Function at 0x4b1ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov esi, dword [rcx + 0xa8]
mov r13, rcx
mov r14, r8
and esi, 0x7f
test r8, r8
je 0x4b3140
mov qword [rsp + 0x88], rdx
jmp 0x4b30f4
mov rdx, qword [rsp + 0x88]
mov r8, rax
mov rbx, rax
sub r14, rbx
call sub.msvcrt.dll_memcpy
add qword [rsp + 0x88], rbx
mov ecx, dword [r13]
mov eax, dword [r13 + 0x8c]
rorx edx, dword [r13 + 0x9c], 0xb
rorx r10d, dword [r13 + 0x94], 0xb
xor eax, dword [r13 + 0x90]
rorx ebx, dword [r13 + 0x90], 0xb
and eax, dword [r13 + 0x88]
mov r8d, dword [r13 + 0x84]
and r8d, dword [r13 + 0x94]
xor eax, dword [r13 + 0x90]
add ecx, edx
mov edx, dword [r13 + 0x80]
and edx, dword [r13 + 0x98]
add r10d, dword [r13 + 8]
add ebx, dword [r13 + 0xc]
xor edx, r8d
mov r8d, dword [r13 + 0x94]
xor edx, eax
rorx eax, dword [r13 + 0x98], 0xb
add eax, dword [r13 + 4]
rorx edx, edx, 7
add edx, ecx
and r8d, edx
mov ecx, eax
mov eax, dword [r13 + 0x88]
xor eax, dword [r13 + 0x8c]
and eax, dword [r13 + 0x84]
xor eax, r8d
mov r8d, dword [r13 + 0x80]
and r8d, dword [r13 + 0x90]
xor r8d, dword [r13 + 0x8c]
xor eax, r8d
mov r8d, r10d
mov r10d, dword [r13 + 0x90]
rorx eax, eax, 7
add eax, ecx
mov ecx, dword [r13 + 0x8c]
and r10d, eax
and ecx, edx
xor ecx, r10d
mov r10d, dword [r13 + 0x84]
xor r10d, dword [r13 + 0x88]
and r10d, dword [r13 + 0x80]
xor r10d, dword [r13 + 0x88]
xor r10d, ecx
mov ecx, dword [r13 + 0x88]
rorx r10d, r10d, 7
add r10d, r8d
mov r8d, ebx
mov ebx, dword [r13 + 0x8c]
and ecx, eax
and ebx, r10d
xor ecx, ebx
mov ebx, dword [r13 + 0x80]
xor ebx, dword [r13 + 0x84]
rorx edi, dword [r13 + 0x84], 0xb
mov r11d, dword [r13 + 0x14]
rorx esi, dword [r13 + 0x80], 0xb
and ebx, edx
xor ebx, dword [r13 + 0x84]
add edi, dword [r13 + 0x18]
add esi, dword [r13 + 0x1c]
xor ebx, ecx
rorx ecx, dword [r13 + 0x8c], 0xb
add ecx, dword [r13 + 0x10]
rorx ebx, ebx, 7
add ebx, r8d
mov r8d, dword [r13 + 0x88]
mov r9d, ecx
mov ecx, dword [r13 + 0x84]
and r8d, ebx
and ecx, r10d
xor ecx, r8d
mov r8d, dword [r13 + 0x80]
xor r8d, edx
and r8d, eax
xor r8d, dword [r13 + 0x80]
xor ecx, r8d
mov r8d, dword [r13 + 0x80]
rorx ecx, ecx, 7
add ecx, r9d
rorx r9d, dword [r13 + 0x88], 0xb
add r11d, r9d
mov r9d, dword [r13 + 0x84]
and r8d, ebx
and r9d, ecx
xor r8d, r9d
mov r9d, edx
xor r9d, eax
and r9d, r10d
xor r9d, edx
xor r9d, r8d
mov r8d, edx
rorx r9d, r9d, 7
and r8d, ecx
add r9d, r11d
mov r11d, edi
mov edi, dword [r13 + 0x80]
and edi, r9d
xor r8d, edi
mov edi, eax
xor edi, r10d
and edi, ebx
xor edi, eax
xor edi, r8d
mov r8d, eax
rorx edi, edi, 7
add edi, r11d
mov r11d, esi
mov esi, edx
rorx edx, edx, 0xb
and esi, edi
and r8d, r9d
add edx, dword [r13 + 0x20]
xor r8d, esi
mov esi, r10d
xor esi, ebx
and esi, ecx
xor esi, r10d
xor esi, r8d
mov r8d, r10d
rorx esi, esi, 7
and r8d, edi
add esi, r11d
mov r11d, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x24]
and r11d, esi
xor r8d, r11d
mov r11d, ebx
xor r11d, ecx
and r11d, r9d
xor r11d, ebx
xor r8d, r11d
mov r11d, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, edx
mov edx, ebx
and edx, esi
and r11d, r8d
xor r11d, edx
mov edx, ecx
xor edx, r9d
and edx, edi
xor edx, ecx
xor r11d, edx
mov edx, ecx
rorx r11d, r11d, 7
and edx, r8d
add r11d, eax
mov eax, dword [r13 + 0x28]
add eax, r10d
mov r10d, ebx
rorx ebx, ebx, 0xb
and r10d, r11d
xor r10d, edx
mov edx, r9d
xor edx, edi
and edx, esi
xor edx, r9d
xor r10d, edx
mov edx, r9d
rorx r10d, r10d, 7
and edx, r11d
add r10d, eax
mov eax, dword [r13 + 0x2c]
add eax, ebx
mov ebx, ecx
rorx ecx, ecx, 0xb
and ebx, r10d
xor ebx, edx
mov edx, edi
xor edx, esi
and edx, r8d
xor edx, edi
xor ebx, edx
mov edx, edi
rorx ebx, ebx, 7
and edx, r10d
add ebx, eax
mov eax, dword [r13 + 0x30]
add eax, ecx
mov ecx, r9d
rorx r9d, r9d, 0xb
and ecx, ebx
xor ecx, edx
mov edx, esi
xor edx, r8d
and edx, r11d
xor edx, esi
xor ecx, edx
mov edx, esi
rorx ecx, ecx, 7
and edx, ebx
add ecx, eax
mov eax, dword [r13 + 0x34]
add eax, r9d
mov r9d, edi
rorx edi, edi, 0xb
add edi, dword [r13 + 0x38]
and r9d, ecx
xor r9d, edx
mov edx, r8d
xor edx, r11d
and edx, r10d
xor edx, r8d
xor r9d, edx
mov edx, esi
rorx esi, esi, 0xb
rorx r9d, r9d, 7
add r9d, eax
mov eax, r8d
and edx, r9d
and eax, ecx
add esi, dword [r13 + 0x3c]
xor edx, eax
mov eax, r11d
xor eax, r10d
and eax, ebx
xor eax, r11d
xor edx, eax
mov eax, r11d
rorx edx, edx, 7
and eax, r9d
add edx, edi
mov edi, r8d
rorx r8d, r8d, 0xb
and edi, edx
xor eax, edi
mov edi, r10d
xor edi, ebx
and edi, ecx
xor edi, r10d
xor eax, edi
mov edi, r11d
rorx r11d, r11d, 0xb
rorx eax, eax, 7
add eax, esi
mov esi, dword [r13 + 0x40]
and edi, eax
add esi, r8d
mov r8d, r10d
and r8d, edx
xor r8d, edi
mov edi, ebx
xor edi, ecx
and edi, r9d
xor edi, ebx
xor r8d, edi
mov edi, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, esi
mov esi, dword [r13 + 0x44]
and edi, r8d
add esi, r11d
mov r11d, ebx
and r11d, eax
xor r11d, edi
mov edi, ecx
xor edi, r9d
and edi, edx
xor edi, ecx
xor r11d, edi
mov edi, ebx
rorx ebx, ebx, 0xb
add ebx, dword [r13 + 0x4c]
rorx r11d, r11d, 7
add r11d, esi
mov esi, dword [r13 + 0x48]
and edi, r11d
add esi, r10d
mov r10d, ecx
and r10d, r8d
xor r10d, edi
mov edi, r9d
xor edi, edx
and edi, eax
xor edi, r9d
xor r10d, edi
mov edi, ecx
rorx ecx, ecx, 0xb
add ecx, dword [r13 + 0x50]
rorx r10d, r10d, 7
add r10d, esi
mov esi, ebx
mov ebx, r9d
and edi, r10d
and ebx, r11d
xor ebx, edi
mov edi, edx
xor edi, eax
and edi, r8d
xor edi, edx
xor ebx, edi
mov edi, r9d
rorx r9d, r9d, 0xb
rorx ebx, ebx, 7
add ebx, esi
mov esi, ecx
mov ecx, edx
and edi, ebx
and ecx, r10d
xor ecx, edi
mov edi, eax
xor edi, r8d
and edi, r11d
xor edi, eax
xor ecx, edi
mov edi, edx
rorx edx, edx, 0xb
rorx ecx, ecx, 7
add ecx, esi
mov esi, dword [r13 + 0x54]
and edi, ecx
add esi, r9d
mov r9d, eax
and r9d, ebx
xor r9d, edi
mov edi, r8d
add edx, dword [r13 + 0x58]
xor edi, r11d
and edi, r10d
xor edi, r8d
xor r9d, edi
mov edi, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x5c]
rorx r9d, r9d, 7
add r9d, esi
mov esi, edx
mov edx, r8d
and edi, r9d
and edx, ecx
xor edx, edi
mov edi, r11d
xor edi, r10d
and edi, ebx
xor edi, r11d
xor edx, edi
mov edi, r8d
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, esi
mov esi, eax
mov eax, r11d
and edi, edx
and eax, r9d
xor eax, edi
mov edi, r10d
xor edi, ebx
and edi, ecx
xor edi, r10d
xor eax, edi
mov edi, r11d
rorx r11d, r11d, 0xb
rorx eax, eax, 7
add eax, esi
mov esi, dword [r13 + 0x60]
and edi, eax
add esi, r8d
mov r8d, r10d
and r8d, edx
xor r8d, edi
mov edi, ebx
xor edi, ecx
and edi, r9d
xor edi, ebx
xor r8d, edi
mov edi, r10d
rorx r10d, r10d, 0xb
rorx r8d, r8d, 7
add r8d, esi
mov esi, dword [r13 + 0x64]
and edi, r8d
add esi, r11d
mov r11d, ebx
and r11d, eax
xor r11d, edi
mov edi, ecx
xor edi, r9d
and edi, edx
xor edi, ecx
xor r11d, edi
mov edi, ebx
rorx ebx, ebx, 0xb
add ebx, dword [r13 + 0x6c]
rorx r11d, r11d, 7
add r11d, esi
mov esi, dword [r13 + 0x68]
and edi, r11d
add esi, r10d
mov r10d, ecx
and r10d, r8d
xor r10d, edi
mov edi, r9d
xor edi, edx
and edi, eax
xor edi, r9d
xor r10d, edi
mov edi, ecx
rorx ecx, ecx, 0xb
add ecx, dword [r13 + 0x70]
rorx r10d, r10d, 7
add r10d, esi
mov esi, ebx
mov ebx, r9d
and edi, r10d
and ebx, r11d
xor ebx, edi
mov edi, edx
xor edi, eax
and edi, r8d
xor edi, edx
xor ebx, edi
mov edi, r9d
rorx r9d, r9d, 0xb
rorx ebx, ebx, 7
add ebx, esi
mov esi, ecx
mov ecx, edx
and edi, ebx
and ecx, r10d
xor ecx, edi
mov edi, eax
xor edi, r8d
and edi, r11d
xor edi, eax
xor ecx, edi
mov edi, edx
rorx edx, edx, 0xb
add edx, dword [r13 + 0x78]
rorx ecx, ecx, 7
add ecx, esi
mov esi, dword [r13 + 0x74]
and edi, ecx
add esi, r9d
mov r9d, eax
and r9d, ebx
xor r9d, edi
mov edi, r8d
xor edi, r11d
and edi, r10d
xor edi, r8d
xor r9d, edi
mov edi, eax
rorx eax, eax, 0xb
add eax, dword [r13 + 0x7c]
rorx r9d, r9d, 7
add r9d, esi
mov esi, edx
mov edx, r8d
and edi, r9d
and edx, ecx
xor edx, edi
mov edi, r11d
xor edi, r10d
and edi, ebx
xor edi, r11d
xor edx, edi
mov edi, r8d
rorx r8d, r8d, 0xb
rorx edx, edx, 7
add edx, esi
mov esi, eax
mov eax, r11d
and edi, edx
and eax, r9d
xor eax, edi
mov edi, r10d
xor edi, ebx
and edi, ecx
xor edi, r10d
xor eax, edi
rorx eax, eax, 7
add eax, esi
mov esi, r9d
andn edi, eax, ecx
and esi, edx
xor esi, edi
mov edi, r11d
xor edi, ebx
xor esi, edi
mov edi, r9d
and edi, eax
and esi, r10d
xor esi, edi
mov edi, ecx
xor edi, r9d
and edi, edx
xor edi, r11d
rorx r11d, r11d, 0xb
xor esi, edi
rorx esi, esi, 7
add r8d, esi
mov esi, dword [r13 + 0x14]
lea r8d, [rsi + r8 + 0x452821e6]
mov esi, edx
andn edi, r8d, r9d
and esi, eax
xor esi, edi
mov edi, r10d
xor edi, ecx
xor esi, edi
mov edi, edx
and edi, r8d
and esi, ebx
xor esi, edi
mov edi, r9d
xor edi, edx
and edi, eax
xor edi, r10d
rorx r10d, r10d, 0xb
xor esi, edi
rorx esi, esi, 7
add r11d, esi
mov esi, dword [r13 + 0x38]
lea r11d, [rsi + r11 + 0x38d01377]
mov esi, eax
andn edi, r11d, edx
and esi, r8d
xor esi, edi
mov edi, ebx
xor edi, r9d
xor esi, edi
mov edi, eax
and esi, ecx
and edi, r11d
xor esi, edi
mov edi, edx
xor edi, eax
and edi, r8d
xor edi, ebx
rorx ebx, ebx, 0xb
xor esi, edi
rorx esi, esi, 7
add r10d, esi
mov esi, dword [r13 + 0x68]
lea r10d, [rsi + r10 - 0x41ab9931]
mov esi, r8d
andn edi, r10d, eax
and esi, r11d
xor esi, edi
mov edi, ecx
xor edi, edx
xor esi, edi
mov edi, r8d
and edi, r10d
and esi, r9d
xor esi, edi
mov edi, eax
xor edi, r8d
and edi, r11d
xor edi, ecx
rorx ecx, ecx, 0xb
xor esi, edi
rorx esi, esi, 7
add ebx, esi
mov esi, dword [r13 + 0x48]
lea ebx, [rsi + rbx + 0x34e90c6c]
mov esi, r11d
andn edi, ebx, r8d
and esi, r10d
xor esi, edi
mov edi, r9d
xor edi, eax
xor esi, edi
mov edi, r11d
and edi, ebx
and esi, edx
xor esi, edi
mov edi, r8d
xor edi, r11d
and edi, r10d
xor edi, r9d
rorx r9d, r9d, 0xb
xor esi, edi
rorx esi, esi, 7
add ecx, esi
mov esi, dword [r13 + 0x2c]
lea ecx, [rsi + rcx - 0x3f53d649]
mov esi, r10d
andn edi, ecx, r11d
and esi, ebx
xor esi, edi
mov edi, edx
xor edi, r8d
xor esi, edi
mov edi, r10d
and edi, ecx
and esi, eax
xor esi, edi
mov edi, r11d
xor edi, r10d
and edi, ebx
xor edi, edx
rorx edx, edx, 0xb
xor esi, edi
rorx esi, esi, 7
add r9d, esi
mov esi, dword [r13 + 0x70]
lea edi, [rsi + r9 - 0x3683af23]
mov r9d, ebx
andn esi, edi, r10d
and r9d, ecx
xor r9d, esi
mov esi, eax
xor esi, r11d
xor r9d, esi
mov esi, ebx
and esi, edi
and r9d, r8d
xor r9d, esi
mov esi, r10d
xor esi, ebx
and esi, ecx
xor esi, eax
rorx eax, eax, 0xb
xor r9d, esi
mov esi, dword [r13 + 0x1c]
rorx r9d, r9d, 7
add edx, r9d
lea esi, [rsi + rdx + 0x3f84d5b5]
mov edx, ecx
andn r9d, esi, ebx
and edx, edi
xor edx, r9d
mov r9d, r8d
xor r9d, r10d
xor edx, r9d
mov r9d, ecx
and edx, r11d
and r9d, esi
xor edx, r9d
mov r9d, ebx
xor r9d, ecx
and r9d, edi
xor r9d, r8d
rorx r8d, r8d, 0xb
xor edx, r9d
rorx edx, edx, 7
add eax, edx
mov edx, dword [r13 + 0x40]
lea r9d, [rdx + rax - 0x4ab8f6e9]
mov eax, edi
andn edx, r9d, ecx
and eax, esi
xor eax, edx
mov edx, r11d
xor edx, ebx
xor eax, edx
mov edx, edi
and edx, r9d
and eax, r10d
xor eax, edx
mov edx, ecx
xor edx, edi
and edx, esi
xor edx, r11d
rorx r11d, r11d, 0xb
xor eax, edx
rorx eax, eax, 7
add r8d, eax
mov eax, dword [r13]
lea r8d, [rax + r8 - 0x6de92a27]
mov eax, esi
andn edx, r8d, edi
and eax, r9d
xor eax, edx
mov edx, r10d
xor edx, ecx
xor eax, edx
mov edx, esi
and edx, r8d
and eax, ebx
xor eax, edx
mov edx, edi
xor edx, esi
and edx, r9d
xor edx, r10d
rorx r10d, r10d, 0xb
xor eax, edx
rorx eax, eax, 7
add r11d, eax
mov eax, dword [r13 + 0x5c]
lea r11d, [rax + r11 - 0x768604e5]
mov eax, r9d
andn edx, r11d, esi
and eax, r8d
xor eax, edx
mov edx, ebx
xor edx, edi
xor eax, edx
mov edx, r9d
and edx, r11d
and eax, ecx
xor eax, edx
mov edx, esi
xor edx, r9d
and edx, r8d
xor edx, ebx
rorx ebx, ebx, 0xb
xor eax, edx
rorx eax, eax, 7
add r10d, eax
mov eax, dword [r13 + 0x50]
lea r10d, [rax + r10 - 0x2ecef45a]
mov eax, r8d
andn edx, r10d, r9d
and eax, r11d
xor eax, edx
mov edx, ecx
xor edx, esi
xor eax, edx
mov edx, r8d
and edx, r10d
and eax, edi
xor eax, edx
mov edx, r9d
xor edx, r8d
and edx, r11d
xor edx, ecx
rorx ecx, ecx, 0xb
xor eax, edx
rorx eax, eax, 7
add ebx, eax
mov eax, dword [r13 + 0x58]
lea ebx, [rax + rbx - 0x67204a54]
mov eax, r11d
andn edx, ebx, r8d
and eax, r10d
xor eax, edx
mov edx, edi
xor edx, r9d
xor eax, edx
mov edx, r11d
and edx, ebx
and eax, esi
xor eax, edx
mov edx, r8d
xor edx, r11d
and edx, r10d
xor edx, edi
rorx edi, edi, 0xb
xor eax, edx
rorx eax, eax, 7
add ecx, eax
mov eax, dword [r13 + 4]
lea ecx, [rax + rcx + 0x2ffd72db]
mov eax, r10d
andn edx, ecx, r11d
and eax, ebx
xor eax, edx
mov edx, esi
xor edx, r8d
xor eax, edx
mov edx, r10d
and edx, ecx
and eax, r9d
xor eax, edx
mov edx, r11d
xor edx, r10d
and edx, ebx
xor edx, esi
rorx esi, esi, 0xb
xor eax, edx
rorx eax, eax, 7
add edi, eax
mov eax, dword [r13 + 0x28]
lea edx, [rax + rdi - 0x2fe52049]
mov eax, ebx
andn edi, edx, r10d
and eax, ecx
xor eax, edi
mov edi, r9d
xor edi, r11d
xor eax, edi
mov edi, ebx
and edi, edx
and eax, r8d
xor eax, edi
mov edi, r10d
xor edi, ebx
and edi, ecx
xor edi, r9d
rorx r9d, r9d, 0xb
xor eax, edi
rorx eax, eax, 7
add esi, eax
mov eax, dword [r13 + 0x10]
lea eax, [rax + rsi - 0x471e5013]
mov esi, ecx
andn edi, eax, ebx
and esi, edx
xor esi, edi
mov edi, r8d
xor edi, r10d
xor esi, edi
mov edi, ecx
and edi, eax
and esi, r11d
xor esi, edi
mov edi, ebx
xor edi, ecx
and edi, edx
xor edi, r8d
rorx r8d, r8d, 0xb
xor esi, edi
rorx esi, esi, 7
add r9d, esi
mov esi, dword [r13 + 0x20]
lea r9d, [rsi + r9 + 0x6a267e96]
mov esi, edx
andn edi, r9d, ecx
and esi, eax
xor esi, edi
mov edi, r11d
xor edi, ebx
xor esi, edi
mov edi, edx
and edi, r9d
and esi, r10d
xor esi, edi
mov edi, ecx
xor edi, edx
and edi, eax
xor edi, r11d
rorx r11d, r11d, 0xb
xor esi, edi
rorx esi, esi, 7
add r8d, esi
mov esi, dword [r13 + 0x78]
lea r8d, [rsi + r8 - 0x45836fbb]
mov esi, eax
andn edi, r8d, edx
and esi, r9d
xor esi, edi
mov edi, r10d
xor edi, ecx
xor esi, edi
mov edi, eax
and edi, r8d
and esi, ebx
xor esi, edi
mov edi, edx
xor edi, eax
and edi, r9d
xor edi, r10d
rorx r10d, r10d, 0xb
xor esi, edi
rorx esi, esi, 7
add r11d, esi
mov esi, dword [r13 + 0xc]
lea r11d, [rsi + r11 - 0xed38067]
mov esi, r9d
andn edi, r11d, eax
and esi, r8d
xor esi, edi
mov edi, ebx
xor edi, edx
xor esi, edi
mov edi, r9d
and edi, r11d
and esi, ecx
xor esi, edi
mov edi, eax
xor edi, r9d
and edi, r8d
xor edi, ebx
rorx ebx, ebx, 0xb
xor esi, edi
rorx esi, esi, 7
add r10d, esi
mov esi, dword [r13 + 0x54]
lea r10d, [rsi + r10 + 0x24a19947]
mov esi, r8d
andn edi, r10d, r9d
and esi, r11d
xor esi, edi
mov edi, ecx
xor edi, eax
xor esi, edi
mov edi, r8d
and edi, r10d
and esi, edx
xor esi, edi
mov edi, r9d
xor edi, r8d
and edi, r11d
xor edi, ecx
rorx ecx, ecx, 0xb
xor esi, edi
rorx esi, esi, 7
add ebx, esi
mov esi, dword [r13 + 0x24]
lea ebx, [rsi + rbx - 0x4c6e9309]
mov esi, r11d
andn edi, ebx, r8d
and esi, r10d
xor esi, edi
mov edi, edx
xor edi, r9d
xor esi, edi
mov edi, r11d
and edi, ebx
and esi, eax
xor esi, edi
mov edi, r8d
xor edi, r11d
and edi, r10d
xor edi, edx
rorx edx, edx, 0xb
xor esi, edi
rorx esi, esi, 7
add ecx, esi
mov esi, dword [r13 + 0x44]
lea ecx, [rsi + rcx + 0x801f2e2]
mov esi, r10d
andn edi, ecx, r11d
and esi, ebx
xor esi, edi
mov edi, eax
xor edi, r8d
xor esi, edi
mov edi, r10d
and edi, ecx
and esi, r9d
xor esi, edi
mov edi, r11d
xor edi, r10d
and edi, ebx
xor edi, eax
rorx eax, eax, 0xb
xor esi, edi
rorx esi, esi, 7
add edx, esi
mov esi, dword [r13 + 0x60]
lea edx, [rsi + rdx - 0x7a7103ea]
mov esi, ebx
andn edi, edx, r10d
and esi, ecx
xor esi, edi
mov edi, r9d
xor edi, r11d
xor esi, edi
mov edi, ebx
and edi, edx
and esi, r8d
xor esi, edi
mov edi, r10d
xor edi, ebx
and edi, ecx
xor edi, r9d
rorx r9d, r9d, 0xb
xor esi, edi
rorx esi, esi, 7
add eax, esi
mov esi, dword [r13 + 0x74]
lea eax, [rsi + rax + 0x636920d8]
mov esi, ecx
andn edi, eax, ebx
and esi, edx
mov ebp, eax
xor esi, edi
mov edi, r8d
xor edi, r10d
xor esi, edi
mov edi, ecx
and edi, eax
and esi, r11d
xor esi, edi
mov edi, ebx
xor edi, ecx
and edi, edx
xor edi, r8d
rorx r8d, r8d, 0xb
xor esi, edi
rorx esi, esi, 7
add r9d, esi
mov esi, dword [r13 + 0x18]
lea r9d, [rsi + r9 + 0x71574e69]
mov esi, edx
andn edi, r9d, ecx
and esi, eax
mov r12d, r9d
xor esi, edi
mov edi, r11d
xor edi, ebx
xor esi, edi
mov edi, edx
and edi, r9d
and esi, r10d
xor esi, edi
mov edi, ecx
xor edi, edx
and edi, eax
xor edi, r11d
rorx r11d, r11d, 0xb
xor esi, edi
rorx esi, esi, 7
add r8d, esi
mov esi, dword [r13 + 0x4c]
lea r8d, [rsi + r8 - 0x5ba7015d]
mov esi, eax
andn edi, r8d, edx
and esi, r9d
mov r15d, r8d
xor esi, edi
mov edi, r10d
xor edi, ecx
xor esi, edi
mov edi, eax
and edi, r8d
and esi, ebx
xor esi, edi
mov edi, edx
xor edi, eax
and edi, r9d
xor edi, r10d
rorx r10d, r10d, 0xb
xor esi, edi
rorx esi, esi, 7
add r11d, esi
mov esi, dword [r13 + 0x30]
lea r11d, [rsi + r11 - 0xb6cc282]
mov esi, r9d
andn edi, r11d, eax
and esi, r8d
xor esi, edi
mov edi, ebx
xor edi, edx
xor esi, edi
mov edi, r9d
and edi, r11d
and esi, ecx
xor esi, edi
mov edi, eax
xor edi, r9d
and edi, r8d
xor edi, ebx
rorx ebx, ebx, 0xb
xor esi, edi
rorx esi, esi, 7
add r10d, esi
mov esi, dword [r13 + 0x3c]
lea r10d, [rsi + r10 + 0xd95748f]
mov esi, r8d
andn edi, r10d, r9d
and esi, r11d
xor ebp, r8d
xor esi, edi
mov edi, ecx
xor edi, eax
xor esi, edi
mov edi, r8d
and edi, r10d
and esi, edx
xor esi, edi
mov edi, r9d
xor edi, r8d
and edi, r11d
xor edi, ecx
rorx ecx, ecx, 0xb
xor esi, edi
rorx esi, esi, 7
add ebx, esi
mov esi, dword [r13 + 0x34]
lea esi, [rsi + rbx + 0x728eb658]
mov ebx, r11d
andn edi, esi, r8d
and ebx, r10d
xor ebx, edi
mov edi, edx
xor edi, r9d
xor ebx, edi
mov edi, r11d
and edi, esi
and ebx, eax
xor ebx, edi
mov edi, r8d
xor edi, r11d
and edi, r10d
xor edi, edx
rorx edx, edx, 0xb
xor ebx, edi
rorx ebx, ebx, 7
add ecx, ebx
mov ebx, dword [r13 + 8]
lea edi, [rbx + rcx + 0x718bcd58]
mov ecx, r10d
and ecx, esi
andn ebx, edi, r11d
xor ebx, ecx
xor ebx, ebp
mov ebp, r10d
and ebp, edi
and ebx, r9d
xor ebx, ebp
mov ebp, r11d
xor r12d, r11d
xor r15d, r10d
xor ebp, r10d
and ebp, esi
xor ebp, eax
rorx eax, eax, 0xb
xor ebx, ebp
rorx ebx, ebx, 7
add edx, ebx
mov ebx, dword [r13 + 0x64]
lea ebp, [rbx + rdx - 0x7deab512]
mov edx, esi
and edx, edi
andn ebx, ebp, r10d
xor ebx, edx
xor ebx, r12d
mov r12d, esi
and r12d, ebp
and ebx, r8d
xor ebx, r12d
mov r12d, r10d
xor r12d, esi
and r12d, edi
xor r12d, r9d
rorx r9d, r9d, 0xb
xor ebx, r12d
rorx ebx, ebx, 7
add eax, ebx
mov ebx, dword [r13 + 0x7c]
lea r12d, [rbx + rax + 0x7b54a41d]
mov eax, edi
and eax, ebp
andn ebx, r12d, esi
xor ebx, eax
xor ebx, r15d
mov r15d, edi
and r15d, r12d
and ebx, r11d
xor ebx, r15d
mov r15d, esi
xor r15d, edi
and r15d, ebp
xor r15d, r8d
rorx r8d, r8d, 0xb
xor ebx, r15d
mov r15d, r10d
rorx ebx, ebx, 7
add r9d, ebx
mov ebx, dword [r13 + 0x6c]
lea r9d, [rbx + r9 - 0x3da5a64b]
mov ebx, esi
and ebx, r12d
xor ecx, r11d
and r15d, ebp
xor edx, r10d
xor ecx, r9d
xor r15d, ebx
rorx r11d, r11d, 0xb
xor eax, esi
and ecx, edi
rorx r10d, r10d, 0xb
rorx esi, esi, 0xb
xor ecx, r9d
xor ecx, r15d
mov r15d, dword [r13 + 0x58]
rorx ecx, ecx, 7
add r8d, ecx
mov ecx, dword [r13 + 0x4c]
lea ecx, [rcx + r8 - 0x63cf2ac7]
mov r8d, edi
xor edx, ecx
and r8d, r9d
and edx, ebp
xor ebx, r8d
xor edx, ecx
xor ebx, edx
rorx ebx, ebx, 7
add r11d, ebx
mov ebx, dword [r13 + 0x24]
lea edx, [rbx + r11 + 0x2af26013]
mov r11d, ebp
mov ebx, dword [r13 + 0x50]
xor eax, edx
and r11d, ecx
and eax, r12d
xor r8d, r11d
xor eax, edx
xor r8d, eax
mov eax, dword [r13 + 0x10]
rorx r8d, r8d, 7
add r10d, r8d
mov r8d, ebp
and r8d, r12d
lea r10d, [rax + r10 - 0x3a2e4fdd]
xor r8d, edi
mov eax, r12d
rorx edi, edi, 0xb
xor r8d, r10d
and eax, edx
and r8d, r9d
xor r11d, eax
xor r8d, r10d
xor r11d, r8d
mov r8d, r9d
rorx r11d, r11d, 7
and r8d, r10d
add esi, r11d
xor eax, r8d
lea r11d, [rbx + rsi + 0x286085f0]
mov ebx, r12d
mov esi, r9d
and ebx, r9d
and esi, ecx
xor ebx, ebp
xor esi, r12d
rorx ebp, ebp, 0xb
rorx r12d, r12d, 0xb
xor ebx, r11d
and ebx, ecx
xor ebx, r11d
xor eax, ebx
rorx eax, eax, 7
add edi, eax
mov eax, dword [r13 + 0x70]
lea ebx, [rax + rdi - 0x35be86e8]
mov eax, ecx
mov edi, ecx
xor esi, ebx
and eax, r11d
and edi, edx
and esi, edx
xor r8d, eax
xor edi, r9d
rorx r9d, r9d, 0xb
xor esi, ebx
xor r8d, esi
mov esi, dword [r13 + 0x44]
rorx r8d, r8d, 7
add ebp, r8d
mov r8d, edx
and r8d, ebx
lea esi, [rsi + rbp - 0x4724c711]
xor eax, r8d
mov ebp, edx
xor edi, esi
and ebp, r10d
and edi, r10d
xor ebp, ecx
rorx ecx, ecx, 0xb
xor edi, esi
xor eax, edi
rorx eax, eax, 7
add r12d, eax
mov eax, dword [r13 + 0x20]
lea edi, [rax + r12 - 0x71862350]
mov eax, r10d
and eax, esi
xor ebp, edi
and ebp, r11d
xor r8d, eax
xor ebp, edi
xor r8d, ebp
mov ebp, r10d
rorx r8d, r8d, 7
and ebp, r11d
add r9d, r8d
xor ebp, edx
mov r8d, r11d
rorx edx, edx, 0xb
lea r9d, [r15 + r9 + 0x603a180e]
and r8d, edi
mov r15d, dword [r13 + 0x38]
xor ebp, r9d
xor eax, r8d
and ebp, ebx
xor ebp, r9d
xor eax, ebp
mov ebp, r11d
rorx eax, eax, 7
and ebp, ebx
add ecx, eax
mov eax, dword [r13 + 0x74]
xor ebp, r10d
rorx r10d, r10d, 0xb
lea eax, [rax + rcx + 0x6c9e0e8b]
mov ecx, ebx
xor ebp, eax
and ecx, r9d
and ebp, esi
xor r8d, ecx
xor ebp, eax
xor r8d, ebp
mov ebp, ebx
rorx r8d, r8d, 7
and ebp, esi
add edx, r8d
xor ebp, r11d
rorx r11d, r11d, 0xb
lea r8d, [r15 + rdx - 0x4fe175c2]
mov edx, esi
mov r15d, dword [r13 + 0x3c]
xor ebp, r8d
and edx, eax
and ebp, edi
xor ecx, edx
xor ebp, r8d
xor ecx, ebp
mov ebp, esi
rorx ecx, ecx, 7
add r10d, ecx
mov ecx, dword [r13 + 0x64]
and ebp, edi
xor ebp, ebx
rorx ebx, ebx, 0xb
lea r10d, [rcx + r10 - 0x28ea883f]
mov ecx, edi
xor ebp, r10d
and ecx, r8d
and ebp, r9d
xor edx, ecx
xor ebp, r10d
xor edx, ebp
mov ebp, edi
rorx edx, edx, 7
and ebp, r9d
add r11d, edx
mov edx, dword [r13 + 0x30]
xor ebp, esi
rorx esi, esi, 0xb
lea r11d, [rdx + r11 - 0x42ceb4d9]
mov edx, r9d
xor ebp, r11d
and edx, r10d
and ebp, eax
xor ecx, edx
xor ebp, r11d
xor ecx, ebp
mov ebp, r9d
rorx ecx, ecx, 7
and ebp, eax
add ebx, ecx
mov ecx, dword [r13 + 0x60]
xor ebp, edi
rorx edi, edi, 0xb
lea ebx, [rcx + rbx + 0x78af2fda]
mov ecx, eax
xor ebp, ebx
and ecx, r11d
and ebp, r8d
xor edx, ecx
xor ebp, ebx
xor edx, ebp
mov ebp, eax
rorx edx, edx, 7
and ebp, r8d
add esi, edx
mov edx, dword [r13 + 0x78]
xor ebp, r9d
rorx r9d, r9d, 0xb
lea esi, [rdx + rsi + 0x55605c60]
mov edx, r8d
xor ebp, esi
and edx, ebx
and ebp, r10d
xor ecx, edx
xor ebp, esi
xor ecx, ebp
mov ebp, r8d
rorx ecx, ecx, 7
and ebp, r10d
add edi, ecx
mov ecx, dword [r13 + 0x40]
xor ebp, eax
rorx eax, eax, 0xb
lea ecx, [rcx + rdi - 0x19aada0d]
mov edi, r10d
xor ebp, ecx
and edi, esi
and ebp, r11d
xor edx, edi
xor ebp, ecx
xor edx, ebp
mov ebp, r10d
rorx edx, edx, 7
and ebp, r11d
add r9d, edx
mov edx, dword [r13 + 0x68]
xor ebp, r8d
rorx r8d, r8d, 0xb
lea edx, [rdx + r9 - 0x55aa546c]
mov r9d, r11d
xor ebp, edx
and r9d, ecx
and ebp, ebx
xor edi, r9d
xor ebp, edx
xor edi, ebp
mov ebp, r11d
rorx edi, edi, 7
and ebp, ebx
add eax, edi
mov edi, dword [r13 + 0x7c]
xor ebp, r10d
rorx r10d, r10d, 0xb
lea eax, [rdi + rax + 0x57489862]
mov edi, ebx
xor ebp, eax
and edi, edx
and ebp, esi
xor r9d, edi
xor ebp, eax
xor r9d, ebp
mov ebp, ebx
rorx r9d, r9d, 7
add r8d, r9d
lea r9d, [r15 + r8 + 0x63e81440]
mov r8d, esi
mov r15d, dword [r13 + 0xc]
and r8d, eax
and ebp, esi
xor ebp, r11d
xor edi, r8d
rorx r11d, r11d, 0xb
xor ebp, r9d
and ebp, ecx
xor ebp, r9d
xor edi, ebp
mov ebp, esi
rorx edi, edi, 7
and ebp, ecx
add r10d, edi
mov edi, dword [r13 + 0x1c]
xor ebp, ebx
rorx ebx, ebx, 0xb
lea r10d, [rdi + r10 + 0x55ca396a]
mov edi, ecx
xor ebp, r10d
and edi, r9d
and ebp, edx
xor r8d, edi
xor ebp, r10d
xor r8d, ebp
mov ebp, ecx
rorx r8d, r8d, 7
and ebp, edx
add r11d, r8d
xor ebp, esi
mov r8d, edx
rorx esi, esi, 0xb
lea r11d, [r15 + r11 + 0x2aab10b6]
and r8d, r10d
mov r15d, dword [r13]
xor ebp, r11d
xor edi, r8d
and ebp, eax
xor ebp, r11d
xor edi, ebp
mov ebp, edx
rorx edi, edi, 7
and ebp, eax
add ebx, edi
mov edi, dword [r13 + 4]
xor ebp, ecx
rorx ecx, ecx, 0xb
lea ebx, [rdi + rbx - 0x4b33a3cc]
mov edi, eax
xor ebp, ebx
and edi, r11d
and ebp, r9d
xor ebp, ebx
xor r8d, edi
xor r8d, ebp
mov ebp, eax
rorx r8d, r8d, 7
and ebp, r9d
add esi, r8d
xor ebp, edx
rorx edx, edx, 0xb
lea r8d, [r15 + rsi + 0x1141e8ce]
mov esi, r9d
xor ebp, r8d
and esi, ebx
and ebp, r10d
xor edi, esi
xor ebp, r8d
xor edi, ebp
mov ebp, r9d
rorx edi, edi, 7
and ebp, r10d
add ecx, edi
mov edi, dword [r13 + 0x48]
xor ebp, eax
rorx eax, eax, 0xb
lea ecx, [rdi + rcx - 0x5eab7951]
mov edi, r10d
xor ebp, ecx
and edi, r8d
and ebp, r11d
xor esi, edi
xor ebp, ecx
xor esi, ebp
mov ebp, r11d
rorx esi, esi, 7
and ebp, ecx
add edx, esi
mov esi, dword [r13 + 0x6c]
xor edi, ebp
lea edx, [rsi + rdx + 0x7c72e993]
mov esi, r10d
and esi, r11d
xor esi, r9d
rorx r9d, r9d, 0xb
xor esi, edx
and esi, ebx
xor esi, edx
xor edi, esi
mov esi, dword [r13 + 0x34]
rorx edi, edi, 7
add eax, edi
mov edi, r11d
lea esi, [rsi + rax - 0x4c11ebef]
mov eax, ebx
and eax, edx
and edi, ebx
xor edi, r10d
xor ebp, eax
rorx r10d, r10d, 0xb
xor edi, esi
and edi, r8d
xor edi, esi
xor ebp, edi
mov edi, dword [r13 + 0x18]
rorx ebp, ebp, 7
add r9d, ebp
mov ebp, ebx
and ebp, r8d
lea r9d, [rdi + r9 + 0x636fbc2a]
xor ebp, r11d
mov edi, r8d
rorx r11d, r11d, 0xb
xor ebp, r9d
and edi, esi
and ebp, ecx
xor eax, edi
xor ebp, r9d
xor eax, ebp
mov ebp, r8d
rorx eax, eax, 7
and ebp, ecx
add r10d, eax
mov eax, dword [r13 + 0x54]
xor ebp, ebx
rorx ebx, ebx, 0xb
lea r10d, [rax + r10 + 0x2ba9c55d]
mov eax, ecx
xor ebp, r10d
and eax, r9d
and ebp, edx
xor edi, eax
xor ebp, r10d
xor edi, ebp
mov ebp, ecx
rorx edi, edi, 7
and ebp, edx
add r11d, edi
mov edi, dword [r13 + 0x28]
xor ebp, r8d
rorx r8d, r8d, 0xb
lea r11d, [rdi + r11 + 0x741831f6]
mov edi, edx
xor ebp, r11d
and edi, r10d
and ebp, esi
xor ebp, r11d
xor eax, edi
xor eax, ebp
mov ebp, esi
rorx eax, eax, 7
and ebp, r11d
add ebx, eax
mov eax, dword [r13 + 0x5c]
xor edi, ebp
lea ebx, [rax + rbx - 0x31a3c1ea]
mov eax, edx
and eax, esi
xor eax, ecx
rorx ecx, ecx, 0xb
xor eax, ebx
and eax, r9d
xor eax, ebx
xor edi, eax
mov eax, dword [r13 + 0x2c]
rorx edi, edi, 7
add r8d, edi
mov edi, r9d
and edi, ebx
lea r8d, [rax + r8 - 0x64786ce2]
mov eax, esi
xor ebp, edi
and eax, r9d
xor eax, edx
rorx edx, edx, 0xb
xor eax, r8d
and eax, r10d
xor eax, r8d
xor ebp, eax
mov eax, dword [r13 + 0x14]
rorx ebp, ebp, 7
add ecx, ebp
lea ecx, [rax + rcx - 0x502945cd]
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 8]
lea ebp, [rdx + rax + 0x6c24cf5c]
mov eax, r9d
mov edx, r10d
and eax, r10d
and edx, r8d
xor eax, esi
xor edx, edi
xor eax, ecx
and eax, r11d
xor eax, ecx
add ecx, dword [r13 + 0x84]
xor edx, eax
rorx edx, edx, 7
add edx, ebp
add r8d, dword [r13 + 0x88]
add esi, dword [r13 + 0x9c]
add ebx, dword [r13 + 0x8c]
add r11d, dword [r13 + 0x90]
mov dword [r13 + 0x80], edx
add r10d, dword [r13 + 0x94]
mov dword [r13 + 0x84], ecx
add r9d, dword [r13 + 0x98]
mov dword [r13 + 0x9c], esi
mov dword [r13 + 0x88], r8d
xor esi, esi
mov dword [r13 + 0x8c], ebx
mov dword [r13 + 0x90], r11d
mov dword [r13 + 0x94], r10d
mov dword [r13 + 0x98], r9d
mov rax, qword [rsp + 0x28]
add qword [r13 + 0xa8], rax
test r14, r14
je 0x4b3140
mov eax, pe_nt_image_headers64
mov ecx, esi
sub eax, esi
add rcx, r13
mov qword [rsp + 0x28], rax
cmp rax, r14
jbe 0x4b1b00
mov rdx, qword [rsp + 0x88]
mov r8, r14
add esi, r14d
call sub.msvcrt.dll_memcpy
add qword [rsp + 0x88], r14
mov qword [rsp + 0x28], r14
xor r14d, r14d
cmp esi, 0x80
jne 0x4b30e3
jmp 0x4b1b1e
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret