Function at 0x4de6a0
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x58
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0x50], eax
push ebx
push esi
push edi
push 0
push 0
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
mov esi, 0xa
mov ebx, ecx
push eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x24], esi
call sym.SystemInformer.exe_Ordinal_1331
mov edi, eax
xor eax, eax
mov dword [esp + 0x14], edi
mov dword [edi], 0
mov ecx, dword [edi + 4]
mov word [ecx], ax
test bl, 1
je 0x4de740
mov eax, dword [edi]
add eax, 0x16
cmp eax, esi
jbe 0x4de711
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x16
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Local_TID_]
movups xmmword [ecx], xmm0
mov eax, dword [0x618ff4]
mov dword [ecx + 0x10], eax
mov ax, word [0x618ff8]
mov word [ecx + 0x14], ax
add dword [edi], 0x16
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 2
je 0x4de797
mov eax, dword [edi]
add eax, 0x24
cmp esi, eax
jae 0x4de767
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x24
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.UUID_initialized_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61900c]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x61901c]
mov dword [ecx + 0x20], eax
add dword [edi], 0x24
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 4
je 0x4de7fb
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4de7be
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Inside_thread_detach_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619034]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619044]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x61904c]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test bl, 8
je 0x4de86c
mov eax, dword [edi]
add eax, 0x36
cmp esi, eax
jae 0x4de827
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x36
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Channel_thread_initialzed_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619064]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x619074]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x619084]
mov dword [ecx + 0x30], eax
mov ax, word [0x619088]
mov word [ecx + 0x34], ax
add dword [edi], 0x36
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 0x10
je 0x4de8bd
mov eax, dword [edi]
add eax, 0x18
cmp esi, eax
jae 0x4de893
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.WOW_Thread_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x61909c]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax]
test bl, 0x20
je 0x4de92e
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4de8e7
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Thread_Uninitializing_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6190b8]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6190c8]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6190d0]
mov dword [ecx + 0x28], eax
mov ax, word [0x6190d4]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 0x40
je 0x4de985
mov eax, dword [edi]
add eax, 0x24
cmp esi, eax
jae 0x4de955
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x24
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.OLE1DDE_disabled_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6190e8]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x6190f8]
mov dword [ecx + 0x20], eax
add dword [edi], 0x24
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, bl
jns 0x4de9f4
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4de9ad
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Single_threaded__STA__]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619110]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619120]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619128]
mov dword [ecx + 0x28], eax
mov ax, word [0x61912c]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x100
je 0x4dea5b
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4dea1e
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Multi_threaded__MTA__]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619140]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619150]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619158]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test ebx, 0x200
je 0x4deac9
mov eax, dword [edi]
add eax, 0x1e
cmp esi, eax
jae 0x4dea8d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Impersonating_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619170]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619178]
mov dword [ecx + 0x18], eax
mov ax, word [0x61917c]
mov word [ecx + 0x1c], ax
add dword [edi], 0x1e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x400
je 0x4deb30
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4deaf3
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Eventlogger_disabled_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619190]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6191a0]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6191a8]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x800
je 0x4deb90
mov eax, dword ds:[edi]
add eax, 0x30
cmp esi, eax
jae 0x4deb5d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.Neutral_threaded__NTA__]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x6191c0]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x6191d0]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x1000
je 0x4debef
mov eax, dword ds:[edi]
add eax, 0x22
cmp esi, eax
jae 0x4debbd
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x22
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Dispatch_thread_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6191f4]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x619204]
mov word [ecx + 0x20], ax
add dword [edi], 0x22
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x2000
je 0x4dec47
mov eax, dword ds:[edi]
add eax, 0x18
cmp esi, eax
jae 0x4dec1d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.HOSTTHREAD_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x619218]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x4000
je 0x4deca5
mov eax, dword [edi]
add eax, 0x1a
cmp esi, eax
jae 0x4dec71
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1a
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.ALLOWCOINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619234]
movq qword [ecx + 0x10], xmm0
mov ax, word [0x61923c]
mov word [ecx + 0x18], ax
add dword [edi], 0x1a
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x8000
je 0x4ded0b
mov eax, dword [edi]
add eax, 0x1e
cmp esi, eax
jae 0x4deccf
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.PENDINGUNINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619250]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619258]
mov dword [ecx + 0x18], eax
mov ax, word [0x61925c]
mov word [ecx + 0x1c], ax
add dword [edi], 0x1e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x10000
je 0x4ded67
mov eax, dword [edi]
add eax, 0x1c
cmp esi, eax
jae 0x4ded35
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.FIRSTMTAINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619270]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619278]
mov dword [ecx + 0x18], eax
add dword [edi], 0x1c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x20000
je 0x4dedc3
mov eax, dword [edi]
add eax, 0x1c
cmp esi, eax
jae 0x4ded91
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.FIRSTNTAINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619290]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619298]
mov dword [ecx + 0x18], eax
add dword [edi], 0x1c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x40000
je 0x4dee22
mov eax, dword [edi]
add eax, 0x28
cmp esi, eax
jae 0x4deded
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x28
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.APTIN_INITIALIZING_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x6192b0]
movups xmmword [eax + 0x10], xmm0
movq xmm0, qword [0x6192c0]
movq qword [eax + 0x20], xmm0
add dword [edi], 0x28
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x80000
je 0x4dee8a
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4dee4d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.UIMSGS_IN_MODAL_LOOP_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6192dc]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6192ec]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6192f4]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x100000
je 0x4deef1
mov eax, dword [edi]
add eax, 0x32
cmp esi, eax
jae 0x4deeb4
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x32
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Marshaling_error_object_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61930c]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x61931c]
movups xmmword [ecx + 0x20], xmm0
mov ax, word [0x61932c]
mov word [ecx + 0x30], ax
add dword [edi], 0x32
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x200000
je 0x4def57
mov eax, dword ds:[edi]
add eax, 0x26
cmp esi, eax
jae 0x4def1d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x26
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.WinRT_initialized_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619340]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x619350]
mov dword [ecx + 0x20], eax
mov ax, word [0x619354]
mov word [ecx + 0x24], ax
add dword [edi], 0x26
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, sym.SystemInformer.exe_Ordinal_1329
je 0x4defa9
mov eax, dword [edi]
add eax, 0x20
cmp esi, eax
jae 0x4def81
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x20
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ApplicationSTA_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x619368]
movups xmmword [eax + 0x10], xmm0
add dword [edi], 0x20
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x800000
je 0x4df01a
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4defd3
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.IN_SHUTDOWN_CALLBACKS_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61938c]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x61939c]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6193a4]
mov dword [ecx + 0x28], eax
mov ax, word [0x6193a8]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop word [eax + eax]
test ebx, 0x1000000
je 0x4df094
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4df04d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.POINTER_INPUT_BLOCKED_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6193bc]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6193cc]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6193d4]
mov dword [ecx + 0x28], eax
mov ax, word [0x6193d8]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x2000000
je 0x4df0fb
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4df0be
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.IN_ACTIVATION_FILTER_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6193ec]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6193fc]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619404]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test ebx, 0x4000000
je 0x4df160
mov eax, dword [edi]
add eax, 0x30
cmp esi, eax
jae 0x4df12d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_QUIRK_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x61941c]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x61942c]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x8000000
je 0x4df1c0
mov eax, dword [edi]
add eax, 0x30
cmp esi, eax
jae 0x4df18d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_PROXY_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x619450]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x619460]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x10000000
je 0x4df228
mov eax, dword [edi]
add eax, 0x34
cmp esi, eax
jae 0x4df1ed
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x34
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_INDOUBT_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619484]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x619494]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x6194a4]
mov dword [ecx + 0x30], eax
add dword [edi], 0x34
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x20000000
je 0x4df297
mov eax, dword [edi]
add eax, 0x36
cmp esi, eax
jae 0x4df252
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x36
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.DETECTED_USER_INITIALIZED_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6194bc]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x6194cc]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x6194dc]
mov dword [ecx + 0x30], eax
mov ax, word [0x6194e0]
mov word [ecx + 0x34], ax
add dword [edi], 0x36
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x40000000
je 0x4df2eb
mov eax, dword [edi]
add eax, 0x18
cmp esi, eax
jae 0x4df2c1
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.BRIDGE_STA_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x6194f4]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, ebx
jns 0x4df33f
mov eax, dword [edi]
add eax, 0x22
cmp esi, eax
jae 0x4df30d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x22
call fcn.005018a0
mov edi, dword [esp + 0x14]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.NA_INITIALIZING_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619510]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x619520]
mov word [ecx + 0x20], ax
add dword [edi], 0x22
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
mov ecx, dword [edi]
mov dword [esp + 0x18], 4
mov dword [esp + 0x1c], 0x5fc3c0
cmp ecx, 4
jb 0x4df3af
mov eax, dword [edi + 4]
add ecx, 0xfffffffc
add eax, ecx
mov dword [esp + 0x20], 4
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push 0
push eax
lea eax, [esp + 0x28]
push eax
call sym.SystemInformer.exe_Ordinal_1351
test al, al
je 0x4df3af
mov esi, dword [edi]
mov eax, esi
mov ecx, dword [edi + 4]
and eax, 0xfffffffe
lea edx, [eax - 4]
add eax, ecx
sub esi, edx
sub esi, 4
push esi
push eax
lea eax, [edx + ecx]
push eax
call fcn.00586310
add dword [edi], 0xfffffffc
add esp, 0xc
mov ecx, dword [edi]
xor edx, edx
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
push 0x10
lea eax, [esp + 0x30]
mov dword [esp + 0x2c], 0x780030
push eax
push ebx
call fcn.005880a8
add esp, 0xc
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push str.___s_
push eax
call sym.SystemInformer.exe_Ordinal_1288
mov ecx, dword [esp + 0x68]
add esp, 0xc
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00583f7f
add esp, 0x58
ret