Function at 0x5f9740
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
lea r12, [rsp - 0x110]
cmp r12, qword [r14 + 0x10]
jbe 0x5fa6a5
sub rsp, 0x190
mov qword [rsp + 0x188], rbp
lea rbp, [rsp + 0x188]
mov r13, 0
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1c8], r9
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1a8], rcx
mov qword [rsp + 0x1b8], rsi
mov qword [rsp + 0x1a0], rbx
mov qword [rsp + 0x1c0], r8
mov byte [rsp + 0x53], 0
mov byte [rbx + 0x12], 1
mov rdx, qword [0x008363e8]
mov r10, qword [rdx + 0x10]
mov r11, qword [rdx + 0x18]
mov r12, qword [rdx + 0x20]
mov r13, qword [rdx + 0x28]
mov r15, qword [rdx]
mov rdx, qword [rdx + 8]
mov rax, r10
mov rbx, r11
mov rcx, r12
mov rdi, r13
mov rsi, r15
mov r8, rdx
call fcn.00545c60
mov qword [rsp + 0x140], rax
mov qword [rsp + 0xe8], rbx
lea rax, [0x00655260]
call fcn.0040d9c0
mov rdx, qword [0x008363e8]
mov r9, qword [rdx]
mov rdx, qword [rdx + 8]
mov qword [rax + 8], rdx
cmp dword [0x0088d090], 0
jne 0x5f982a
mov qword [rax], r9
jmp 0x5f9832
mov rdi, rax
call fcn.00465a40
mov qword [rsp + 0x110], rax
mov qword [rax + 0x18], 0xa
lea rcx, [0x00669a21]
mov qword [rax + 0x10], rcx
mov word [rax + 0x20], 0x1b
mov dword [rax + 0x24], 0xe
mov qword [rax + 0x30], 0xe
lea rdx, [0x0066ae25]
mov qword [rax + 0x28], rdx
lea rax, [0x00655260]
call fcn.0040d9c0
mov rcx, qword [0x008363e8]
mov rdx, qword [rcx]
mov rcx, qword [rcx + 8]
mov qword [rax + 8], rcx
cmp dword [0x0088d090], 0
jne 0x5f9899
mov qword [rax], rdx
jmp 0x5f98a5
mov rdi, rax
nop dword [rax]
call fcn.004659c0
mov qword [rsp + 0x118], rax
mov qword [rax + 0x18], 0xa
lea rcx, [0x00669a21]
mov qword [rax + 0x10], rcx
mov word [rax + 0x20], 0x1d
mov dword [rax + 0x24], 0xe
mov qword [rax + 0x30], 0xe
lea rcx, [0x0066ae25]
mov qword [rax + 0x28], rcx
lea rax, [0x00643440]
call fcn.0040d9c0
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x1c0]
mov qword [rax], rcx
mov qword [rax + 8], 0xa
lea rax, [0x0061f180]
call fcn.0040d9c0
mov qword [rax], 0x1000105
mov word [rax + 8], 0
mov rsi, qword [rsp + 0x108]
mov qword [rsi + 0x18], 0xa
mov qword [rsi + 0x20], 0xa
cmp dword [0x0088d090], 0
nop
jne 0x5f9948
mov qword [rsi + 0x10], rax
jmp 0x5f9951
lea rdi, [rsi + 0x10]
call fcn.004658a0
movups xmmword [rsp + 0x148], xmm15
lea r9, [0x005fa700]
mov qword [rsp + 0x148], r9
mov r9, qword [rsp + 0x1a0]
mov qword [rsp + 0x150], r9
lea r10, [rsp + 0x148]
mov qword [rsp + 0x180], r10
mov byte [rsp + 0x53], 1
mov rcx, qword [rsp + 0x1b0]
nop word [rax + rax]
nop
cmp rcx, 3
jbe 0x5fa685
mov r10, qword [rsp + 0x1a8]
movzx r11d, byte [r10 + 3]
nop word [rax + rax]
cmp r11b, 1
jne 0x5f9aa5
cmp rcx, 4
jbe 0x5fa675
movzx edx, byte [r10 + 4]
nop dword [rax]
cmp rcx, 5
jbe 0x5fa668
movzx edi, byte [r10 + 5]
cmp rcx, 6
jbe 0x5fa65b
movzx r8d, byte [r10 + 6]
nop
cmp rcx, 7
jbe 0x5fa64e
movzx r11d, byte [r10 + 7]
movups xmmword [rsp + 0x78], xmm15
mov r12, qword [0x0082f088]
cmp r12, 0x10
mov ebx, 0x10
cmovl rbx, r12
mov r12, qword [0x0082f080]
lea rax, [rsp + 0x78]
cmp r12, rax
je 0x5f9a73
mov byte [rsp + 0x52], dl
mov byte [rsp + 0x51], dil
mov byte [rsp + 0x50], r8b
mov byte [rsp + 0x4f], r11b
mov rcx, rbx
mov rbx, r12
call fcn.00466700
lea rax, [rsp + 0x78]
movzx edx, byte [rsp + 0x52]
movzx edi, byte [rsp + 0x51]
movzx r8d, byte [rsp + 0x50]
movzx r11d, byte [rsp + 0x4f]
mov byte [rsp + 0x84], dl
mov byte [rsp + 0x85], dil
mov byte [rsp + 0x86], r8b
mov byte [rsp + 0x87], r11b
mov ebx, 0x10
mov rcx, rbx
call fcn.004e8100
nop
jmp 0x5f9d0b
cmp r11b, 3
jne 0x5f9b00
mov rdi, qword [rsp + 0x1c8]
lea r8, [rdi - 2]
mov rdx, qword [rsp + 0x1b8]
nop
cmp rdx, r8
jb 0x5fa646
cmp r8, 5
jb 0x5fa639
add rdx, 0xfffffffffffffffb
neg rdx
sar rdx, 0x3f
and edx, 5
lea rbx, [r10 + rdx]
lea rcx, [rdi - 7]
lea rax, [rsp + 0xb8]
call fcn.0044ed60
jmp 0x5f9d0b
cmp r11b, 4
jne 0x5fa4ca
movups xmmword [rsp + 0x88], xmm15
cmp rcx, 4
jbe 0x5fa62c
movzx edx, byte [r10 + 4]
mov byte [rsp + 0x88], dl
cmp rcx, 5
jbe 0x5fa61f
movzx edx, byte [r10 + 5]
mov byte [rsp + 0x89], dl
nop
cmp rcx, 6
jbe 0x5fa612
movzx edx, byte [r10 + 6]
mov byte [rsp + 0x8a], dl
nop word [rax + rax]
nop
cmp rcx, 7
jbe 0x5fa605
movzx edx, byte [r10 + 7]
mov byte [rsp + 0x8b], dl
nop word [rax + rax]
nop
cmp rcx, 8
jbe 0x5fa5f3
movzx edx, byte [r10 + 8]
mov byte [rsp + 0x8c], dl
nop word [rax + rax]
nop
cmp rcx, 9
jbe 0x5fa5e6
movzx edx, byte [r10 + 9]
mov byte [rsp + 0x8d], dl
nop word [rax + rax]
nop
cmp rcx, 0xa
jbe 0x5fa5d9
movzx edx, byte [r10 + 0xa]
mov byte [rsp + 0x8e], dl
nop word [rax + rax]
nop
cmp rcx, 0xb
jbe 0x5fa5cc
movzx edx, byte [r10 + 0xb]
mov byte [rsp + 0x8f], dl
nop word [rax + rax]
nop
cmp rcx, 0xc
jbe 0x5fa5bf
movzx edx, byte [r10 + 0xc]
mov byte [rsp + 0x90], dl
nop word [rax + rax]
nop
cmp rcx, 0xd
jbe 0x5fa5b2
movzx edx, byte [r10 + 0xd]
mov byte [rsp + 0x91], dl
nop word [rax + rax]
nop
cmp rcx, 0xe
jbe 0x5fa5a5
movzx edx, byte [r10 + 0xe]
mov byte [rsp + 0x92], dl
nop word [rax + rax]
nop
cmp rcx, 0xf
jbe 0x5fa593
movzx edx, byte [r10 + 0xf]
mov byte [rsp + 0x93], dl
nop word [rax + rax]
nop
cmp rcx, 0x10
jbe 0x5fa586
movzx edx, byte [r10 + 0x10]
mov byte [rsp + 0x94], dl
nop word [rax + rax]
nop
cmp rcx, 0x11
jbe 0x5fa579
movzx edx, byte [r10 + 0x11]
mov byte [rsp + 0x95], dl
nop word [rax + rax]
nop
cmp rcx, 0x12
jbe 0x5fa56c
movzx edx, byte [r10 + 0x12]
mov byte [rsp + 0x96], dl
nop word [rax + rax]
nop
cmp rcx, 0x13
jbe 0x5fa55f
movzx edx, byte [r10 + 0x13]
mov byte [rsp + 0x97], dl
lea rax, [rsp + 0x88]
mov ebx, 0x10
mov rcx, rbx
call fcn.004e8100
mov rdx, qword [rsp + 0x1c8]
lea rsi, [rdx - 2]
mov rcx, qword [rsp + 0x1b0]
nop
cmp rcx, rsi
jbe 0x5fa557
lea rsi, [rdx - 1]
cmp rcx, rsi
jbe 0x5fa54f
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x100], rax
mov rcx, qword [rsp + 0x1a8]
movzx eax, word [rdx + rcx - 2]
rol ax, 8
nop
mov ebx, 0xa
call fcn.00476c60
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rbx
lea rcx, [0x00669598]
mov edi, 9
lea rax, [0x0066873d]
mov ebx, 3
call fcn.004f7980
nop dword [rax]
test rbx, rbx
jne 0x5fa455
mov ebx, 3
mov rcx, rax
lea rax, [0x0066873d]
call fcn.004f8340
nop dword [rax]
test rbx, rbx
jne 0x5fa3e1
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0x3a
call fcn.00403300
xorps xmm15, xmm15
mov r14, qword [0x0088ce28]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
jl 0x5f9e47
xor eax, eax
lea rbx, [0x006ce220]
mov ecx, 1
mov rdi, qword [rsp + 0x100]
mov rsi, qword [rsp + 0x60]
lea r8, [0x00668586]
mov r9d, 2
mov r10, qword [rsp + 0x138]
mov r11, qword [rsp + 0x70]
call fcn.0044eb40
jmp 0x5f9e74
xor eax, eax
mov rbx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x60]
lea rdi, [0x006ce0d8]
mov esi, 1
mov r8, qword [rsp + 0x138]
mov r9, qword [rsp + 0x70]
call fcn.0044ea60
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xd8], rax
lea rax, [0x0064c680]
call fcn.0040d9c0
mov qword [rax], 1
mov rcx, qword [rsp + 0x1c0]
mov qword [rax + 8], rcx
mov qword [rsp + 0xf8], rax
mov rdx, qword [rsp + 0x198]
mov rbx, qword [rdx + 0x10]
mov rax, qword [rbx + 0x10]
lea rbx, [rsp + 0xf8]
call fcn.004058e0
mov qword [rsp + 0x128], 0
mov rcx, qword [rsp + 0x198]
mov rdx, qword [rcx + 0x10]
mov rax, qword [rdx + 0x18]
lea rbx, [rsp + 0x128]
call fcn.00406640
mov rcx, qword [rsp + 0x128]
cmp byte [rcx], 0
je 0x5fa35f
lea rax, [0x0064c680]
call fcn.0040d9c0
mov qword [rax], 4
mov rcx, qword [rsp + 0x1c0]
mov qword [rax + 8], rcx
mov qword [rsp + 0xf8], rax
mov rdx, qword [rsp + 0x198]
mov rbx, qword [rdx + 0x10]
mov rax, qword [rbx + 0x10]
lea rbx, [rsp + 0xf8]
nop
call fcn.004058e0
mov qword [rsp + 0x128], 0
mov rcx, qword [rsp + 0x198]
mov rcx, qword [rcx + 0x10]
mov rax, qword [rcx + 0x18]
lea rbx, [rsp + 0x128]
call fcn.00406640
mov rcx, qword [rsp + 0x128]
cmp byte [rcx], 0
je 0x5fa2eb
mov rdx, qword [rcx + 0x10]
mov qword [rsp + 0xf0], rdx
lea rax, [rsp + 0x98]
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x58]
call fcn.0044ef60
mov qword [rsp + 0x70], rbx
lea rax, [0x006435c0]
call fcn.0040d9c0
mov rdx, qword [rsp + 0x1c0]
mov qword [rax], rdx
mov rsi, qword [rsp + 0x70]
mov word [rax + 8], si
mov rsi, qword [rsp + 0x58]
mov qword [rax + 0x18], rsi
cmp dword [0x0088d090], 0
jne 0x5f9fea
mov r9, qword [rsp + 0xd8]
mov qword [rax + 0x10], r9
jmp 0x5f9ffb
lea rdi, [rax + 0x10]
mov r9, qword [rsp + 0xd8]
call fcn.00465a40
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x118]
lea rdi, [0x00614580]
mov rsi, rax
xor r8d, r8d
mov rax, qword [rsp + 0x140]
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov r9, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call r9
movups xmmword [rsp + 0x158], xmm15
mov rax, qword [rsp + 0xf0]
lea rbx, [rsp + 0x158]
call fcn.00406680
mov rbx, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x158]
test rbx, rbx
je 0x5fa277
test al, al
je 0x5fa277
nop
mov rax, rdx
lea rcx, [0x006ce0d8]
mov edi, 1
xor esi, esi
mov r8, 0xffffffffffffffff
call fcn.00502040
nop dword [rax]
test rbx, rbx
jbe 0x5fa545
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
cmp rbx, 1
jbe 0x5fa536
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x120], rdx
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 0x18]
mov rax, rcx
call fcn.00472880
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x168], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
lea rax, [0x0061eac0]
mov ebx, 0xa
mov rcx, rbx
call fcn.0044aaa0
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x54], 0
mov byte [rsp + 0x54], 5
mov byte [rsp + 0x57], 1
lea rcx, [rsp + 0x54]
cmp rax, rcx
je 0x5fa141
mov dword [rax], 0
mov byte [rax], 5
mov byte [rax + 3], 1
lea rax, [rsp + 0x168]
call fcn.005f9620
cmp rbx, 6
mov ecx, 6
cmovl rcx, rbx
mov rdx, qword [rsp + 0x130]
lea rbx, [rdx + 4]
cmp rax, rbx
je 0x5fa17a
mov rdx, rax
mov rax, rbx
mov rbx, rdx
call fcn.00466700
lea rax, [0x00643440]
call fcn.0040d9c0
mov rcx, qword [rsp + 0x1c0]
mov qword [rax], rcx
mov qword [rax + 8], 0xa
mov qword [rax + 0x18], 0xa
mov qword [rax + 0x20], 0xa
cmp dword [0x0088d090], 0
jne 0x5fa1c2
mov rdx, qword [rsp + 0x130]
mov qword [rax + 0x10], rdx
nop
jmp 0x5fa1d3
lea rdi, [rax + 0x10]
mov rdx, qword [rsp + 0x130]
call fcn.004659c0
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, rax
xor r8d, r8d
mov rax, qword [rsp + 0x140]
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
cmp dword [0x0088d090], 0
jne 0x5fa232
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x1a0]
mov qword [rcx + 0x28], rax
jmp 0x5fa251
mov rdi, qword [rsp + 0x1a0]
lea rax, [rdi + 0x28]
mov rcx, rdi
mov rdi, rax
mov rbx, qword [rsp + 0xe0]
call fcn.004659e0
mov byte [rcx + 0x13], 1
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov rax, qword [rdx]
call rax
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, qword [rsp + 0x108]
xor r8d, r8d
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
mov rdx, qword [rsp + 0x1a0]
mov byte [rdx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov r9, qword [rdx]
call r9
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, qword [rsp + 0x108]
xor r8d, r8d
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
mov rdx, qword [rsp + 0x1a0]
mov byte [rdx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov r9, qword [rdx]
call r9
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0xe0]
test byte [rax], al
call fcn.004f0700
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, qword [rsp + 0x108]
xor r8d, r8d
call fcn.00545ae0
mov rcx, qword [rsp + 0x140]
mov rcx, qword [rcx + 0x48]
mov rax, qword [rsp + 0xe8]
call rcx
mov rcx, qword [rsp + 0x1a0]
mov byte [rcx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov rcx, qword [rdx]
call rcx
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, qword [rsp + 0x108]
xor r8d, r8d
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
mov rdx, qword [rsp + 0x1a0]
mov byte [rdx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov r9, qword [rdx]
call r9
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
mov rsi, qword [rsp + 0x108]
xor r8d, r8d
nop
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
mov rdx, qword [rsp + 0x1a0]
mov byte [rdx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov r9, qword [rdx]
call r9
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x110]
lea rdi, [0x00614480]
xor r8d, r8d
call fcn.00545ae0
mov rdx, qword [rsp + 0x140]
mov rdx, qword [rdx + 0x48]
mov rax, qword [rsp + 0xe8]
call rdx
mov rdx, qword [rsp + 0x1a0]
mov byte [rdx + 0x13], 0
mov byte [rsp + 0x53], 0
mov rdx, qword [rsp + 0x180]
mov r9, qword [rdx]
call r9
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov eax, 1
mov rcx, rax
nop
call fcn.00465d40
xor eax, eax
mov rcx, rax
call fcn.00465d40
mov rax, rsi
call fcn.00465d40
mov rax, rsi
call fcn.00465d40
mov eax, 0x13
mov rcx, rax
call fcn.00465d40
mov eax, 0x12
mov rcx, rax
call fcn.00465d40
mov eax, 0x11
mov rcx, rax
call fcn.00465d40
mov eax, 0x10
mov rcx, rax
call fcn.00465d40
mov eax, 0xf
mov rcx, rax
nop dword [rax + rax]
call fcn.00465d40
mov eax, 0xe
mov rcx, rax
call fcn.00465d40
mov eax, 0xd
mov rcx, rax
call fcn.00465d40
mov eax, 0xc
mov rcx, rax
call fcn.00465d40
mov eax, 0xb
mov rcx, rax
call fcn.00465d40
mov eax, 0xa
mov rcx, rax
call fcn.00465d40
mov eax, 9
mov rcx, rax
call fcn.00465d40
mov eax, 8
mov rcx, rax
nop dword [rax + rax]
call fcn.00465d40
mov eax, 7
mov rcx, rax
call fcn.00465d40
mov eax, 6
mov rcx, rax
call fcn.00465d40
mov eax, 5
mov rcx, rax
call fcn.00465d40
mov eax, 4
mov rcx, rax
call fcn.00465d40
mov eax, 5
mov rcx, r8
call fcn.00465e00
mov rcx, r8
call fcn.00465dc0
mov eax, 7
mov rcx, rax
call fcn.00465d40
mov eax, 6
mov rcx, rax
call fcn.00465d40
mov eax, 5
mov rcx, rax
call fcn.00465d40
mov eax, 4
mov rcx, rax
nop dword [rax]
call fcn.00465d40
mov eax, 3
call fcn.00465d40
nop
call fcn.00435b80
mov rbp, qword [rsp + 0x188]
add rsp, 0x190
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.004636e0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp fcn.005f9740