Function at 0x4bd1c0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov esi, dword [ebp + 0x14]
pxor xmm0, xmm0
movdqa xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0
movdqa xmmword [esp + 0x50], xmm0
mov dword [esp + 0x60], 0
mov ecx, dword [esi + 4]
test ecx, ecx
jle 0x4bd201
mov edx, dword [esi]
mov eax, dword [edx]
test al, 1
jne 0x4bd212
push 0x391
push str.external_boringssl_src_crypto_fipsmodule_bn_exponentiation.c
push 0x68
jmp 0x4bd571
cmp dword [esi + 0xc], 0
je 0x4bd229
push 0x395
push str.external_boringssl_src_crypto_fipsmodule_bn_exponentiation.c
push 0x6d
jmp 0x4bd571
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0xc], 0
jne 0x4bd565
mov edi, dword [eax]
mov esi, dword [eax + 4]
cmp esi, ecx
mov eax, ecx
cmovb eax, esi
test eax, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], esi
je 0x4bd284
mov edx, dword [edi]
mov edi, dword [esp + 0x20]
mov ecx, edi
xor ecx, edx
mov ebx, edx
sub ebx, edi
xor ebx, edx
or ebx, ecx
xor ebx, edx
sar ebx, 0x1f
or ebx, 1
test ecx, ecx
cmove ebx, ecx
cmp eax, 1
jne 0x4bd288
mov edx, dword [esp + 0xc]
jmp 0x4bd2c8
xor ebx, ebx
jmp 0x4bd2c8
mov ecx, 1
nop dword [eax]
mov edx, dword [esp + 0xc]
mov edx, dword [edx + ecx*4]
mov esi, dword [esp + 0x14]
mov edi, dword [esi + ecx*4]
mov esi, eax
mov eax, ebx
mov ebx, edi
sub ebx, edx
xor edx, edi
xor ebx, edi
or ebx, edx
xor ebx, edi
sar ebx, 0x1f
or ebx, 1
test edx, edx
mov edx, dword [esp + 0xc]
cmovne eax, ebx
mov ebx, eax
mov eax, esi
add ecx, 1
cmp esi, ecx
jne 0x4bd290
mov esi, dword [esp + 0x24]
mov eax, esi
mov edi, dword [esp + 0x1c]
sub eax, edi
jae 0x4bd318
mov ecx, edi
sub ecx, esi
xor eax, eax
cmp ecx, 8
jb 0x4bd440
mov dword [esp + 0x14], ecx
and ecx, 0xfffffff8
mov dword [esp + 0x10], ecx
lea eax, [ecx - 8]
mov edx, eax
shr edx, 3
add edx, 1
mov ecx, edx
and ecx, 3
mov dword [esp + 8], ecx
cmp eax, 0x18
jae 0x4bd368
pxor xmm0, xmm0
xor eax, eax
pxor xmm1, xmm1
jmp 0x4bd3d6
jbe 0x4bd561
xor ecx, ecx
mov dword [esp + 8], eax
mov eax, edi
cmp dword [esp + 8], 8
jb 0x4bd533
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 8]
and eax, 0xfffffff8
lea edx, [eax - 8]
mov ecx, edx
shr ecx, 3
add ecx, 1
mov ebx, ecx
and ebx, 3
mov dword [esp + 0x10], ebx
cmp edx, 0x18
jae 0x4bd45f
pxor xmm0, xmm0
xor edx, edx
pxor xmm1, xmm1
jmp 0x4bd4cd
and edx, 0xfffffffc
mov eax, dword [esp + 0xc]
lea ecx, [eax + esi*4]
add ecx, 0x70
pxor xmm0, xmm0
xor eax, eax
pxor xmm1, xmm1
movdqu xmm2, xmmword [ecx + eax*4 - 0x70]
por xmm2, xmm0
movdqu xmm0, xmmword [ecx + eax*4 - 0x60]
por xmm0, xmm1
movdqu xmm1, xmmword [ecx + eax*4 - 0x50]
movdqu xmm3, xmmword [ecx + eax*4 - 0x40]
movdqu xmm4, xmmword [ecx + eax*4 - 0x30]
por xmm4, xmm1
por xmm4, xmm2
movdqu xmm2, xmmword [ecx + eax*4 - 0x20]
por xmm2, xmm3
por xmm2, xmm0
movdqu xmm0, xmmword [ecx + eax*4 - 0x10]
por xmm0, xmm4
movdqu xmm1, xmmword [ecx + eax*4]
por xmm1, xmm2
add eax, 0x20
add edx, 0xfffffffc
jne 0x4bd37f
mov edi, dword [esp + 8]
test edi, edi
mov edx, dword [esp + 0xc]
je 0x4bd40a
add eax, esi
lea eax, [edx + eax*4]
add eax, 0x10
shl edi, 5
xor ecx, ecx
nop
movdqu xmm2, xmmword [eax + ecx - 0x10]
por xmm0, xmm2
movdqu xmm2, xmmword [eax + ecx]
por xmm1, xmm2
add ecx, 0x20
cmp edi, ecx
jne 0x4bd3f0
por xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
pshufd xmm0, xmm1, 0x55
por xmm0, xmm1
movd eax, xmm0
mov ecx, dword [esp + 0x10]
cmp dword [esp + 0x14], ecx
jne 0x4bd434
mov edi, dword [esp + 0x1c]
jmp 0x4bd44a
add esi, ecx
mov edi, dword [esp + 0x1c]
nop word [eax + eax]
or eax, dword [edx + esi*4]
add esi, 1
cmp edi, esi
jne 0x4bd440
mov ecx, eax
not ecx
add eax, 0xffffffff
and eax, ecx
sar eax, 0x1f
not eax
or ebx, eax
jmp 0x4bd561
and ecx, 0xfffffffc
mov edx, dword [esp + 0x14]
lea ebx, [edx + edi*4]
add ebx, 0x70
pxor xmm0, xmm0
xor edx, edx
pxor xmm1, xmm1
movdqu xmm2, xmmword [ebx + edx*4 - 0x70]
por xmm2, xmm0
movdqu xmm0, xmmword [ebx + edx*4 - 0x60]
por xmm0, xmm1
movdqu xmm1, xmmword [ebx + edx*4 - 0x50]
movdqu xmm3, xmmword [ebx + edx*4 - 0x40]
movdqu xmm4, xmmword [ebx + edx*4 - 0x30]
por xmm4, xmm1
por xmm4, xmm2
movdqu xmm2, xmmword [ebx + edx*4 - 0x20]
por xmm2, xmm3
por xmm2, xmm0
movdqu xmm0, xmmword [ebx + edx*4 - 0x10]
por xmm0, xmm4
movdqu xmm1, xmmword [ebx + edx*4]
por xmm1, xmm2
add edx, 0x20
add ecx, 0xfffffffc
jne 0x4bd476
cmp dword [esp + 0x10], 0
mov ebx, dword [esp + 0x18]
je 0x4bd507
add edx, edi
mov ecx, dword [esp + 0x14]
lea ecx, [ecx + edx*4]
add ecx, 0x10
shl dword [esp + 0x10], 5
xor edx, edx
movdqu xmm2, xmmword [ecx + edx - 0x10]
por xmm0, xmm2
movdqu xmm2, xmmword [ecx + edx]
por xmm1, xmm2
add edx, 0x20
cmp dword [esp + 0x10], edx
jne 0x4bd4eb
por xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
pshufd xmm0, xmm1, 0x55
por xmm0, xmm1
movd ecx, xmm0
cmp dword [esp + 8], eax
jne 0x4bd52d
mov edx, dword [esp + 0xc]
jmp 0x4bd54a
add eax, edi
mov edx, dword [esp + 0xc]
mov edi, dword [esp + 0x14]
nop word [eax + eax]
or ecx, dword [edi + eax*4]
add eax, 1
cmp esi, eax
jne 0x4bd540
mov eax, ecx
not eax
add ecx, 0xffffffff
and ecx, eax
sar ecx, 0x1f
and ebx, ecx
add ebx, ecx
add ebx, 1
mov edi, dword [esp + 0x1c]
test ebx, ebx
js 0x4bd589
push 0x399
push str.external_boringssl_src_crypto_fipsmodule_bn_exponentiation.c
push 0x6b
push 0
push 3
call sym.fastboot.exe_ERR_put_error
add esp, 0x14
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov esi, dword [eax + 4]
test esi, esi
je 0x4bd953
mov eax, dword [ebp + 0x1c]
xor ecx, ecx
test eax, eax
jne 0x4bd5bb
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call sym.fastboot.exe_BN_MONT_CTX_new_consttime
add esp, 8
mov ecx, eax
test eax, eax
je 0x4bd9be
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], eax
mov edx, dword [eax + 0x18]
mov ecx, 6
cmp esi, 0x1d
jg 0x4bd5f1
mov ecx, 5
cmp esi, 9
jg 0x4bd5f1
mov ecx, 4
cmp esi, 2
jg 0x4bd5f1
xor eax, eax
test esi, esi
setg al
lea ecx, [eax + eax]
add ecx, 1
mov dword [esp + 0x1c], esi
mov esi, 1
shl esi, cl
mov edi, edx
mov dword [esp + 0x14], ecx
shl edi, cl
mov dword [esp + 0x10], edx
lea ebx, [edx + edx]
cmp ebx, esi
cmovle ebx, esi
add ebx, edi
lea eax, [ebx*4 + 0x40]
shl ebx, 2
push eax
call sym.fastboot.exe_OPENSSL_malloc
add esp, 4
test eax, eax
mov dword [esp + 0x4c], ebx
je 0x4bd9a9
mov dword [esp + 0x24], eax
and eax, 0xffffffc0
add eax, 0x40
test ebx, ebx
mov dword [esp + 8], eax
je 0x4bd653
push ebx
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov eax, dword [esp + 0x14]
add esp, 0xc
lea eax, [eax + edi*4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x10]
lea eax, [eax + ecx*4]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x58], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x5c], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x60], 2
mov dword [esp + 0x40], 2
lea eax, [esp + 0x30]
mov edi, dword [ebp + 0x18]
push edi
mov edi, dword [esp + 0x10]
push edi
push eax
call fcn.004bdcb0
add esp, 0xc
xor ebx, ebx
test eax, eax
je 0x4bdc71
lea eax, [esp + 0x50]
push dword [ebp + 0x18]
push edi
push edi
push dword [ebp + 0xc]
push eax
call sym.fastboot.exe_BN_mod_mul_montgomery
add esp, 0x14
test eax, eax
je 0x4bdc71
lea ecx, [esp + 0x30]
mov edx, dword [esp + 0x10]
push 0
mov edi, dword [esp + 0xc]
push edi
call fcn.004bdd40
add esp, 8
lea ecx, [esp + 0x50]
mov edx, dword [esp + 0x10]
push 1
push edi
call fcn.004bdd40
add esp, 8
cmp dword [esp + 0x14], 2
jb 0x4bd9d9
push dword [ebp + 0x18]
push dword [esp + 0x10]
lea eax, [esp + 0x58]
push eax
push eax
lea edi, [esp + 0x40]
push edi
call sym.fastboot.exe_BN_mod_mul_montgomery
add esp, 0x14
test eax, eax
je 0x4bdc71
mov ecx, edi
mov edi, dword [esp + 0x10]
mov edx, edi
push 2
push dword [esp + 0xc]
call fcn.004bdd40
add esp, 8
lea eax, [edi*4]
cmp esi, 5
mov ecx, 4
cmovae ecx, esi
mov dword [esp + 0x28], ecx
lea ecx, [edi + 0x1c]
mov dword [esp + 0x68], ecx
mov esi, 3
mov dword [esp + 0x78], eax
jmp 0x4bd798
push 0x135
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x6d
push 0
push 3
call sym.fastboot.exe_ERR_put_error
add esp, 0x14
mov esi, dword [esp + 0x20]
add esi, 1
cmp esi, dword [esp + 0x28]
je 0x4bd9d9
push dword [ebp + 0x18]
push dword [esp + 0x10]
lea ecx, [esp + 0x38]
push ecx
lea eax, [esp + 0x5c]
push eax
push ecx
call sym.fastboot.exe_BN_mod_mul_montgomery
add esp, 0x14
test eax, eax
je 0x4bdc71
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x20], esi
jne 0x4bd76f
mov edi, dword [esp + 0x34]
mov edx, edi
mov ecx, dword [esp + 0x10]
sub edx, ecx
jbe 0x4bd915
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
xor eax, eax
cmp edx, 8
jb 0x4bd8ec
mov dword [esp + 0x74], edx
mov ecx, edx
and ecx, 0xfffffff8
lea edx, [ecx - 8]
mov eax, edx
shr eax, 3
add eax, 1
mov esi, eax
and esi, 3
mov dword [esp + 0x70], esi
cmp edx, 0x18
mov dword [esp + 0x6c], edi
jae 0x4bd81c
pxor xmm0, xmm0
xor edx, edx
pxor xmm1, xmm1
jmp 0x4bd88b
and eax, 0xfffffffc
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x2c]
lea esi, [esi + edx*4]
pxor xmm0, xmm0
xor edx, edx
pxor xmm1, xmm1
movdqu xmm2, xmmword [esi + edx*4 - 0x70]
por xmm2, xmm0
movdqu xmm0, xmmword [esi + edx*4 - 0x60]
por xmm0, xmm1
movdqu xmm1, xmmword [esi + edx*4 - 0x50]
movdqu xmm3, xmmword [esi + edx*4 - 0x40]
movdqu xmm4, xmmword [esi + edx*4 - 0x30]
por xmm4, xmm1
por xmm4, xmm2
movdqu xmm2, xmmword [esi + edx*4 - 0x20]
por xmm2, xmm3
por xmm2, xmm0
movdqu xmm0, xmmword [esi + edx*4 - 0x10]
por xmm0, xmm4
movdqu xmm1, xmmword [esi + edx*4]
por xmm1, xmm2
add edx, 0x20
add eax, 0xfffffffc
jne 0x4bd834
mov edi, dword [esp + 0x70]
test edi, edi
mov esi, dword [esp + 0x20]
je 0x4bd8c4
add edx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
lea eax, [eax + edx*4]
add eax, 0x10
shl edi, 5
xor edx, edx
movdqu xmm2, xmmword [eax + edx - 0x10]
por xmm0, xmm2
movdqu xmm2, xmmword [eax + edx]
por xmm1, xmm2
add edx, 0x20
cmp edi, edx
jne 0x4bd8aa
por xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
pshufd xmm0, xmm1, 0x55
por xmm0, xmm1
movd eax, xmm0
cmp dword [esp + 0x74], ecx
je 0x4bd8fa
add ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x6c]
mov edx, dword [esp + 0x2c]
or eax, dword [edx + ecx*4]
add ecx, 1
cmp edi, ecx
jne 0x4bd8f0
mov ecx, dword [esp + 0x10]
mov edi, ecx
test eax, eax
je 0x4bd915
push 0x13c
push str.external_boringssl_src_crypto_fipsmodule_bn_bn.c
push 0x66
jmp 0x4bd77b
mov eax, esi
imul eax, ecx
mov ecx, dword [esp + 8]
lea esi, [ecx + eax*4]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4bd935
push eax
push 0
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
shl edi, 2
test edi, edi
je 0x4bd787
push edi
push dword [esp + 0x34]
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
jmp 0x4bd787
mov eax, dword [esp + 0x20]
xor eax, 1
cmp edi, 2
jl 0x4bdb1c
lea ecx, [edi - 1]
mov esi, 1
cmp ecx, 8
jb 0x4bdb12
mov dword [esp + 0x14], ecx
mov esi, ecx
and esi, 0xfffffff8
movd xmm0, eax
lea edi, [esi - 8]
mov ecx, edi
shr ecx, 3
add ecx, 1
mov edx, ecx
and edx, 3
cmp edi, 0x18
jae 0x4bda59
pxor xmm1, xmm1
xor edi, edi
mov eax, dword [esp + 0xc]
jmp 0x4bdabe
xor ebx, ebx
mov dword [esp + 0x24], 0
xor esi, esi
mov eax, dword [esp + 0x18]
jmp 0x4bdc79
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x4c], 0
xor esi, esi
jmp 0x4bdc79
mov ecx, dword [esp + 0x1c]
shl ecx, 5
lea eax, [ecx - 1]
mov edi, eax
cdq
idiv dword [esp + 0x14]
xor ebx, ebx
test edx, edx
js 0x4bdb6b
add ecx, 0xfffffffe
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], edx
lea esi, [edx + 1]
xor eax, eax
mov ecx, edi
jmp 0x4bda14
or eax, edi
add ecx, 0xffffffff
add esi, 0xffffffff
test esi, esi
jle 0x4bda4a
mov edi, eax
add edi, eax
mov eax, 0
test ecx, ecx
js 0x4bda08
mov edx, ecx
shr edx, 5
mov eax, 0
mov dword [esp + 0x20], edi
mov edi, dword [ebp + 0x10]
cmp edx, dword [edi + 4]
mov edi, dword [esp + 0x20]
jae 0x4bda08
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax + edx*4]
shr eax, cl
and eax, 1
jmp 0x4bda08
mov ecx, dword [esp + 0x1c]
sub ecx, dword [esp + 0x28]
mov edi, ecx
jmp 0x4bdb6d
and ecx, 0xfffffffc
pxor xmm1, xmm1
xor edi, edi
mov eax, dword [esp + 0xc]
movdqu xmm2, xmmword [eax + edi*4 + 4]
por xmm2, xmm0
movdqu xmm0, xmmword [eax + edi*4 + 0x14]
por xmm0, xmm1
movdqu xmm1, xmmword [eax + edi*4 + 0x24]
movdqu xmm3, xmmword [eax + edi*4 + 0x34]
movdqu xmm4, xmmword [eax + edi*4 + 0x44]
por xmm4, xmm1
por xmm4, xmm2
movdqu xmm2, xmmword [eax + edi*4 + 0x54]
por xmm2, xmm3
por xmm2, xmm0
movdqu xmm0, xmmword [eax + edi*4 + 0x64]
por xmm0, xmm4
movdqu xmm1, xmmword [eax + edi*4 + 0x74]
por xmm1, xmm2
add edi, 0x20
add ecx, 0xfffffffc
jne 0x4bda66
test edx, edx
je 0x4bdae7
lea ecx, [edi*4]
or ecx, 4
movdqu xmm2, xmmword [eax + ecx]
por xmm0, xmm2
movdqu xmm2, xmmword [eax + ecx + 0x10]
por xmm1, xmm2
add edi, 8
add edx, 0xffffffff
jne 0x4bdac2
por xmm0, xmm1
pshufd xmm1, xmm0, 0xee
por xmm1, xmm0
pshufd xmm0, xmm1, 0x55
por xmm0, xmm1
movd eax, xmm0
cmp dword [esp + 0x14], esi
je 0x4bdb1c
or esi, 1
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0xc]
or eax, dword [edx + esi*4]
add esi, 1
cmp edi, esi
jne 0x4bdb12
test eax, eax
je 0x4bdb53
push 1
push ebx
call fcn.004b36f0
add esp, 8
test eax, eax
je 0x4bd57d
mov dword [ebx + 0xc], 0
mov eax, dword [ebx]
mov dword [eax], 1
mov dword [ebx + 4], 1
mov ebx, 1
jmp 0x4bd57f
mov dword [ebx + 0xc], 0
mov dword [ebx + 4], 0
mov ebx, 1
jmp 0x4bd57f
xor eax, eax
lea ecx, [esp + 0x30]
mov edx, dword [esp + 0x10]
push dword [esp + 0x14]
push eax
push dword [esp + 0x10]
call fcn.004bdf10
add esp, 0xc
test eax, eax
je 0x4bdc71
test edi, edi
js 0x4bdc53
mov dword [esp + 0x1c], edi
sub edi, dword [esp + 0x14]
mov dword [esp + 0x28], edi
xor ebx, ebx
xor edi, edi
xor esi, esi
jmp 0x4bdbb7
or esi, eax
add edi, 0xffffffff
mov eax, dword [esp + 0x14]
add eax, edi
je 0x4bdc0e
push dword [ebp + 0x18]
push dword [esp + 0x10]
lea eax, [esp + 0x38]
push eax
push eax
push eax
call sym.fastboot.exe_BN_mod_mul_montgomery
add esp, 0x14
test eax, eax
je 0x4bdc71
mov eax, dword [esp + 0x1c]
lea ecx, [eax + edi]
mov eax, esi
add eax, esi
xor esi, esi
test ecx, ecx
js 0x4bdbaa
mov edx, ecx
shr edx, 5
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x10]
cmp edx, dword [eax + 4]
mov eax, dword [esp + 0x20]
jae 0x4bdbaa
mov eax, dword [ebp + 0x10]
mov esi, dword [eax]
mov eax, dword [esp + 0x20]
mov esi, dword [esi + edx*4]
shr esi, cl
and esi, 1
jmp 0x4bdbaa
lea edi, [esp + 0x50]
mov ecx, edi
mov edx, dword [esp + 0x10]
push dword [esp + 0x14]
push esi
push dword [esp + 0x10]
call fcn.004bdf10
add esp, 0xc
xor ebx, ebx
test eax, eax
je 0x4bdc71
push dword [ebp + 0x18]
push dword [esp + 0x10]
push edi
lea eax, [esp + 0x3c]
push eax
push eax
call sym.fastboot.exe_BN_mod_mul_montgomery
add esp, 0x14
mov edi, dword [esp + 0x28]
test eax, eax
jne 0x4bdb8e
jmp 0x4bdc71
push dword [ebp + 0x18]
push dword [esp + 0x10]
lea eax, [esp + 0x38]
push eax
push dword [ebp + 8]
call sym.fastboot.exe_BN_from_montgomery
add esp, 0x10
xor ebx, ebx
test eax, eax
setne bl
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 8]
push eax
call sym.fastboot.exe_BN_MONT_CTX_free
add esp, 4
test esi, esi
mov eax, dword [esp + 0x24]
je 0x4bdc9f
test eax, eax
jne 0x4bdc9f
push dword [esp + 0x4c]
push esi
call sym.fastboot.exe_OPENSSL_cleanse
mov eax, dword [esp + 0x2c]
add esp, 8
push eax
call sym.fastboot.exe_OPENSSL_free
add esp, 4
jmp 0x4bd57f