Function at 0x4de7a0
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x58
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0x50], eax
push ebx
push esi
push edi
push 0
push 0
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
mov esi, 0xa
mov ebx, ecx
push eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x24], esi
call sym.SystemInformer.exe_Ordinal_1331
mov edi, eax
xor eax, eax
mov dword [esp + 0x14], edi
mov dword [edi], 0
mov ecx, dword [edi + 4]
mov word [ecx], ax
test bl, 1
je 0x4de840
mov eax, dword [edi]
add eax, 0x16
cmp eax, esi
jbe 0x4de811
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x16
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Local_TID_]
movups xmmword [ecx], xmm0
mov eax, dword [0x619004]
mov dword [ecx + 0x10], eax
mov ax, word [0x619008]
mov word [ecx + 0x14], ax
add dword [edi], 0x16
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 2
je 0x4de897
mov eax, dword [edi]
add eax, 0x24
cmp esi, eax
jae 0x4de867
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x24
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.UUID_initialized_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61901c]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x61902c]
mov dword [ecx + 0x20], eax
add dword [edi], 0x24
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 4
je 0x4de8fb
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4de8be
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Inside_thread_detach_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619044]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619054]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x61905c]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test bl, 8
ret
invalid
je 0x4de96c
mov eax, dword [edi]
add eax, 0x36
cmp esi, eax
jae 0x4de927
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x36
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Channel_thread_initialzed_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619074]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x619084]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x619094]
mov dword [ecx + 0x30], eax
mov ax, word [0x619098]
mov word [ecx + 0x34], ax
add dword [edi], 0x36
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 0x10
je 0x4de9bd
mov eax, dword [edi]
add eax, 0x18
cmp esi, eax
jae 0x4de993
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.WOW_Thread_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x6190ac]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax]
test bl, 0x20
je 0x4dea2e
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4de9e7
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Thread_Uninitializing_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6190c8]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6190d8]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6190e0]
mov dword [ecx + 0x28], eax
mov ax, word [0x6190e4]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, 0x40
je 0x4dea85
mov eax, dword [edi]
add eax, 0x24
cmp esi, eax
jae 0x4dea55
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x24
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.OLE1DDE_disabled_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6190f8]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x619108]
mov dword [ecx + 0x20], eax
add dword [edi], 0x24
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test bl, bl
jns 0x4deaf4
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4deaad
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Single_threaded__STA__]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619120]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619130]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619138]
mov dword [ecx + 0x28], eax
mov ax, word [0x61913c]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x100
je 0x4deb5b
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4deb1e
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Multi_threaded__MTA__]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619150]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x619160]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619168]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test ebx, 0x200
je 0x4debc9
mov eax, dword [edi]
add eax, 0x1e
cmp esi, eax
jae 0x4deb8d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Impersonating_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619180]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619188]
mov dword [ecx + 0x18], eax
mov ax, word [0x61918c]
mov word [ecx + 0x1c], ax
add dword [edi], 0x1e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x400
je 0x4dec30
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4debf3
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Eventlogger_disabled_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6191a0]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6191b0]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6191b8]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x800
je 0x4dec90
mov eax, dword ds:[edi]
add eax, 0x30
cmp esi, eax
jae 0x4dec5d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.Neutral_threaded__NTA__]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x6191d0]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x6191e0]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x1000
je 0x4decef
mov eax, dword ds:[edi]
add eax, 0x22
cmp esi, eax
jae 0x4decbd
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x22
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Dispatch_thread_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619204]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x619214]
mov word [ecx + 0x20], ax
add dword [edi], 0x22
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x2000
je 0x4ded47
mov eax, dword ds:[edi]
add eax, 0x18
cmp esi, eax
jae 0x4ded1d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.HOSTTHREAD_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x619228]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x4000
je 0x4deda5
mov eax, dword [edi]
add eax, 0x1a
cmp esi, eax
jae 0x4ded71
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1a
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.ALLOWCOINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619244]
movq qword [ecx + 0x10], xmm0
mov ax, word [0x61924c]
mov word [ecx + 0x18], ax
add dword [edi], 0x1a
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x8000
je 0x4dee0b
mov eax, dword [edi]
add eax, 0x1e
cmp esi, eax
jae 0x4dedcf
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.PENDINGUNINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619260]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619268]
mov dword [ecx + 0x18], eax
mov ax, word [0x61926c]
mov word [ecx + 0x1c], ax
add dword [edi], 0x1e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x10000
je 0x4dee67
mov eax, dword [edi]
add eax, 0x1c
cmp esi, eax
jae 0x4dee35
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.FIRSTMTAINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x619280]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x619288]
mov dword [ecx + 0x18], eax
add dword [edi], 0x1c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x20000
je 0x4deec3
mov eax, dword [edi]
add eax, 0x1c
cmp esi, eax
jae 0x4dee91
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x1c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.FIRSTNTAINIT_]
movups xmmword [ecx], xmm0
movq xmm0, qword [0x6192a0]
movq qword [ecx + 0x10], xmm0
mov eax, dword [0x6192a8]
mov dword [ecx + 0x18], eax
add dword [edi], 0x1c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x40000
je 0x4def22
mov eax, dword [edi]
add eax, 0x28
cmp esi, eax
jae 0x4deeed
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x28
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.APTIN_INITIALIZING_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x6192c0]
movups xmmword [eax + 0x10], xmm0
movq xmm0, qword [0x6192d0]
movq qword [eax + 0x20], xmm0
add dword [edi], 0x28
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x80000
je 0x4def8a
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4def4d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.UIMSGS_IN_MODAL_LOOP_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6192ec]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6192fc]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619304]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x100000
je 0x4deff1
mov eax, dword [edi]
add eax, 0x32
cmp esi, eax
jae 0x4defb4
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x32
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.Marshaling_error_object_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61931c]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x61932c]
movups xmmword [ecx + 0x20], xmm0
mov ax, word [0x61933c]
mov word [ecx + 0x30], ax
add dword [edi], 0x32
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x200000
je 0x4df057
mov eax, dword ds:[edi]
add eax, 0x26
cmp esi, eax
jae 0x4df01d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x26
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.WinRT_initialized_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619350]
movups xmmword [ecx + 0x10], xmm0
mov eax, dword [0x619360]
mov dword [ecx + 0x20], eax
mov ax, word [0x619364]
mov word [ecx + 0x24], ax
add dword [edi], 0x26
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, sym.SystemInformer.exe_Ordinal_1329
je 0x4df0a9
mov eax, dword [edi]
add eax, 0x20
cmp esi, eax
jae 0x4df081
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x20
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ApplicationSTA_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x619378]
movups xmmword [eax + 0x10], xmm0
add dword [edi], 0x20
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x800000
je 0x4df11a
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4df0d3
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.IN_SHUTDOWN_CALLBACKS_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x61939c]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6193ac]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6193b4]
mov dword [ecx + 0x28], eax
mov ax, word [0x6193b8]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop word [eax + eax]
test ebx, 0x1000000
je 0x4df194
mov eax, dword [edi]
add eax, 0x2e
cmp esi, eax
jae 0x4df14d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2e
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.POINTER_INPUT_BLOCKED_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6193cc]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x6193dc]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x6193e4]
mov dword [ecx + 0x28], eax
mov ax, word [0x6193e8]
mov word [ecx + 0x2c], ax
add dword [edi], 0x2e
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x2000000
je 0x4df1fb
mov eax, dword [edi]
add eax, 0x2c
cmp esi, eax
jae 0x4df1be
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x2c
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.IN_ACTIVATION_FILTER_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6193fc]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x61940c]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x619414]
mov dword [ecx + 0x28], eax
add dword [edi], 0x2c
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
nop dword [eax + eax]
test ebx, 0x4000000
je 0x4df260
mov eax, dword [edi]
add eax, 0x30
cmp esi, eax
jae 0x4df22d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_QUIRK_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x61942c]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x61943c]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x8000000
je 0x4df2c0
mov eax, dword [edi]
add eax, 0x30
cmp esi, eax
jae 0x4df28d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x30
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_PROXY_]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x619460]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x619470]
movups xmmword [eax + 0x20], xmm0
add dword [edi], 0x30
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x10000000
je 0x4df328
mov eax, dword [edi]
add eax, 0x34
cmp esi, eax
jae 0x4df2ed
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x34
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.ASTATOASTAEXEMPT_INDOUBT_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619494]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x6194a4]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x6194b4]
mov dword [ecx + 0x30], eax
add dword [edi], 0x34
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x20000000
je 0x4df397
mov eax, dword [edi]
add eax, 0x36
cmp esi, eax
jae 0x4df352
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x36
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.DETECTED_USER_INITIALIZED_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x6194cc]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x6194dc]
movups xmmword [ecx + 0x20], xmm0
mov eax, dword [0x6194ec]
mov dword [ecx + 0x30], eax
mov ax, word [0x6194f0]
mov word [ecx + 0x34], ax
add dword [edi], 0x36
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, 0x40000000
je 0x4df3eb
mov eax, dword [edi]
add eax, 0x18
cmp esi, eax
jae 0x4df3c1
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x18
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [edi]
add eax, dword [edi + 4]
movups xmm0, xmmword [str.BRIDGE_STA_]
movups xmmword [eax], xmm0
movq xmm0, qword [0x619504]
movq qword [eax + 0x10], xmm0
add dword [edi], 0x18
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
test ebx, ebx
jns 0x4df43f
mov eax, dword [edi]
add eax, 0x22
cmp esi, eax
jae 0x4df40d
lfence
mov edx, dword [edi]
lea ecx, [esp + 0x10]
add edx, 0x22
call fcn.005019c0
mov edi, dword [esp + 0x14]
mov ecx, dword [edi]
add ecx, dword [edi + 4]
movups xmm0, xmmword [str.NA_INITIALIZING_]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x619520]
movups xmmword [ecx + 0x10], xmm0
mov ax, word [0x619530]
mov word [ecx + 0x20], ax
add dword [edi], 0x22
xor edx, edx
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
mov ecx, dword [edi]
mov dword [esp + 0x18], 4
mov dword [esp + 0x1c], 0x5fc3c0
cmp ecx, 4
jb 0x4df4af
mov eax, dword [edi + 4]
add ecx, 0xfffffffc
add eax, ecx
mov dword [esp + 0x20], 4
mov dword [esp + 0x24], eax
lea eax, [esp + 0x18]
push 0
push eax
lea eax, [esp + 0x28]
push eax
call sym.SystemInformer.exe_Ordinal_1351
test al, al
je 0x4df4af
mov esi, dword [edi]
mov eax, esi
mov ecx, dword [edi + 4]
and eax, 0xfffffffe
lea edx, [eax - 4]
add eax, ecx
sub esi, edx
sub esi, 4
push esi
push eax
lea eax, [edx + ecx]
push eax
call fcn.00586330
add dword [edi], 0xfffffffc
add esp, 0xc
mov ecx, dword [edi]
xor edx, edx
mov eax, dword [edi + 4]
mov word [ecx + eax], dx
push 0x10
lea eax, [esp + 0x30]
mov dword [esp + 0x2c], 0x780030
push eax
push ebx
call fcn.005880c8
add esp, 0xc
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x14]
push str.___s_
push eax
call sym.SystemInformer.exe_Ordinal_1288
mov ecx, dword [esp + 0x68]
add esp, 0xc
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00583f9f
add esp, 0x58
ret