and edx, eax
xor edx, edi
mov edi, r8d
and edi, ecx
xor edx, edi
rorx edx, edx, 7
add edx, esi
mov esi, dword [r13 + 0x4c]
rorx r8d, r8d, 0xb
add esi, r8d
mov r8d, r10d
xor r8d, ebx
and r8d, eax
mov edi, r8d
mov r8d, r11d
xor edi, r10d
and r8d, ecx
xor r8d, edi
mov edi, r9d
and edi, edx
xor r8d, edi
rorx r8d, r8d, 7
add r8d, esi
mov esi, dword [r13 + 0x50]
rorx r9d, r9d, 0xb
add esi, r9d
mov r9d, ebx
xor r9d, eax
and r9d, ecx
mov edi, r9d
mov r9d, r10d
xor edi, ebx
and r9d, edx
xor r9d, edi
mov edi, r11d
and edi, r8d
xor r9d, edi
rorx r9d, r9d, 7
add r9d, esi
mov esi, dword [r13 + 0x54]
rorx r11d, r11d, 0xb
add esi, r11d
mov r11d, eax
xor r11d, ecx
and r11d, edx
mov edi, r11d
mov r11d, ebx
xor edi, eax
and r11d, r8d
xor r11d, edi
mov edi, r10d
and edi, r9d
xor r11d, edi
rorx r11d, r11d, 7
add r11d, esi
mov esi, dword [r13 + 0x58]
rorx r10d, r10d, 0xb
add esi, r10d
mov r10d, ecx
xor r10d, edx
and r10d, r8d
mov edi, r10d
mov r10d, eax
xor edi, ecx
and r10d, r9d
xor r10d, edi
mov edi, ebx
and edi, r11d
xor r10d, edi
rorx ebx, ebx, 0xb
add ebx, dword [r13 + 0x5c]
rorx r10d, r10d, 7
add r10d, esi
mov esi, ebx
mov ebx, edx
xor ebx, r8d
and ebx, r9d
xor ebx, edx
mov edi, ebx
mov ebx, ecx
and ebx, r11d
xor ebx, edi
mov edi, eax
and edi, r10d
xor ebx, edi
rorx eax, eax, 0xb
add eax, dword [r13 + 0x60]
rorx ebx, ebx, 7
add ebx, esi
mov esi, eax
mov eax, r8d
xor eax, r9d
and eax, r11d
xor eax, r8d
mov edi, eax
mov eax, edx
and eax, r10d
xor eax, edi
mov edi, ecx
and edi, ebx
xor eax, edi
rorx eax, eax, 7
rorx ecx, ecx, 0xb
add eax, esi
add ecx, dword [r13 + 0x64]
mov esi, ecx
mov ecx, r9d
xor ecx, r11d
and ecx, r10d
xor ecx, r9d
mov edi, ecx
mov ecx, r8d
and ecx, ebx
xor ecx, edi
mov edi, edx
and edi, eax
xor ecx, edi
rorx edx, edx, 0xb
add edx, dword [r13 + 0x68]
rorx ecx, ecx, 7
add ecx, esi
mov esi, edx
mov edx, r11d
xor edx, r10d
and edx, ebx
xor edx, r11d
mov edi, edx
mov edx, r9d
and edx, eax
xor edx, edi
mov edi, r8d
and edi, ecx
xor edx, edi
rorx edx, edx, 7
add edx, esi
mov esi, dword [r13 + 0x6c]
rorx r8d, r8d, 0xb
add esi, r8d
mov r8d, r10d
xor r8d, ebx
and r8d, eax
mov edi, r8d
mov r8d, r11d
xor edi, r10d
and r8d, ecx
xor r8d, edi
mov edi, r9d
and edi, edx
xor r8d, edi
rorx r8d, r8d, 7
add r8d, esi
mov esi, dword [r13 + 0x70]
rorx r9d, r9d, 0xb
add esi, r9d
mov r9d, ebx
xor r9d, eax
and r9d, ecx
mov edi, r9d
mov r9d, r10d
xor edi, ebx
and r9d, edx
xor r9d, edi
mov edi, r11d
and edi, r8d
xor r9d, edi
rorx r9d, r9d, 7
add r9d, esi
mov esi, dword [r13 + 0x74]
rorx r11d, r11d, 0xb
add esi, r11d
mov r11d, eax
xor r11d, ecx
and r11d, edx
mov edi, r11d
mov r11d, ebx
xor edi, eax
and r11d, r8d
xor r11d, edi
mov edi, r10d
and edi, r9d
xor r11d, edi
rorx r11d, r11d, 7
add r11d, esi
mov esi, dword [r13 + 0x78]
rorx r10d, r10d, 0xb
add esi, r10d
mov r10d, ecx
xor r10d, edx
and r10d, r8d
mov edi, r10d
mov r10d, eax
xor edi, ecx
and r10d, r9d
xor r10d, edi
mov edi, ebx
and edi, r11d
xor r10d, edi
rorx ebx, ebx, 0xb
add ebx, dword [r13 + 0x7c]
rorx r10d, r10d, 7
add r10d, esi
mov esi, ebx
mov ebx, edx
xor ebx, r8d
and ebx, r9d
xor ebx, edx
mov edi, ebx
mov ebx, ecx
and ebx, r11d
xor ebx, edi
mov edi, eax
and edi, r10d
xor ebx, edi
rorx ebx, ebx, 7
add ebx, esi
mov esi, dword [r13 + 0x14]
rorx eax, eax, 0xb
lea ebp, [rsi + rax + 0x452821e6]
mov eax, r11d
mov esi, ecx
and eax, r10d
mov edi, r9d
xor esi, r8d
xor esi, eax
xor edi, r11d
andn eax, ebx, r9d
and edi, r10d
xor esi, eax
mov eax, r11d
xor edi, ecx
and eax, ebx
and esi, edx
xor eax, edi
xor eax, esi
mov esi, dword [r13 + 0x38]
rorx ecx, ecx, 0xb
rorx eax, eax, 7
add eax, ebp
lea ebp, [rsi + rcx + 0x38d01377]
mov ecx, r10d
mov esi, edx
and ecx, ebx
xor esi, r9d
mov edi, r11d
xor esi, ecx
xor edi, r10d
andn ecx, eax, r11d
and edi, ebx
xor esi, ecx
mov ecx, r10d
xor edi, edx
and ecx, eax
and esi, r8d
xor ecx, edi
xor ecx, esi
mov esi, dword [r13 + 0x68]
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, ebp
lea ebp, [rsi + rdx - 0x41ab9931]
mov edx, ebx
mov esi, r8d
and edx, eax
xor esi, r11d
xor esi, edx
mov edi, r10d
andn edx, ecx, r10d
xor esi, edx
and esi, r9d
xor edi, ebx
and edi, eax
mov edx, ebx
xor edi, r8d
and edx, ecx
xor edx, edi
xor edx, esi
mov esi, dword [r13 + 0x48]
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, ebp
lea ebp, [rsi + r8 + 0x34e90c6c]
mov r8d, eax
mov esi, r9d
and r8d, ecx
xor esi, r10d
mov edi, ebx
xor esi, r8d
xor edi, eax
andn r8d, edx, ebx
and edi, ecx
xor esi, r8d
mov r8d, eax
xor edi, r9d
and r8d, edx
and esi, r11d
xor r8d, edi
xor r8d, esi
mov esi, dword [r13 + 0x2c]
rorx r9d, r9d, 0xb
rorx r8d, r8d, 7
add r8d, ebp
lea ebp, [rsi + r9 - 0x3f53d649]
mov r9d, ecx
mov esi, r11d
and r9d, edx
xor esi, ebx
mov edi, eax
xor esi, r9d
xor edi, ecx
andn r9d, r8d, eax
and edi, edx
xor esi, r9d
mov r9d, ecx
xor edi, r11d
and r9d, r8d
and esi, r10d
xor r9d, edi
xor r9d, esi
mov esi, dword [r13 + 0x70]
rorx r11d, r11d, 0xb
rorx r9d, r9d, 7
add r9d, ebp
lea ebp, [rsi + r11 - 0x3683af23]
mov r11d, edx
mov esi, r10d
and r11d, r8d
xor esi, eax
mov edi, ecx
xor esi, r11d
xor edi, edx
andn r11d, r9d, ecx
and edi, r8d
xor esi, r11d
mov r11d, edx
xor edi, r10d
and r11d, r9d
and esi, ebx
xor r11d, edi
xor r11d, esi
mov esi, dword [r13 + 0x1c]
rorx r10d, r10d, 0xb
rorx r11d, r11d, 7
add r11d, ebp
lea ebp, [rsi + r10 + 0x3f84d5b5]
mov r10d, r8d
mov esi, ebx
and r10d, r9d
xor esi, ecx
mov edi, edx
xor esi, r10d
xor edi, r8d
andn r10d, r11d, edx
and edi, r9d
xor esi, r10d
mov r10d, r8d
xor edi, ebx
and r10d, r11d
and esi, eax
xor r10d, edi
xor r10d, esi
mov esi, dword [r13 + 0x40]
rorx ebx, ebx, 0xb
rorx r10d, r10d, 7
add r10d, ebp
lea ebp, [rsi + rbx - 0x4ab8f6e9]
mov ebx, r9d
mov esi, eax
and ebx, r11d
xor esi, edx
xor esi, ebx
mov edi, r8d
andn ebx, r10d, r8d
xor esi, ebx
and esi, ecx
xor edi, r9d
and edi, r11d
mov ebx, r9d
xor edi, eax
and ebx, r10d
xor ebx, edi
xor ebx, esi
mov esi, dword [r13]
rorx eax, eax, 0xb
rorx ebx, ebx, 7
add ebx, ebp
lea ebp, [rsi + rax - 0x6de92a27]
mov eax, r11d
mov esi, ecx
and eax, r10d
xor esi, r8d
mov edi, r9d
xor esi, eax
xor edi, r11d
andn eax, ebx, r9d
and edi, r10d
xor esi, eax
mov eax, r11d
xor edi, ecx
and eax, ebx
and esi, edx
xor eax, edi
xor eax, esi
mov esi, dword [r13 + 0x5c]
rorx ecx, ecx, 0xb
rorx eax, eax, 7
add eax, ebp
lea ebp, [rsi + rcx - 0x768604e5]
mov ecx, r10d
mov esi, edx
and ecx, ebx
xor esi, r9d
mov edi, r11d
xor esi, ecx
xor edi, r10d
andn ecx, eax, r11d
and edi, ebx
xor esi, ecx
mov ecx, r10d
xor edi, edx
and ecx, eax
and esi, r8d
xor ecx, edi
xor ecx, esi
mov esi, dword [r13 + 0x50]
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, ebp
lea ebp, [rsi + rdx - 0x2ecef45a]
mov edx, ebx
mov esi, r8d
and edx, eax
xor esi, r11d
mov edi, r10d
xor esi, edx
xor edi, ebx
andn edx, ecx, r10d
and edi, eax
xor esi, edx
mov edx, ebx
xor edi, r8d
and edx, ecx
and esi, r9d
xor edx, edi
xor edx, esi
mov esi, dword [r13 + 0x58]
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, ebp
lea ebp, [rsi + r8 - 0x67204a54]
mov r8d, eax
mov esi, r9d
and r8d, ecx
xor esi, r10d
mov edi, ebx
xor esi, r8d
xor edi, eax
andn r8d, edx, ebx
and edi, ecx
xor esi, r8d
mov r8d, eax
xor edi, r9d
and r8d, edx
and esi, r11d
xor r8d, edi
xor r8d, esi
mov esi, dword [r13 + 4]
rorx r9d, r9d, 0xb
rorx r8d, r8d, 7
add r8d, ebp
lea ebp, [rsi + r9 + 0x2ffd72db]
mov r9d, ecx
mov esi, r11d
and r9d, edx
xor esi, ebx
xor esi, r9d
mov edi, eax
andn r9d, r8d, eax
xor esi, r9d
xor edi, ecx
and edi, edx
mov r9d, ecx
xor edi, r11d
and r9d, r8d
and esi, r10d
xor r9d, edi
xor r9d, esi
mov esi, dword [r13 + 0x28]
rorx r11d, r11d, 0xb
rorx r9d, r9d, 7
add r9d, ebp
lea ebp, [rsi + r11 - 0x2fe52049]
mov r11d, edx
mov esi, r10d
and r11d, r8d
xor esi, eax
mov edi, ecx
xor esi, r11d
xor edi, edx
andn r11d, r9d, ecx
and edi, r8d
xor esi, r11d
mov r11d, edx
xor edi, r10d
and r11d, r9d
and esi, ebx
xor r11d, edi
xor r11d, esi
mov esi, dword [r13 + 0x10]
rorx r10d, r10d, 0xb
rorx r11d, r11d, 7
add r11d, ebp
lea ebp, [rsi + r10 - 0x471e5013]
mov r10d, r8d
mov esi, ebx
and r10d, r9d
xor esi, ecx
mov edi, edx
xor esi, r10d
xor edi, r8d
andn r10d, r11d, edx
and edi, r9d
xor esi, r10d
mov r10d, r8d
xor edi, ebx
and r10d, r11d
and esi, eax
xor r10d, edi
xor r10d, esi
mov esi, dword [r13 + 0x20]
rorx ebx, ebx, 0xb
rorx r10d, r10d, 7
add r10d, ebp
lea ebp, [rsi + rbx + 0x6a267e96]
mov ebx, r9d
mov esi, eax
and ebx, r11d
xor esi, edx
mov edi, r8d
xor esi, ebx
xor edi, r9d
andn ebx, r10d, r8d
and edi, r11d
xor esi, ebx
mov ebx, r9d
xor edi, eax
and ebx, r10d
and esi, ecx
xor ebx, edi
xor ebx, esi
mov esi, dword [r13 + 0x78]
rorx eax, eax, 0xb
rorx ebx, ebx, 7
add ebx, ebp
lea ebp, [rsi + rax - 0x45836fbb]
mov eax, r11d
mov esi, ecx
and eax, r10d
xor esi, r8d
mov edi, r9d
xor esi, eax
xor edi, r11d
andn eax, ebx, r9d
and edi, r10d
xor esi, eax
mov eax, r11d
xor edi, ecx
and eax, ebx
and esi, edx
xor eax, edi
xor eax, esi
mov esi, dword [r13 + 0xc]
rorx ecx, ecx, 0xb
rorx eax, eax, 7
add eax, ebp
lea ebp, [rsi + rcx - 0xed38067]
mov ecx, r10d
mov esi, edx
and ecx, ebx
xor esi, r9d
mov edi, r11d
xor esi, ecx
andn ecx, eax, r11d
xor edi, r10d
xor esi, ecx
and edi, ebx
mov ecx, r10d
xor edi, edx
and ecx, eax
and esi, r8d
xor ecx, edi
xor ecx, esi
mov esi, dword [r13 + 0x54]
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, ebp
lea ebp, [rsi + rdx + 0x24a19947]
mov edx, ebx
mov esi, r8d
and edx, eax
xor esi, r11d
mov edi, r10d
xor esi, edx
xor edi, ebx
andn edx, ecx, r10d
and edi, eax
xor esi, edx
mov edx, ebx
xor edi, r8d
and edx, ecx
and esi, r9d
xor edx, edi
xor edx, esi
mov esi, dword [r13 + 0x24]
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, ebp
lea ebp, [rsi + r8 - 0x4c6e9309]
mov r8d, eax
mov esi, r9d
and r8d, ecx
xor esi, r10d
mov edi, ebx
xor esi, r8d
xor edi, eax
andn r8d, edx, ebx
and edi, ecx
xor esi, r8d
mov r8d, eax
and esi, r11d
xor edi, r9d
and r8d, edx
xor r8d, edi
xor r8d, esi
mov esi, dword [r13 + 0x44]
rorx r9d, r9d, 0xb
rorx r8d, r8d, 7
add r8d, ebp
lea ebp, [rsi + r9 + 0x801f2e2]
mov r9d, ecx
mov esi, r11d
and r9d, edx
xor esi, ebx
mov edi, eax
xor esi, r9d
xor edi, ecx
andn r9d, r8d, eax
and edi, edx
xor esi, r9d
mov r9d, ecx
xor edi, r11d
and r9d, r8d
and esi, r10d
xor r9d, edi
xor r9d, esi
mov esi, dword [r13 + 0x60]
rorx r11d, r11d, 0xb
rorx r9d, r9d, 7
add r9d, ebp
lea ebp, [rsi + r11 - 0x7a7103ea]
mov r11d, edx
mov esi, r10d
and r11d, r8d
xor esi, eax
mov edi, ecx
xor esi, r11d
xor edi, edx
andn r11d, r9d, ecx
and edi, r8d
xor esi, r11d
mov r11d, edx
xor edi, r10d
and r11d, r9d
and esi, ebx
xor r11d, edi
xor r11d, esi
mov esi, dword [r13 + 0x74]
rorx r10d, r10d, 0xb
rorx r11d, r11d, 7
add r11d, ebp
lea ebp, [rsi + r10 + 0x636920d8]
mov r10d, r8d
mov esi, ebx
and r10d, r9d
xor esi, ecx
mov edi, edx
xor esi, r10d
xor edi, r8d
andn r10d, r11d, edx
and edi, r9d
xor esi, r10d
mov r10d, r8d
xor edi, ebx
and r10d, r11d
and esi, eax
xor r10d, edi
xor r10d, esi
mov esi, dword [r13 + 0x18]
mov edi, r9d
rorx ebx, ebx, 0xb
rorx r10d, r10d, 7
add r10d, ebp
lea ebp, [rsi + rbx + 0x71574e69]
mov ebx, eax
and edi, r11d
xor ebx, edx
mov esi, r8d
xor ebx, edi
xor esi, r9d
andn edi, r10d, r8d
and esi, r11d
xor ebx, edi
mov edi, r9d
xor esi, eax
and edi, r10d
and ebx, ecx
xor edi, esi
xor edi, ebx
mov ebx, dword [r13 + 0x4c]
rorx eax, eax, 0xb
rorx edi, edi, 7
add edi, ebp
lea ebp, [rbx + rax - 0x5ba7015d]
mov eax, r11d
mov ebx, ecx
and eax, r10d
xor ebx, r8d
mov esi, r9d
xor ebx, eax
xor esi, r11d
andn eax, edi, r9d
and esi, r10d
xor ebx, eax
mov eax, r11d
and ebx, edx
xor esi, ecx
and eax, edi
xor eax, esi
xor eax, ebx
mov ebx, dword [r13 + 0x30]
rorx ecx, ecx, 0xb
rorx eax, eax, 7
add eax, ebp
lea ebp, [rbx + rcx - 0xb6cc282]
mov ecx, r10d
mov ebx, edx
and ecx, edi
xor ebx, r9d
mov esi, r11d
xor ebx, ecx
xor esi, r10d
andn ecx, eax, r11d
and esi, edi
xor ebx, ecx
mov ecx, r10d
xor esi, edx
and ecx, eax
and ebx, r8d
xor ecx, esi
xor ecx, ebx
mov ebx, dword [r13 + 0x3c]
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, ebp
lea ebp, [rbx + rdx + 0xd95748f]
mov edx, edi
mov ebx, r8d
and edx, eax
xor ebx, r11d
mov esi, r10d
xor ebx, edx
xor esi, edi
andn edx, ecx, r10d
and esi, eax
xor ebx, edx
mov edx, edi
xor esi, r8d
and edx, ecx
and ebx, r9d
xor edx, esi
xor edx, ebx
mov ebx, dword [r13 + 0x34]
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, ebp
lea ebp, [rbx + r8 + 0x728eb658]
mov r8d, eax
mov ebx, r9d
and r8d, ecx
mov esi, edi
xor ebx, r10d
xor ebx, r8d
xor esi, eax
andn r8d, edx, edi
and esi, ecx
xor ebx, r8d
mov r8d, eax
xor esi, r9d
and r8d, edx
and ebx, r11d
xor r8d, esi
xor r8d, ebx
mov ebx, dword [r13 + 8]
rorx r9d, r9d, 0xb
rorx r8d, r8d, 7
add r8d, ebp
lea ebp, [rbx + r9 + 0x718bcd58]
mov r9d, ecx
mov ebx, r11d
and r9d, edx
xor ebx, edi
mov esi, eax
xor ebx, r9d
xor esi, ecx
andn r9d, r8d, eax
and esi, edx
xor ebx, r9d
mov r9d, ecx
xor esi, r11d
and r9d, r8d
xor r9d, esi
mov esi, dword [r13 + 0x64]
and ebx, r10d
xor r9d, ebx
rorx r11d, r11d, 0xb
mov ebx, edx
lea r12d, [rsi + r11 - 0x7deab512]
mov esi, r10d
and ebx, r8d
xor esi, eax
xor esi, ebx
rorx r9d, r9d, 7
add r9d, ebp
mov ebp, ecx
andn r11d, r9d, ecx
xor ebp, edx
xor r11d, esi
and r11d, edi
mov esi, edx
and ebp, r8d
xor ebp, r10d
and esi, r9d
xor esi, ebp
xor esi, r11d
mov ebp, edi
mov r11d, r8d
and r11d, r9d
xor ebp, ecx
mov r14d, dword [r13 + 0x7c]
rorx esi, esi, 7
add esi, r12d
mov r12d, edx
xor ebp, r11d
xor r12d, r8d
and r12d, r9d
rorx r10d, r10d, 0xb
lea r14d, [r14 + r10 + 0x7b54a41d]
andn r10d, esi, edx
xor r10d, ebp
mov ebp, r8d
xor r12d, edi
and ebp, esi
and r10d, eax
xor ebp, r12d
xor ebp, r10d
mov r12d, eax
mov r10d, r9d
and r10d, esi
xor r12d, edx
rorx ebp, ebp, 7
add ebp, r14d
mov r14d, dword [r13 + 0x6c]
xor r12d, r10d
rorx edi, edi, 0xb
lea r14d, [r14 + rdi - 0x3da5a64b]
andn edi, ebp, r8d
xor edi, r12d
mov r12d, r8d
and edi, ecx
xor r12d, r9d
mov dword [rsp + 0x2c], edi
and r12d, esi
mov edi, r9d
and edi, ebp
xor r12d, eax
xor r12d, edi
xor r12d, dword [rsp + 0x2c]
rorx edi, r12d, 7
mov r12d, dword [r13 + 0x4c]
add r14d, edi
rorx eax, eax, 0xb
mov edi, r8d
lea eax, [r12 + rax - 0x63cf2ac7]
mov r12d, edx
and edi, ebp
xor ebx, ecx
and r12d, esi
xor ebx, r14d
xor r12d, edi
xor r12d, r14d
and ebx, r9d
xor ebx, r12d
rorx ebx, ebx, 7
add eax, ebx
mov ebx, r9d
and ebx, r14d
xor r11d, edx
mov r12d, dword [r13 + 0x24]
xor r11d, eax
xor edi, ebx
and r11d, esi
xor edi, eax
xor edi, r11d
rorx ecx, ecx, 0xb
lea ecx, [r12 + rcx + 0x2af26013]
rorx r11d, edi, 7
add ecx, r11d
mov r11d, esi
and r11d, eax
xor r10d, r8d
xor r10d, ecx
xor ebx, r11d
and r10d, ebp
xor ebx, ecx
mov edi, dword [r13 + 0x10]
xor ebx, r10d
rorx edx, edx, 0xb
lea edi, [rdi + rdx - 0x3a2e4fdd]
rorx edx, ebx, 7
mov ebx, dword [r13 + 0x50]
rorx r8d, r8d, 0xb
lea ebx, [rbx + r8 + 0x286085f0]
mov r8d, esi
and r8d, ebp
mov r10d, ebp
add edx, edi
and r10d, ecx
xor r8d, r9d
xor r8d, edx
xor r11d, r10d
xor r11d, edx
and r8d, r14d
xor r8d, r11d
rorx r8d, r8d, 7
add r8d, ebx
mov ebx, dword [r13 + 0x70]
rorx r9d, r9d, 0xb
lea ebx, [rbx + r9 - 0x35be86e8]
mov r9d, ebp
and r9d, r14d
mov r11d, r14d
and r11d, edx
xor r9d, esi
xor r9d, r8d
xor r10d, r11d
xor r10d, r8d
and r9d, eax
xor r9d, r10d
rorx r9d, r9d, 7
add r9d, ebx
mov ebx, dword [r13 + 0x44]
rorx esi, esi, 0xb
lea esi, [rbx + rsi - 0x4724c711]
mov ebx, r14d
and ebx, eax
mov r10d, eax
and r10d, r8d
xor ebx, ebp
xor ebx, r9d
xor r11d, r10d
and ebx, ecx
xor r11d, r9d
xor r11d, ebx
mov ebx, dword [r13 + 0x20]
rorx r11d, r11d, 7
rorx ebp, ebp, 0xb
lea r12d, [r11 + rsi]
lea esi, [rbx + rbp - 0x71862350]
mov ebx, eax
and ebx, ecx
mov r11d, ecx
and r11d, r9d
xor ebx, r14d
xor ebx, r12d
xor r10d, r11d
and ebx, edx
xor r10d, r12d
xor r10d, ebx
mov ebx, dword [r13 + 0x58]
rorx r14d, r14d, 0xb
lea edi, [rbx + r14 + 0x603a180e]
mov ebx, ecx
and ebx, edx
xor ebx, eax
rorx ebp, r10d, 7
mov r10d, edx
add ebp, esi
and r10d, r12d
xor ebx, ebp
and ebx, r8d
xor r11d, r10d
xor r11d, ebp
xor r11d, ebx
mov ebx, dword [r13 + 0x74]
rorx esi, r11d, 7
rorx eax, eax, 0xb
lea r11d, [rbx + rax + 0x6c9e0e8b]
mov eax, edx
and eax, r8d
mov r14d, r8d
add esi, edi
and r14d, ebp
xor eax, ecx
xor eax, esi
xor r10d, r14d
and eax, r9d
xor r10d, esi
xor r10d, eax
mov eax, dword [r13 + 0x38]
rorx ecx, ecx, 0xb
lea ecx, [rax + rcx - 0x4fe175c2]
mov eax, r8d
and eax, r9d
rorx ebx, r10d, 7
mov r10d, r9d
add ebx, r11d
and r10d, esi
xor eax, edx
xor eax, ebx
xor r14d, r10d
xor r14d, ebx
and eax, r12d
xor eax, r14d
rorx eax, eax, 7
add eax, ecx
mov ecx, dword [r13 + 0x64]
rorx edx, edx, 0xb
lea ecx, [rcx + rdx - 0x28ea883f]
mov edx, r9d
and edx, r12d
mov edi, r12d
and edi, ebx
xor edx, r8d
xor edx, eax
xor r10d, edi
xor r10d, eax
and edx, ebp
xor edx, r10d
rorx edx, edx, 7
add edx, ecx
mov ecx, dword [r13 + 0x30]
mov r10d, ebp
rorx r8d, r8d, 0xb
lea r8d, [rcx + r8 - 0x42ceb4d9]
mov ecx, r12d
and r10d, eax
and ecx, ebp
xor ecx, r9d
xor ecx, edx
xor edi, r10d
xor edi, edx
and ecx, esi
xor ecx, edi
mov edi, dword [r13 + 0x60]
rorx r9d, r9d, 0xb
lea edi, [rdi + r9 + 0x78af2fda]
mov r9d, ebp
and r9d, esi
rorx ecx, ecx, 7
add ecx, r8d
mov r8d, esi
and r8d, edx
xor r9d, r12d
xor r9d, ecx
xor r10d, r8d
and r9d, ebx
mov r14d, dword [r13 + 0x78]
xor r10d, ecx
xor r10d, r9d
rorx r11d, r10d, 7
rorx r9d, r12d, 0xb
lea r10d, [r14 + r9 + 0x55605c60]
mov r9d, esi
add r11d, edi
and r9d, ebx
mov edi, ebx
and edi, ecx
xor r9d, ebp
xor r9d, r11d
xor r8d, edi
and r9d, eax
xor r8d, r11d
xor r8d, r9d
mov r12d, edi
rorx edi, r8d, 7
mov r8d, ebx
and r8d, eax
add edi, r10d
xor r8d, esi
mov r14d, eax
and r14d, r11d
xor r8d, edi
and r8d, edx
xor r12d, r14d
xor r12d, edi
mov r9d, dword [r13 + 0x40]
xor r12d, r8d
mov r8d, eax
and r8d, edx
rorx ebp, ebp, 0xb
lea r9d, [r9 + rbp - 0x19aada0d]
mov ebp, edx
and ebp, edi
xor r8d, ebx
rorx r10d, r12d, 7
add r10d, r9d
xor r8d, r10d
xor r14d, ebp
and r8d, ecx
mov r9d, dword [r13 + 0x68]
xor r14d, r10d
xor r14d, r8d
mov r8d, edx
and r8d, ecx
mov r12d, ecx
rorx esi, esi, 0xb
lea esi, [r9 + rsi - 0x55aa546c]
and r12d, r10d
xor r8d, eax
rorx r9d, r14d, 7
add r9d, esi
xor r8d, r9d
mov esi, dword [r13 + 0x7c]
xor ebp, r12d
xor ebp, r9d
and r8d, r11d
xor r8d, ebp
rorx ebx, ebx, 0xb
lea ebx, [rsi + rbx + 0x57489862]
rorx r8d, r8d, 7
add r8d, ebx
mov ebx, dword [r13 + 0x3c]
rorx eax, eax, 0xb
lea esi, [rbx + rax + 0x63e81440]
mov eax, ecx
and eax, r11d
mov r14d, r11d
and r14d, r9d
xor eax, edx
xor eax, r8d
xor r12d, r14d
and eax, edi
xor r12d, r8d
xor r12d, eax
rorx ebx, r12d, 7
add ebx, esi
mov esi, dword [r13 + 0x1c]
mov eax, edi
rorx edx, edx, 0xb
lea ebp, [rsi + rdx + 0x55ca396a]
mov edx, r11d
and eax, r8d
and edx, edi
xor edx, ecx
xor edx, ebx
xor r14d, eax
and edx, r10d
xor r14d, ebx
xor r14d, edx
rorx esi, r14d, 7
mov r14d, dword [r13 + 0xc]
rorx ecx, ecx, 0xb
lea r12d, [r14 + rcx + 0x2aab10b6]
mov ecx, edi
and ecx, r10d
mov edx, r10d
add esi, ebp
and edx, ebx
xor ecx, r11d
xor ecx, esi
xor eax, edx
and ecx, r9d
xor eax, esi
xor eax, ecx
mov ecx, dword [r13 + 4]
rorx ebp, eax, 7
rorx r11d, r11d, 0xb
add ebp, r12d
lea r12d, [rcx + r11 - 0x4b33a3cc]
mov ecx, r10d
and ecx, r9d
mov eax, r9d
and eax, esi
xor ecx, edi
xor ecx, ebp
xor edx, eax
and ecx, r8d
xor edx, ebp
xor edx, ecx
rorx r11d, edx, 7
mov edx, dword [r13]
rorx edi, edi, 0xb
lea edi, [rdx + rdi + 0x1141e8ce]
mov edx, r9d
add r11d, r12d
and edx, r8d
mov r12d, r8d
and r12d, ebp
xor edx, r10d
xor edx, r11d
xor eax, r12d
and edx, ebx
xor eax, r11d
xor eax, edx
rorx ecx, eax, 7
mov eax, dword [r13 + 0x48]
rorx r10d, r10d, 0xb
lea r10d, [rax + r10 - 0x5eab7951]
mov eax, r8d
add ecx, edi
and eax, ebx
mov edi, ebx
and edi, r11d
xor eax, r9d
xor eax, ecx
xor r12d, edi
and eax, esi
xor r12d, ecx
xor r12d, eax
mov eax, dword [r13 + 0x6c]
rorx r9d, r9d, 0xb
lea r9d, [rax + r9 + 0x7c72e993]
mov eax, ebx
and eax, esi
rorx edx, r12d, 7
add edx, r10d
mov r10d, esi
and r10d, ecx
xor eax, r8d
xor eax, edx
xor edi, r10d
xor edi, edx
and eax, ebp
mov r14d, dword [r13 + 0x34]
xor eax, edi
rorx r8d, r8d, 0xb
rorx eax, eax, 7
add eax, r9d
lea r9d, [r14 + r8 - 0x4c11ebef]
mov r8d, esi
and r8d, ebp
mov edi, ebp
and edi, edx
xor r8d, ebx
xor r8d, eax
xor r10d, edi
xor r10d, eax
and r8d, r11d
xor r8d, r10d
rorx r8d, r8d, 7
add r8d, r9d
mov r9d, ebp
mov r12d, r11d
and r9d, r11d
and r12d, eax
xor r9d, esi
xor r9d, r8d
xor edi, r12d
mov r14d, dword [r13 + 0x18]
xor edi, r8d
and r9d, ecx
xor r9d, edi
rorx ebx, ebx, 0xb
lea r10d, [r14 + rbx + 0x636fbc2a]
rorx r9d, r9d, 7
add r9d, r10d
mov r10d, r11d
and r10d, ecx
mov edi, ecx
and edi, r8d
xor r10d, ebp
xor r10d, r9d
xor r12d, edi
mov ebx, dword [r13 + 0x54]
xor r12d, r9d
and r10d, edx
xor r10d, r12d
rorx esi, esi, 0xb
lea ebx, [rbx + rsi + 0x2ba9c55d]
rorx r10d, r10d, 7
add r10d, ebx
mov ebx, dword [r13 + 0x28]
rorx ebp, ebp, 0xb
lea ebp, [rbx + rbp + 0x741831f6]
mov ebx, ecx
and ebx, edx
mov esi, edx
and esi, r9d
xor ebx, r11d
xor ebx, r10d
xor edi, esi
xor edi, r10d
and ebx, eax
mov r14d, dword [r13 + 0x5c]
xor ebx, edi
rorx r11d, r11d, 0xb
rorx ebx, ebx, 7
add ebx, ebp
lea ebp, [r14 + r11 - 0x31a3c1ea]
mov r11d, edx
and r11d, eax
mov edi, eax
and edi, r10d
xor r11d, ecx
xor r11d, ebx
xor esi, edi
xor esi, ebx
mov r14d, dword [r13 + 0x2c]
and r11d, r8d
xor r11d, esi
rorx ecx, ecx, 0xb
rorx r11d, r11d, 7
add r11d, ebp
lea ebp, [r14 + rcx - 0x64786ce2]
mov ecx, eax
and ecx, r8d
mov esi, r8d
and esi, ebx
xor ecx, edx
xor edi, esi
xor ecx, r11d
and ecx, r9d
xor edi, r11d
mov r14d, dword [r13 + 0x14]
xor ecx, edi
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, ebp
lea ebp, [r14 + rdx - 0x502945cd]
mov edx, r8d
and edx, r9d
mov edi, r9d
and edi, r11d
xor edx, eax
xor edx, ecx
xor esi, edi
and edx, r10d
xor esi, ecx
xor esi, edx
rorx edx, esi, 7
mov esi, dword [r13 + 8]
add ebp, edx
mov edx, dword [r13 + 0x80]
mov r12d, r9d
lea edx, [rdx + rsi + 0x6c24cf5c]
and r12d, r10d
rorx eax, eax, 0xb
add eax, edx
mov edx, r10d
xor r12d, r8d
and edx, ecx
xor r12d, ebp
xor edx, edi
and r12d, ebx
xor edx, ebp
xor edx, r12d
add ebp, dword [r13 + 0x84]
add ecx, dword [r13 + 0x88]
rorx r12d, edx, 7
add eax, r12d
add r11d, dword [r13 + 0x8c]
add r10d, dword [r13 + 0x94]
add r9d, dword [r13 + 0x98]
add r8d, dword [r13 + 0x9c]
mov dword [r13 + 0x80], eax
mov dword [r13 + 0x84], ebp
mov dword [r13 + 0x88], ecx
mov dword [r13 + 0x8c], r11d
mov dword [r13 + 0x94], r10d
mov dword [r13 + 0x98], r9d
mov dword [r13 + 0x9c], r8d
add ebx, dword [r13 + 0x90]
mov dword [r13 + 0x90], ebx
xor ebx, ebx
mov rax, qword [rsp + 0x20]
add qword [r13 + 0xa8], rax
test r15, r15
je 0x4cc9c8
mov eax, pe_nt_image_headers64
sub eax, ebx
mov ecx, ebx
mov qword [rsp + 0x20], rax
add rcx, r13
cmp rax, r15
jbe 0x4cb278
mov rdx, qword [rsp + 0x88]
mov r8, r15
add ebx, r15d
call sub.msvcrt.dll_memcpy
add qword [rsp + 0x88], r15
mov qword [rsp + 0x20], r15
xor r15d, r15d
cmp ebx, 0x80
jne 0x4cc967
jmp 0x4cb296
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret