Function at 0x4cfe80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov esi, dword [rcx + 0xa8]
mov r13, rcx
and esi, 0x7f
test r8, r8
je 0x4d1570
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], r8
jmp 0x4d1521
mov rdx, qword [rsp + 0x78]
mov r8, rbx
call sub.msvcrt.dll_memcpy
add qword [rsp + 0x78], rbx
sub qword [rsp + 0x80], rbx
mov ecx, dword [r13]
rorx edx, dword [r13 + 0x9c], 0xb
rorx r10d, dword [r13 + 0x94], 0xb
rorx esi, dword [r13 + 0x90], 0xb
mov eax, dword [r13 + 0x8c]
xor eax, dword [r13 + 0x90]
mov r8d, dword [r13 + 0x84]
and eax, dword [r13 + 0x88]
and r8d, dword [r13 + 0x94]
add ecx, edx
mov edx, dword [r13 + 0x80]
and edx, dword [r13 + 0x98]
xor eax, dword [r13 + 0x90]
add r10d, dword [r13 + 8]
add esi, dword [r13 + 0xc]
xor edx, r8d
xor edx, eax
rorx eax, dword [r13 + 0x98], 0xb
add eax, dword [r13 + 4]
rorx edx, edx, 7
add edx, ecx
mov ecx, dword [r13 + 0x88]
xor ecx, dword [r13 + 0x8c]
and ecx, dword [r13 + 0x84]
mov r8d, eax
mov eax, dword [r13 + 0x94]
and eax, edx
xor ecx, eax
mov eax, dword [r13 + 0x80]
and eax, dword [r13 + 0x90]
xor eax, dword [r13 + 0x8c]
xor eax, ecx
mov ecx, dword [r13 + 0x8c]
rorx eax, eax, 7
add eax, r8d
mov r8d, r10d
mov r10d, dword [r13 + 0x90]
and ecx, edx
and r10d, eax
xor ecx, r10d
mov r10d, dword [r13 + 0x84]
xor r10d, dword [r13 + 0x88]
and r10d, dword [r13 + 0x80]
xor r10d, dword [r13 + 0x88]
xor r10d, ecx
mov ecx, dword [r13 + 0x88]
rorx r10d, r10d, 7
add r10d, r8d
mov r8d, esi
mov esi, dword [r13 + 0x8c]
and ecx, eax
and esi, r10d
xor ecx, esi
mov esi, dword [r13 + 0x80]
xor esi, dword [r13 + 0x84]
rorx ebp, dword [r13 + 0x84], 0xb
mov r11d, dword [r13 + 0x14]
rorx edi, dword [r13 + 0x80], 0xb
and esi, edx
xor esi, dword [r13 + 0x84]
add edi, dword [r13 + 0x1c]
xor esi, ecx
rorx ecx, dword [r13 + 0x8c], 0xb
add ecx, dword [r13 + 0x10]
rorx esi, esi, 7
add esi, r8d
mov r8d, dword [r13 + 0x88]
mov r9d, ecx
mov ecx, dword [r13 + 0x84]
and r8d, esi
and ecx, r10d
xor r8d, ecx
mov ecx, dword [r13 + 0x80]
xor ecx, edx
and ecx, eax
xor ecx, dword [r13 + 0x80]
xor ecx, r8d
mov r8d, dword [r13 + 0x80]
rorx ecx, ecx, 7
add ecx, r9d
rorx r9d, dword [r13 + 0x88], 0xb
add r11d, r9d
mov r9d, dword [r13 + 0x84]
and r8d, esi
and r9d, ecx
xor r8d, r9d
mov r9d, edx
xor r9d, eax
and r9d, r10d
xor r9d, edx
xor r9d, r8d
mov r8d, edx
rorx r9d, r9d, 7
and r8d, ecx
add r9d, r11d
mov r11d, dword [r13 + 0x18]
add r11d, ebp
mov ebp, dword [r13 + 0x80]
and ebp, r9d
xor r8d, ebp
mov ebp, eax
xor ebp, r10d
and ebp, esi
xor ebp, eax
xor ebp, r8d
mov r8d, eax
rorx ebp, ebp, 7
add ebp, r11d
mov r11d, edi
mov edi, edx
rorx edx, edx, 0xb
and edi, ebp
and r8d, r9d
add edx, dword [r13 + 0x20]
xor r8d, edi
mov edi, r10d
xor edi, esi
and edi, ecx
xor edi, r10d
xor edi, r8d
mov r8d, r10d
rorx edi, edi, 7
and r8d, ebp
add edi, r11d
mov r11d, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x24]
and r11d, edi
xor r8d, r11d
mov r11d, esi
xor r11d, ecx
and r11d, r9d
xor r11d, esi
xor r8d, r11d
mov r11d, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, edx
mov edx, esi
and edx, edi
and r11d, r8d
xor r11d, edx
mov edx, ecx
xor edx, r9d
and edx, ebp
xor edx, ecx
xor r11d, edx
mov edx, ecx
rorx r11d, r11d, 7
and edx, r8d
add r11d, eax
mov eax, dword [r13 + 0x28]
add eax, r10d
mov r10d, esi
rorx esi, esi, 0xb
and r10d, r11d
xor r10d, edx
mov edx, r9d
xor edx, ebp
and edx, edi
xor edx, r9d
xor r10d, edx
mov edx, r9d
rorx r10d, r10d, 7
and edx, r11d
add r10d, eax
mov eax, dword [r13 + 0x2c]
add eax, esi
mov esi, ecx
rorx ecx, ecx, 0xb
and esi, r10d
xor esi, edx
mov edx, ebp
xor edx, edi
and edx, r8d
xor edx, ebp
xor esi, edx
mov edx, ebp
rorx esi, esi, 7
and edx, r10d
add esi, eax
mov eax, dword [r13 + 0x30]
add eax, ecx
mov ecx, r9d
rorx r9d, r9d, 0xb
and ecx, esi
xor ecx, edx
mov edx, edi
xor edx, r8d
and edx, r11d
xor edx, edi
xor ecx, edx
mov edx, edi
rorx ecx, ecx, 7
and edx, esi
add ecx, eax
mov eax, dword [r13 + 0x34]
add eax, r9d
mov r9d, ebp
rorx ebp, ebp, 0xb
add ebp, dword [r13 + 0x38]
and r9d, ecx
xor r9d, edx
mov edx, r8d
xor edx, r11d
and edx, r10d
xor edx, r8d
xor r9d, edx
mov edx, edi
rorx edi, edi, 0xb
rorx r9d, r9d, 7
add r9d, eax
mov eax, r8d
and edx, r9d
and eax, ecx
add edi, dword [r13 + 0x3c]
xor edx, eax
mov eax, r11d
xor eax, r10d
and eax, esi
xor eax, r11d
xor edx, eax
mov eax, r11d
rorx edx, edx, 7
and eax, r9d
add edx, ebp
mov ebp, r8d
rorx r8d, r8d, 0xb
and ebp, edx
xor eax, ebp
mov ebp, r10d
xor ebp, esi
and ebp, ecx
xor ebp, r10d
xor eax, ebp
mov ebp, r11d
rorx r11d, r11d, 0xb
rorx eax, eax, 7
add eax, edi
mov edi, dword [r13 + 0x40]
and ebp, eax
add edi, r8d
mov r8d, r10d
and r8d, edx
xor r8d, ebp
mov ebp, esi
xor ebp, ecx
and ebp, r9d
xor ebp, esi
xor r8d, ebp
mov ebp, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, edi
mov edi, dword [r13 + 0x44]
and ebp, r8d
add edi, r11d
mov r11d, esi
and r11d, eax
xor r11d, ebp
mov ebp, ecx
xor ebp, r9d
and ebp, edx
xor ebp, ecx
xor r11d, ebp
mov ebp, esi
rorx esi, esi, 0xb
add esi, dword [r13 + 0x4c]
rorx r11d, r11d, 7
add r11d, edi
mov edi, dword [r13 + 0x48]
and ebp, r11d
add edi, r10d
mov r10d, ecx
and r10d, r8d
xor r10d, ebp
mov ebp, r9d
xor ebp, edx
and ebp, eax
xor ebp, r9d
xor r10d, ebp
mov ebp, ecx
rorx ecx, ecx, 0xb
add ecx, dword [r13 + 0x50]
rorx r10d, r10d, 7
add r10d, edi
mov edi, esi
mov esi, r9d
and ebp, r10d
and esi, r11d
xor esi, ebp
mov ebp, edx
xor ebp, eax
and ebp, r8d
xor ebp, edx
xor esi, ebp
mov ebp, r9d
rorx r9d, r9d, 0xb
rorx esi, esi, 7
add esi, edi
mov edi, ecx
mov ecx, edx
and ebp, esi
and ecx, r10d
xor ecx, ebp
mov ebp, eax
xor ebp, r8d
and ebp, r11d
xor ebp, eax
xor ecx, ebp
mov ebp, edx
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, edi
mov edi, dword [r13 + 0x54]
and ebp, ecx
add edi, r9d
mov r9d, eax
and r9d, esi
xor r9d, ebp
mov ebp, r8d
add edx, dword [r13 + 0x58]
xor ebp, r11d
and ebp, r10d
xor ebp, r8d
xor r9d, ebp
mov ebp, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x5c]
rorx r9d, r9d, 7
add r9d, edi
mov edi, edx
mov edx, r8d
and ebp, r9d
and edx, ecx
xor edx, ebp
mov ebp, r11d
xor ebp, r10d
and ebp, esi
xor ebp, r11d
xor edx, ebp
mov ebp, r8d
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, edi
mov edi, eax
mov eax, r11d
and ebp, edx
and eax, r9d
xor eax, ebp
mov ebp, r10d
xor ebp, esi
and ebp, ecx
xor ebp, r10d
xor eax, ebp
mov ebp, r11d
rorx r11d, r11d, 0xb
rorx eax, eax, 7
add eax, edi
mov edi, dword [r13 + 0x60]
and ebp, eax
add edi, r8d
mov r8d, r10d
and r8d, edx
xor r8d, ebp
mov ebp, esi
xor ebp, ecx
and ebp, r9d
xor ebp, esi
xor r8d, ebp
mov ebp, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, edi
mov edi, dword [r13 + 0x64]
and ebp, r8d
add edi, r11d
mov r11d, esi
and r11d, eax
xor r11d, ebp
mov ebp, ecx
xor ebp, r9d
and ebp, edx
xor ebp, ecx
xor r11d, ebp
mov ebp, esi
rorx esi, esi, 0xb
add esi, dword [r13 + 0x6c]
rorx r11d, r11d, 7
add r11d, edi
mov edi, dword [r13 + 0x68]
and ebp, r11d
add edi, r10d
mov r10d, ecx
and r10d, r8d
xor r10d, ebp
mov ebp, r9d
xor ebp, edx
and ebp, eax
xor ebp, r9d
xor r10d, ebp
mov ebp, ecx
rorx ecx, ecx, 0xb
add ecx, dword [r13 + 0x70]
rorx r10d, r10d, 7
add r10d, edi
mov edi, esi
mov esi, r9d
and ebp, r10d
and esi, r11d
xor esi, ebp
mov ebp, edx
xor ebp, eax
and ebp, r8d
xor ebp, edx
xor esi, ebp
mov ebp, r9d
rorx r9d, r9d, 0xb
rorx esi, esi, 7
add esi, edi
mov edi, ecx
mov ecx, edx
and ebp, esi
and ecx, r10d
xor ecx, ebp
mov ebp, eax
xor ebp, r8d
and ebp, r11d
xor ebp, eax
xor ecx, ebp
mov ebp, edx
rorx edx, edx, 0xb
add edx, dword [r13 + 0x78]
rorx ecx, ecx, 7
add ecx, edi
mov edi, dword [r13 + 0x74]
and ebp, ecx
add edi, r9d
mov r9d, eax
and r9d, esi
xor r9d, ebp
mov ebp, r8d
xor ebp, r11d
and ebp, r10d
xor ebp, r8d
xor r9d, ebp
mov ebp, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x7c]
rorx r9d, r9d, 7
add r9d, edi
mov edi, edx
mov edx, r8d
and ebp, r9d
and edx, ecx
xor edx, ebp
mov ebp, r11d
xor ebp, r10d
and ebp, esi
xor ebp, r11d
xor edx, ebp
mov ebp, r8d
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, edi
mov edi, eax
mov eax, r11d
and ebp, edx
and eax, r9d
xor eax, ebp
mov ebp, r10d
xor ebp, esi
and ebp, ecx
xor ebp, r10d
xor eax, ebp
rorx eax, eax, 7
add eax, edi
mov edi, r9d
andn ebp, eax, ecx
and edi, edx
xor edi, ebp
mov ebp, r11d
xor ebp, esi
xor edi, ebp
mov ebp, r9d
and ebp, eax
and edi, r10d
xor edi, ebp
mov ebp, ecx
xor ebp, r9d
and ebp, edx
xor ebp, r11d
rorx r11d, r11d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r8d, edi
mov edi, dword [r13 + 0x14]
lea r8d, [rdi + r8 + 0x452821e6]
mov edi, edx
andn ebp, r8d, r9d
and edi, eax
xor edi, ebp
mov ebp, r10d
xor ebp, ecx
xor edi, ebp
mov ebp, edx
and ebp, r8d
and edi, esi
xor edi, ebp
mov ebp, r9d
xor ebp, edx
and ebp, eax
xor ebp, r10d
rorx r10d, r10d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r11d, edi
mov edi, dword [r13 + 0x38]
lea r11d, [rdi + r11 + 0x38d01377]
mov edi, eax
andn ebp, r11d, edx
and edi, r8d
xor edi, ebp
mov ebp, esi
xor ebp, r9d
xor edi, ebp
mov ebp, eax
and edi, ecx
and ebp, r11d
xor edi, ebp
mov ebp, edx
xor ebp, eax
and ebp, r8d
xor ebp, esi
rorx esi, esi, 0xb
xor edi, ebp
rorx edi, edi, 7
add r10d, edi
mov edi, dword [r13 + 0x68]
lea r10d, [rdi + r10 - 0x41ab9931]
mov edi, r8d
andn ebp, r10d, eax
and edi, r11d
xor edi, ebp
mov ebp, ecx
xor ebp, edx
xor edi, ebp
mov ebp, r8d
and ebp, r10d
and edi, r9d
xor edi, ebp
mov ebp, eax
xor ebp, r8d
and ebp, r11d
xor ebp, ecx
rorx ecx, ecx, 0xb
xor edi, ebp
rorx edi, edi, 7
add esi, edi
mov edi, dword [r13 + 0x48]
lea esi, [rdi + rsi + 0x34e90c6c]
mov edi, r11d
andn ebp, esi, r8d
and edi, r10d
xor edi, ebp
mov ebp, r9d
xor ebp, eax
xor edi, ebp
mov ebp, r11d
and ebp, esi
and edi, edx
xor edi, ebp
mov ebp, r8d
xor ebp, r11d
and ebp, r10d
xor ebp, r9d
rorx r9d, r9d, 0xb
xor edi, ebp
rorx edi, edi, 7
add ecx, edi
mov edi, dword [r13 + 0x2c]
lea ecx, [rdi + rcx - 0x3f53d649]
mov edi, r10d
andn ebp, ecx, r11d
and edi, esi
xor edi, ebp
mov ebp, edx
xor ebp, r8d
xor edi, ebp
mov ebp, r10d
and ebp, ecx
and edi, eax
xor edi, ebp
mov ebp, r11d
xor ebp, r10d
and ebp, esi
xor ebp, edx
rorx edx, edx, 0xb
xor edi, ebp
rorx edi, edi, 7
add r9d, edi
mov edi, dword [r13 + 0x70]
lea ebp, [rdi + r9 - 0x3683af23]
mov r9d, esi
andn edi, ebp, r10d
and r9d, ecx
xor r9d, edi
mov edi, eax
xor edi, r11d
xor r9d, edi
mov edi, esi
and edi, ebp
and r9d, r8d
xor r9d, edi
mov edi, r10d
xor edi, esi
and edi, ecx
xor edi, eax
rorx eax, eax, 0xb
xor r9d, edi
mov edi, dword [r13 + 0x1c]
rorx r9d, r9d, 7
add edx, r9d
lea edi, [rdi + rdx + 0x3f84d5b5]
mov edx, ecx
andn r9d, edi, esi
and edx, ebp
xor edx, r9d
mov r9d, r8d
xor r9d, r10d
xor edx, r9d
mov r9d, ecx
and edx, r11d
and r9d, edi
xor edx, r9d
mov r9d, esi
xor r9d, ecx
and r9d, ebp
xor r9d, r8d
rorx r8d, r8d, 0xb
xor edx, r9d
rorx edx, edx, 7
add eax, edx
mov edx, dword [r13 + 0x40]
lea r9d, [rdx + rax - 0x4ab8f6e9]
mov eax, ebp
andn edx, r9d, ecx
and eax, edi
xor eax, edx
mov edx, r11d
xor edx, esi
xor eax, edx
mov edx, ebp
and edx, r9d
and eax, r10d
xor eax, edx
mov edx, ecx
xor edx, ebp
and edx, edi
xor edx, r11d
rorx r11d, r11d, 0xb
xor eax, edx
rorx eax, eax, 7
add r8d, eax
mov eax, dword [r13]
lea r8d, [rax + r8 - 0x6de92a27]
mov eax, edi
andn edx, r8d, ebp
and eax, r9d
xor eax, edx
mov edx, r10d
xor edx, ecx
xor eax, edx
mov edx, edi
and edx, r8d
and eax, esi
xor eax, edx
mov edx, ebp
xor edx, edi
and edx, r9d
xor edx, r10d
rorx r10d, r10d, 0xb
xor eax, edx
rorx eax, eax, 7
add r11d, eax
mov eax, dword [r13 + 0x5c]
lea r11d, [rax + r11 - 0x768604e5]
mov eax, r9d
andn edx, r11d, edi
and eax, r8d
xor eax, edx
mov edx, esi
xor edx, ebp
xor eax, edx
mov edx, r9d
and edx, r11d
and eax, ecx
xor eax, edx
mov edx, edi
xor edx, r9d
and edx, r8d
xor edx, esi
rorx esi, esi, 0xb
xor eax, edx
rorx eax, eax, 7
add r10d, eax
mov eax, dword [r13 + 0x50]
lea r10d, [rax + r10 - 0x2ecef45a]
mov eax, r8d
andn edx, r10d, r9d
and eax, r11d
xor eax, edx
mov edx, ecx
xor edx, edi
xor eax, edx
mov edx, r8d
and edx, r10d
and eax, ebp
xor eax, edx
mov edx, r9d
xor edx, r8d
and edx, r11d
xor edx, ecx
rorx ecx, ecx, 0xb
xor eax, edx
rorx eax, eax, 7
add esi, eax
mov eax, dword [r13 + 0x58]
lea esi, [rax + rsi - 0x67204a54]
mov eax, r11d
andn edx, esi, r8d
and eax, r10d
xor eax, edx
mov edx, ebp
xor edx, r9d
xor eax, edx
mov edx, r11d
and edx, esi
and eax, edi
xor eax, edx
mov edx, r8d
xor edx, r11d
and edx, r10d
xor edx, ebp
rorx ebp, ebp, 0xb
xor eax, edx
rorx eax, eax, 7
add ecx, eax
mov eax, dword [r13 + 4]
lea ecx, [rax + rcx + 0x2ffd72db]
mov eax, r10d
andn edx, ecx, r11d
and eax, esi
xor eax, edx
mov edx, edi
xor edx, r8d
xor eax, edx
mov edx, r10d
and edx, ecx
and eax, r9d
xor eax, edx
mov edx, r11d
xor edx, r10d
and edx, esi
xor edx, edi
rorx edi, edi, 0xb
xor eax, edx
rorx eax, eax, 7
add ebp, eax
mov eax, dword [r13 + 0x28]
lea edx, [rax + rbp - 0x2fe52049]
mov eax, esi
andn ebp, edx, r10d
and eax, ecx
xor eax, ebp
mov ebp, r9d
xor ebp, r11d
xor eax, ebp
mov ebp, esi
and ebp, edx
and eax, r8d
xor eax, ebp
mov ebp, r10d
xor ebp, esi
and ebp, ecx
xor ebp, r9d
rorx r9d, r9d, 0xb
xor eax, ebp
rorx eax, eax, 7
add edi, eax
mov eax, dword [r13 + 0x10]
lea eax, [rax + rdi - 0x471e5013]
mov edi, ecx
andn ebp, eax, esi
and edi, edx
xor edi, ebp
mov ebp, r8d
xor ebp, r10d
xor edi, ebp
mov ebp, ecx
and ebp, eax
and edi, r11d
xor edi, ebp
mov ebp, esi
xor ebp, ecx
and ebp, edx
xor ebp, r8d
rorx r8d, r8d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r9d, edi
mov edi, dword [r13 + 0x20]
lea r9d, [rdi + r9 + 0x6a267e96]
mov edi, edx
andn ebp, r9d, ecx
and edi, eax
xor edi, ebp
mov ebp, r11d
xor ebp, esi
xor edi, ebp
mov ebp, edx
and ebp, r9d
and edi, r10d
xor edi, ebp
mov ebp, ecx
xor ebp, edx
and ebp, eax
xor ebp, r11d
rorx r11d, r11d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r8d, edi
mov edi, dword [r13 + 0x78]
lea r8d, [rdi + r8 - 0x45836fbb]
mov edi, eax
andn ebp, r8d, edx
and edi, r9d
xor edi, ebp
mov ebp, r10d
xor ebp, ecx
xor edi, ebp
mov ebp, eax
and ebp, r8d
and edi, esi
xor edi, ebp
mov ebp, edx
xor ebp, eax
and ebp, r9d
xor ebp, r10d
rorx r10d, r10d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r11d, edi
mov edi, dword [r13 + 0xc]
lea r11d, [rdi + r11 - 0xed38067]
mov edi, r9d
andn ebp, r11d, eax
and edi, r8d
xor edi, ebp
mov ebp, esi
xor ebp, edx
xor edi, ebp
mov ebp, r9d
and ebp, r11d
and edi, ecx
xor edi, ebp
mov ebp, eax
xor ebp, r9d
and ebp, r8d
xor ebp, esi
rorx esi, esi, 0xb
xor edi, ebp
rorx edi, edi, 7
add r10d, edi
mov edi, dword [r13 + 0x54]
lea r10d, [rdi + r10 + 0x24a19947]
mov edi, r8d
andn ebp, r10d, r9d
and edi, r11d
xor edi, ebp
mov ebp, ecx
xor ebp, eax
xor edi, ebp
mov ebp, r8d
and ebp, r10d
and edi, edx
xor edi, ebp
mov ebp, r9d
xor ebp, r8d
and ebp, r11d
xor ebp, ecx
rorx ecx, ecx, 0xb
xor edi, ebp
rorx edi, edi, 7
add esi, edi
mov edi, dword [r13 + 0x24]
lea esi, [rdi + rsi - 0x4c6e9309]
mov edi, r11d
andn ebp, esi, r8d
and edi, r10d
xor edi, ebp
mov ebp, edx
xor ebp, r9d
xor edi, ebp
mov ebp, r11d
and ebp, esi
and edi, eax
xor edi, ebp
mov ebp, r8d
xor ebp, r11d
and ebp, r10d
xor ebp, edx
rorx edx, edx, 0xb
xor edi, ebp
rorx edi, edi, 7
add ecx, edi
mov edi, dword [r13 + 0x44]
lea ecx, [rdi + rcx + 0x801f2e2]
mov edi, r10d
andn ebp, ecx, r11d
and edi, esi
xor edi, ebp
mov ebp, eax
xor ebp, r8d
xor edi, ebp
mov ebp, r10d
and ebp, ecx
and edi, r9d
xor edi, ebp
mov ebp, r11d
xor ebp, r10d
and ebp, esi
xor ebp, eax
rorx eax, eax, 0xb
xor edi, ebp
rorx edi, edi, 7
add edx, edi
mov edi, dword [r13 + 0x60]
lea edx, [rdi + rdx - 0x7a7103ea]
mov edi, esi
andn ebp, edx, r10d
and edi, ecx
xor edi, ebp
mov ebp, r9d
xor ebp, r11d
xor edi, ebp
mov ebp, esi
and ebp, edx
and edi, r8d
xor edi, ebp
mov ebp, r10d
xor ebp, esi
and ebp, ecx
xor ebp, r9d
rorx r9d, r9d, 0xb
xor edi, ebp
rorx edi, edi, 7
add eax, edi
mov edi, dword [r13 + 0x74]
lea eax, [rdi + rax + 0x636920d8]
mov edi, ecx
andn ebp, eax, esi
and edi, edx
mov r12d, eax
xor edi, ebp
mov ebp, r8d
xor ebp, r10d
xor edi, ebp
mov ebp, ecx
and ebp, eax
and edi, r11d
xor edi, ebp
mov ebp, esi
xor ebp, ecx
and ebp, edx
xor ebp, r8d
rorx r8d, r8d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r9d, edi
mov edi, dword [r13 + 0x18]
lea r9d, [rdi + r9 + 0x71574e69]
mov edi, edx
andn ebp, r9d, ecx
and edi, eax
mov r14d, r9d
xor edi, ebp
mov ebp, r11d
xor ebp, esi
xor edi, ebp
mov ebp, edx
and ebp, r9d
and edi, r10d
xor edi, ebp
mov ebp, ecx
xor ebp, edx
and ebp, eax
xor ebp, r11d
rorx r11d, r11d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r8d, edi
mov edi, dword [r13 + 0x4c]
lea r8d, [rdi + r8 - 0x5ba7015d]
mov edi, eax
andn ebp, r8d, edx
and edi, r9d
mov r15d, r8d
xor edi, ebp
mov ebp, r10d
xor ebp, ecx
xor edi, ebp
mov ebp, eax
and ebp, r8d
and edi, esi
xor edi, ebp
mov ebp, edx
xor ebp, eax
and ebp, r9d
xor ebp, r10d
rorx r10d, r10d, 0xb
xor edi, ebp
rorx edi, edi, 7
add r11d, edi
mov edi, dword [r13 + 0x30]
lea r11d, [rdi + r11 - 0xb6cc282]
mov edi, r9d
andn ebp, r11d, eax
and edi, r8d
xor edi, ebp
mov ebp, esi
xor ebp, edx
xor edi, ebp
mov ebp, r9d
and ebp, r11d
and edi, ecx
xor edi, ebp
mov ebp, eax
xor ebp, r9d
and ebp, r8d
xor ebp, esi
rorx esi, esi, 0xb
xor edi, ebp
rorx edi, edi, 7
add r10d, edi
mov edi, dword [r13 + 0x3c]
lea r10d, [rdi + r10 + 0xd95748f]
mov edi, r8d
andn ebp, r10d, r9d
and edi, r11d
xor r12d, r8d
xor edi, ebp
mov ebp, ecx
xor ebp, eax
xor edi, ebp
mov ebp, r8d
and ebp, r10d
and edi, edx
xor edi, ebp
mov ebp, r9d
xor ebp, r8d
and ebp, r11d
xor ebp, ecx
rorx ecx, ecx, 0xb
xor edi, ebp
rorx edi, edi, 7
add esi, edi
mov edi, dword [r13 + 0x34]
lea edi, [rdi + rsi + 0x728eb658]
mov esi, r11d
andn ebp, edi, r8d
and esi, r10d
xor esi, ebp
mov ebp, edx
xor ebp, r9d
xor esi, ebp
mov ebp, r11d
and ebp, edi
and esi, eax
xor esi, ebp
mov ebp, r8d
xor ebp, r11d
and ebp, r10d
xor ebp, edx
rorx edx, edx, 0xb
xor esi, ebp
rorx esi, esi, 7
add ecx, esi
mov esi, dword [r13 + 8]
lea ebp, [rsi + rcx + 0x718bcd58]
mov ecx, r10d
and ecx, edi
andn esi, ebp, r11d
xor esi, ecx
xor esi, r12d
mov r12d, r10d
and r12d, ebp
and esi, r9d
xor esi, r12d
mov r12d, r11d
xor r14d, r11d
xor r15d, r10d
xor r12d, r10d
and r12d, edi
xor r12d, eax
rorx eax, eax, 0xb
xor esi, r12d
rorx esi, esi, 7
add edx, esi
mov esi, dword [r13 + 0x64]
lea r12d, [rsi + rdx - 0x7deab512]
mov edx, edi
and edx, ebp
andn esi, r12d, r10d
xor esi, edx
xor esi, r14d
mov r14d, edi
and r14d, r12d
and esi, r8d
xor esi, r14d
mov r14d, r10d
xor r14d, edi
and r14d, ebp
xor r14d, r9d
rorx r9d, r9d, 0xb
xor esi, r14d
rorx esi, esi, 7
add eax, esi
mov esi, dword [r13 + 0x7c]
lea r14d, [rsi + rax + 0x7b54a41d]
mov eax, ebp
and eax, r12d
andn esi, r14d, edi
xor esi, eax
xor esi, r15d
mov r15d, ebp
and r15d, r14d
and esi, r11d
xor esi, r15d
mov r15d, edi
xor r15d, ebp
and r15d, r12d
xor r15d, r8d
rorx r8d, r8d, 0xb
xor esi, r15d
mov r15d, r10d
rorx esi, esi, 7
add r9d, esi
mov esi, dword [r13 + 0x6c]
lea r9d, [rsi + r9 - 0x3da5a64b]
mov esi, edi
and esi, r14d
xor ecx, r11d
and r15d, r12d
xor edx, r10d
xor ecx, r9d
xor r15d, esi
rorx r11d, r11d, 0xb
xor eax, edi
and ecx, ebp
rorx r10d, r10d, 0xb
rorx edi, edi, 0xb
xor ecx, r9d
xor ecx, r15d
mov r15d, dword [r13 + 0x58]
rorx ecx, ecx, 7
add r8d, ecx
mov ecx, dword [r13 + 0x4c]
lea ecx, [rcx + r8 - 0x63cf2ac7]
mov r8d, ebp
xor edx, ecx
and r8d, r9d
and edx, r12d
xor esi, r8d
xor edx, ecx
xor esi, edx
rorx edx, esi, 7
mov esi, dword [r13 + 0x24]
add r11d, edx
lea edx, [rsi + r11 + 0x2af26013]
mov r11d, r12d
mov esi, dword [r13 + 0x50]
xor eax, edx
and r11d, ecx
and eax, r14d
xor r8d, r11d
xor eax, edx
xor r8d, eax
rorx eax, r8d, 7
mov r8d, r12d
add r10d, eax
mov eax, dword [r13 + 0x10]
and r8d, r14d
xor r8d, ebp
rorx ebp, ebp, 0xb
lea r10d, [rax + r10 - 0x3a2e4fdd]
mov eax, r14d
xor r8d, r10d
and eax, edx
and r8d, r9d
xor r11d, eax
xor r8d, r10d
xor r11d, r8d
rorx r8d, r11d, 7
add edi, r8d
mov r8d, r9d
lea r11d, [rsi + rdi + 0x286085f0]
mov esi, r14d
and r8d, r10d
mov edi, r9d
and esi, r9d
xor eax, r8d
and edi, ecx
xor esi, r12d
xor edi, r14d
rorx r12d, r12d, 0xb
rorx r14d, r14d, 0xb
xor esi, r11d
and esi, ecx
xor esi, r11d
xor eax, esi
rorx esi, eax, 7
mov eax, dword [r13 + 0x70]
add ebp, esi
lea esi, [rax + rbp - 0x35be86e8]
mov eax, ecx
mov ebp, ecx
xor edi, esi
and eax, r11d
and ebp, edx
and edi, edx
xor r8d, eax
xor ebp, r9d
rorx r9d, r9d, 0xb
xor edi, esi
xor r8d, edi
rorx edi, r8d, 7
mov r8d, edx
add r12d, edi
mov edi, dword [r13 + 0x44]
and r8d, esi
xor eax, r8d
lea edi, [rdi + r12 - 0x4724c711]
mov r12d, edx
xor ebp, edi
and r12d, r10d
and ebp, r10d
xor r12d, ecx
rorx ecx, ecx, 0xb
xor ebp, edi
xor eax, ebp
rorx ebp, eax, 7
mov eax, dword [r13 + 0x20]
add r14d, ebp
lea ebp, [rax + r14 - 0x71862350]
mov eax, r10d
mov r14d, dword [r13 + 0xc]
and eax, edi
xor r12d, ebp
and r12d, r11d
xor r8d, eax
xor r12d, ebp
xor r8d, r12d
rorx r12d, r8d, 7
mov r8d, r11d
add r9d, r12d
mov r12d, r10d
and r8d, ebp
and r12d, r11d
lea r9d, [r15 + r9 + 0x603a180e]
xor eax, r8d
mov r15d, dword [r13 + 0x38]
xor r12d, edx
rorx edx, edx, 0xb
xor r12d, r9d
and r12d, esi
xor r12d, r9d
xor eax, r12d
rorx r12d, eax, 7
mov eax, dword [r13 + 0x74]
add ecx, r12d
mov r12d, r11d
and r12d, esi
xor r12d, r10d
rorx r10d, r10d, 0xb
lea eax, [rax + rcx + 0x6c9e0e8b]
mov ecx, esi
xor r12d, eax
and ecx, r9d
and r12d, edi
xor r8d, ecx
xor r12d, eax
xor r8d, r12d
rorx r12d, r8d, 7
add edx, r12d
mov r12d, esi
and r12d, edi
lea r8d, [r15 + rdx - 0x4fe175c2]
mov edx, edi
mov r15d, dword [r13 + 0x7c]
xor r12d, r11d
and edx, eax
rorx r11d, r11d, 0xb
xor r12d, r8d
xor ecx, edx
and r12d, ebp
xor r12d, r8d
xor ecx, r12d
rorx r12d, ecx, 7
mov ecx, dword [r13 + 0x64]
add r10d, r12d
mov r12d, edi
and r12d, ebp
xor r12d, esi
rorx esi, esi, 0xb
lea r10d, [rcx + r10 - 0x28ea883f]
mov ecx, ebp
xor r12d, r10d
and ecx, r8d
and r12d, r9d
xor edx, ecx
xor r12d, r10d
xor edx, r12d
rorx r12d, edx, 7
mov edx, dword [r13 + 0x30]
add r11d, r12d
mov r12d, ebp
and r12d, r9d
xor r12d, edi
rorx edi, edi, 0xb
lea r11d, [rdx + r11 - 0x42ceb4d9]
mov edx, r9d
xor r12d, r11d
and edx, r10d
and r12d, eax
xor ecx, edx
xor r12d, r11d
xor ecx, r12d
rorx r12d, ecx, 7
mov ecx, dword [r13 + 0x60]
add esi, r12d
mov r12d, r9d
and r12d, eax
xor r12d, ebp
rorx ebp, ebp, 0xb
lea esi, [rcx + rsi + 0x78af2fda]
mov ecx, eax
xor r12d, esi
and ecx, r11d
and r12d, r8d
xor edx, ecx
xor r12d, esi
xor edx, r12d
rorx r12d, edx, 7
mov edx, dword [r13 + 0x78]
add edi, r12d
mov r12d, eax
and r12d, r8d
xor r12d, r9d
rorx r9d, r9d, 0xb
lea edi, [rdx + rdi + 0x55605c60]
mov edx, r8d
xor r12d, edi
and edx, esi
and r12d, r10d
xor ecx, edx
xor r12d, edi
xor ecx, r12d
rorx r12d, ecx, 7
mov ecx, dword [r13 + 0x40]
add ebp, r12d
mov r12d, r8d
and r12d, r10d
xor r12d, eax
rorx eax, eax, 0xb
lea ecx, [rcx + rbp - 0x19aada0d]
mov ebp, r10d
xor r12d, ecx
and ebp, edi
and r12d, r11d
xor edx, ebp
xor r12d, ecx
xor edx, r12d
rorx r12d, edx, 7
mov edx, dword [r13 + 0x68]
add r9d, r12d
mov r12d, r10d
and r12d, r11d
xor r12d, r8d
rorx r8d, r8d, 0xb
lea edx, [rdx + r9 - 0x55aa546c]
mov r9d, r11d
xor r12d, edx
and r9d, ecx
and r12d, esi
xor ebp, r9d
xor r12d, edx
xor ebp, r12d
rorx r12d, ebp, 7
mov ebp, esi
add eax, r12d
mov r12d, r11d
and ebp, edx
and r12d, esi
lea eax, [r15 + rax + 0x57489862]
xor r9d, ebp
mov r15d, dword [r13 + 0x3c]
xor r12d, r10d
rorx r10d, r10d, 0xb
xor r12d, eax
and r12d, edi
xor r12d, eax
xor r9d, r12d
rorx r12d, r9d, 7
add r8d, r12d
mov r12d, esi
lea r9d, [r15 + r8 + 0x63e81440]
mov r8d, edi
mov r15d, dword [r13 + 0x1c]
and r8d, eax
and r12d, edi
xor r12d, r11d
xor ebp, r8d
rorx r11d, r11d, 0xb
xor r12d, r9d
and r12d, ecx
xor r12d, r9d
xor ebp, r12d
rorx r12d, ebp, 7
mov ebp, ecx
add r10d, r12d
mov r12d, edi
and ebp, r9d
and r12d, ecx
lea r10d, [r15 + r10 + 0x55ca396a]
xor r8d, ebp
mov r15d, dword [r13 + 4]
xor r12d, esi
rorx esi, esi, 0xb
xor r12d, r10d
and r12d, edx
xor r12d, r10d
xor r8d, r12d
rorx r12d, r8d, 7
mov r8d, edx
add r11d, r12d
mov r12d, ecx
and r8d, r10d
and r12d, edx
lea r11d, [r14 + r11 + 0x2aab10b6]
xor ebp, r8d
mov r14d, dword [r13]
xor r12d, edi
rorx edi, edi, 0xb
xor r12d, r11d
and r12d, eax
xor r12d, r11d
xor ebp, r12d
rorx r12d, ebp, 7
mov ebp, eax
add esi, r12d
mov r12d, edx
and ebp, r11d
and r12d, eax
lea esi, [r15 + rsi - 0x4b33a3cc]
mov r15d, dword [r13 + 0x48]
xor r12d, ecx
rorx ecx, ecx, 0xb
xor r12d, esi
and r12d, r9d
xor r12d, esi
xor r8d, ebp
xor r8d, r12d
rorx r12d, r8d, 7
add edi, r12d
mov r12d, eax
and r12d, r9d
lea r8d, [r14 + rdi + 0x1141e8ce]
mov edi, r9d
xor r12d, edx
and edi, esi
rorx edx, edx, 0xb
xor r12d, r8d
xor ebp, edi
and r12d, r10d
xor r12d, r8d
xor ebp, r12d
rorx r12d, ebp, 7
mov ebp, r10d
add ecx, r12d
mov r12d, r9d
and ebp, r8d
and r12d, r10d
lea ecx, [r15 + rcx - 0x5eab7951]
xor edi, ebp
xor r12d, eax
rorx eax, eax, 0xb
xor r12d, ecx
and r12d, r11d
xor r12d, ecx
xor edi, r12d
rorx r12d, edi, 7
mov edi, dword [r13 + 0x6c]
mov r14d, dword [r13 + 0x18]
add edx, r12d
mov r12d, r11d
mov r15d, dword [r13 + 0x28]
and r12d, ecx
xor ebp, r12d
lea edx, [rdi + rdx + 0x7c72e993]
mov edi, r10d
and edi, r11d
xor edi, r9d
rorx r9d, r9d, 0xb
xor edi, edx
and edi, esi
xor edi, edx
xor ebp, edi
rorx edi, ebp, 7
mov ebp, r11d
add eax, edi
mov edi, dword [r13 + 0x34]
lea edi, [rdi + rax - 0x4c11ebef]
mov eax, esi
and eax, edx
and ebp, esi
xor ebp, r10d
xor r12d, eax
rorx r10d, r10d, 0xb
xor ebp, edi
and ebp, r8d
xor ebp, edi
xor r12d, ebp
rorx ebp, r12d, 7
mov r12d, esi
add r9d, ebp
and r12d, r8d
mov ebp, r8d
lea r9d, [r14 + r9 + 0x636fbc2a]
xor r12d, r11d
and ebp, edi
rorx r11d, r11d, 0xb
xor r12d, r9d
xor eax, ebp
and r12d, ecx
xor r12d, r9d
xor eax, r12d
rorx r12d, eax, 7
mov eax, dword [r13 + 0x54]
add r10d, r12d
mov r12d, r8d
and r12d, ecx
xor r12d, esi
rorx esi, esi, 0xb
lea r10d, [rax + r10 + 0x2ba9c55d]
mov eax, ecx
xor r12d, r10d
and eax, r9d
and r12d, edx
xor ebp, eax
xor r12d, r10d
xor ebp, r12d
rorx r12d, ebp, 7
mov ebp, edx
add r11d, r12d
mov r12d, ecx
and ebp, r10d
and r12d, edx
lea r11d, [r15 + r11 + 0x741831f6]
xor r12d, r8d
rorx r8d, r8d, 0xb
xor r12d, r11d
and r12d, edi
xor r12d, r11d
xor eax, ebp
xor eax, r12d
rorx r12d, eax, 7
mov eax, dword [r13 + 0x5c]
add esi, r12d
mov r12d, edi
and r12d, r11d
xor ebp, r12d
lea esi, [rax + rsi - 0x31a3c1ea]
mov eax, edx
and eax, edi
xor eax, ecx
rorx ecx, ecx, 0xb
xor eax, esi
and eax, r9d
xor eax, esi
xor ebp, eax
rorx eax, ebp, 7
mov ebp, r9d
add r8d, eax
mov eax, dword [r13 + 0x2c]
and ebp, esi
xor r12d, ebp
lea r8d, [rax + r8 - 0x64786ce2]
mov eax, edi
and eax, r9d
xor eax, edx
rorx edx, edx, 0xb
xor eax, r8d
and eax, r10d
xor eax, r8d
xor r12d, eax
mov eax, dword [r13 + 0x14]
rorx r12d, r12d, 7
add ecx, r12d
lea ecx, [rax + rcx - 0x502945cd]
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 8]
lea r12d, [rdx + rax + 0x6c24cf5c]
mov eax, r9d
mov edx, r10d
and eax, r10d
and edx, r8d
xor eax, edi
xor ebp, edx
xor eax, ecx
and eax, r11d
xor eax, ecx
add ecx, dword [r13 + 0x84]
xor ebp, eax
rorx ebp, ebp, 7
add ebp, r12d
add r8d, dword [r13 + 0x88]
add esi, dword [r13 + 0x8c]
add r11d, dword [r13 + 0x90]
add r10d, dword [r13 + 0x94]
mov dword [r13 + 0x80], ebp
add r9d, dword [r13 + 0x98]
mov dword [r13 + 0x84], ecx
add edi, dword [r13 + 0x9c]
mov dword [r13 + 0x8c], esi
mov dword [r13 + 0x88], r8d
xor esi, esi
mov dword [r13 + 0x90], r11d
mov dword [r13 + 0x94], r10d
mov dword [r13 + 0x98], r9d
mov dword [r13 + 0x9c], edi
add qword [r13 + 0xa8], rbx
cmp qword [rsp + 0x80], 0
je 0x4d1570
mov ebx, pe_nt_image_headers64
mov ecx, esi
sub ebx, esi
add rcx, r13
cmp rbx, qword [rsp + 0x80]
jbe 0x4cfec0
mov ebx, dword [rsp + 0x80]
mov rdx, qword [rsp + 0x78]
mov r8, rbx
call sub.msvcrt.dll_memcpy
add esi, dword [rsp + 0x80]
add qword [rsp + 0x78], rbx
sub qword [rsp + 0x80], rbx
cmp esi, 0x80
jne 0x4d150f
jmp 0x4cfeda
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret