Function at 0x519380
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
lea r12, [rsp - 0xd0]
cmp r12, qword [r14 + 0x10]
jbe 0x519c2b
push rbp
mov rbp, rsp
sub rsp, 0x148
mov qword [rsp + 0xf0], rax
lea rax, [0x0057c2c0]
call fcn.0040bdc0
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xf0]
call fcn.0051a0e0
jmp 0x5193d5
mov rax, qword [rsp + 0xf0]
call fcn.0051a0e0
test cl, cl
je 0x5194ab
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0xc0], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x23
call fcn.00403c60
xorps xmm15, xmm15
mov r14, qword [0x007120d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x51942a
mov rdx, qword [rsp + 0x78]
nop
cmp rdx, rcx
jae 0x51942f
jmp 0x519c25
mov rcx, qword [rsp + 0x78]
mov rax, qword [rsp + 0xc0]
jmp 0x5194cf
test rcx, rcx
je 0x5193c8
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0xc0], rax
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0x3a
call fcn.00403c60
xorps xmm15, xmm15
mov r14, qword [0x007120d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
nop dword [rax]
cmp rcx, 0xffffffffffffffff
je 0x51951b
mov rdx, qword [rsp + 0x78]
cmp rdx, rcx
jb 0x519c20
mov rax, qword [rsp + 0xc0]
mov rbx, rcx
mov rsi, rax
jmp 0x519589
mov rax, qword [rsp + 0xb8]
add rsp, 0x148
pop rbp
ret
dec rcx
mov rdx, rcx
neg rdx
sar rdx, 0x3f
and edx, 1
add rax, rdx
test rcx, rcx
je 0x5194f4
movzx edx, byte [rax]
cmp dl, 0x20
je 0x5194bc
nop dword [rax]
cmp dl, 9
je 0x5194bc
cmp dl, 0xa
je 0x5194bc
cmp dl, 0xd
je 0x5194bc
jmp 0x5194f4
dec rcx
test rcx, rcx
je 0x5193c8
movzx edx, byte [rax + rcx - 1]
cmp dl, 0x20
je 0x5194f1
cmp dl, 9
je 0x5194f1
cmp dl, 0xa
je 0x5194f1
cmp dl, 0xd
je 0x5194f1
jmp 0x519440
nop
lea rax, [0x00572de0]
call fcn.0040bdc0
mov qword [rax + 8], 0x10
lea rcx, [0x00599e68]
mov qword [rax], rcx
lea rcx, [0x005ea400]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00712210], 0
je 0x519566
call fcn.00459120
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
ret
dec rcx
mov rdi, rcx
neg rdi
sar rdi, 0x3f
and edi, 1
add rax, rdi
test rcx, rcx
je 0x5195b1
movzx edi, byte [rax]
cmp dil, 0x20
je 0x519576
cmp dil, 9
je 0x519576
nop dword [rax]
cmp dil, 0xa
je 0x519576
cmp dil, 0xd
je 0x519576
jmp 0x5195b1
dec rcx
test rcx, rcx
je 0x5195d8
movzx edi, byte [rax + rcx - 1]
nop dword [rax + rax]
cmp dil, 0x20
je 0x5195ae
cmp dil, 9
je 0x5195ae
cmp dil, 0xa
je 0x5195ae
cmp dil, 0xd
je 0x5195ae
lea rdi, [rbx + 1]
nop dword [rax]
cmp rdx, rdi
jb 0x519c12
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0xa0], rax
sub rdx, rbx
dec rdx
mov rbx, rdx
neg rdx
sar rdx, 0x3f
and rdi, rdx
lea rdx, [rsi + rdi]
jmp 0x519655
lea rdi, [rdx + rsi*8]
lea rdi, [rdi - 0x20]
mov r8, qword [rsp + 0x120]
mov qword [rdx + rsi*8 - 0x28], r8
movups xmm0, xmmword [rsp + 0x128]
movups xmmword [rdi], xmm0
movups xmm0, xmmword [rsp + 0x138]
movups xmmword [rdi + 0x10], xmm0
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xe0]
jmp 0x519a12
test rbx, rbx
je 0x5193c8
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0x60], rbx
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x20
call fcn.00403c60
xorps xmm15, xmm15
mov r14, qword [0x007120d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x5196ed
mov rdx, qword [rsp + 0x60]
cmp rdx, rcx
jb 0x519c0d
lea rax, [rcx + 1]
nop dword [rax + rax]
cmp rdx, rax
jb 0x519c05
sub rdx, rcx
dec rdx
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and rax, rdx
mov rdx, qword [rsp + 0xb0]
lea r8, [rdx + rax]
jmp 0x519bae
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x68], rcx
nop dword [rax + rax]
test rax, rax
je 0x519854
cmp byte [rdx], 0x5b
je 0x51971b
xor r8d, r8d
xor r9d, r9d
xor esi, esi
jmp 0x51985c
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xe8], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0x5d
call fcn.00403c60
xorps xmm15, xmm15
mov r14, qword [0x007120d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x519b21
mov rdx, qword [rsp + 0x90]
cmp rdx, rcx
jb 0x519b95
cmp rcx, 1
jb 0x519b89
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x108], 0
movups xmmword [rsp + 0x110], xmm15
lea rbx, [rcx - 1]
mov qword [rsp + 0x40], rbx
mov rdx, rbx
neg rdx
sar rdx, 0x3f
and edx, 1
mov rsi, qword [rsp + 0xe8]
lea rax, [rsi + rdx]
mov qword [rsp + 0x98], rax
movups xmmword [rsp + 0xf8], xmm15
lea rdx, [0x00519c40]
mov qword [rsp + 0xf8], rdx
lea rdi, [rsp + 0x108]
mov qword [rsp + 0x100], rdi
lea rcx, [rsp + 0xf8]
call fcn.0051a8a0
test rax, rax
jne 0x519a71
mov rax, qword [rsp + 0x70]
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x90]
cmp rcx, rdx
jb 0x519b81
sub rcx, rax
lea rax, [rcx - 1]
mov rsi, rax
neg rsi
sar rsi, 0x3f
and rdx, rsi
mov rsi, qword [rsp + 0x108]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x118]
mov r10, qword [rsp + 0xe8]
add rdx, r10
mov rcx, qword [rsp + 0x68]
jmp 0x51985c
xor r8d, r8d
xor r9d, r9d
xor esi, esi
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xe0], rdx
mov r10, qword [rsp + 0xb8]
cmp qword [r10 + 0x28], 0
jne 0x5198d8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x58], r9
call fcn.0040c840
cmp dword [0x00712210], 0
jne 0x5198a2
mov rdx, qword [rsp + 0xb8]
jmp 0x5198ba
call fcn.00459120
mov qword [r11], rax
mov rdx, qword [rsp + 0xb8]
mov rsi, qword [rdx + 0x28]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x28], rax
mov rcx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0xa8]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov r10, rdx
movups xmmword [rsp + 0x120], xmm15
movups xmmword [rsp + 0x128], xmm15
movups xmmword [rsp + 0x138], xmm15
mov rdx, qword [rsp + 0xb0]
mov qword [rsp + 0x120], rdx
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x140], r9
mov rbx, qword [r10 + 0x28]
lea rax, [0x0056dc20]
mov rcx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x48]
nop dword [rax + rax]
call fcn.00410d00
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov rdx, qword [rax]
cmp rcx, rbx
jae 0x5199a4
mov qword [rsp + 0xd8], rax
mov rax, rdx
mov edi, 1
lea rsi, [0x0057bc80]
call fcn.004436a0
mov rdx, qword [rsp + 0xd8]
mov qword [rdx + 0x10], rcx
cmp dword [0x00712210], 0
je 0x519998
call fcn.00459120
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rcx, rax
mov rax, rdx
mov rdx, rcx
mov qword [rax + 8], rbx
lea rsi, [rbx + rbx*4]
lea rbx, [rdx + rsi*8]
lea rbx, [rbx - 0x28]
cmp dword [0x00712210], 0
nop dword [rax + rax]
je 0x51960f
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0xd0], rdx
lea rax, [0x0057bc80]
lea rcx, [rsp + 0x120]
call fcn.004119c0
mov rdx, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0x88]
jmp 0x51960f
dec rbx
mov rsi, rbx
neg rsi
sar rsi, 0x3f
and esi, 1
add rdx, rsi
test rbx, rbx
je 0x519a40
movzx esi, byte [rdx]
nop word [rax + rax]
cmp sil, 0x20
je 0x5199ff
cmp sil, 9
je 0x5199ff
cmp sil, 0xa
je 0x5199ff
cmp sil, 0xd
je 0x5199ff
jmp 0x519a40
dec rbx
nop dword [rax]
test rbx, rbx
je 0x5193c8
movzx esi, byte [rbx + rdx - 1]
cmp sil, 0x20
je 0x519a3a
cmp sil, 9
je 0x519a3a
nop word [rax + rax]
cmp sil, 0xa
je 0x519a3a
cmp sil, 0xd
je 0x519a3a
jmp 0x519660
xor eax, eax
lea rbx, [0x0059aa67]
mov ecx, 0x12
mov rdi, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x40]
call fcn.004467c0
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xc8], rax
lea rax, [0x00572de0]
call fcn.0040bdc0
mov rdx, qword [rsp + 0x80]
mov qword [rax + 8], rdx
cmp dword [0x00712210], 0
jne 0x519acc
mov rcx, qword [rsp + 0xc8]
jmp 0x519adc
call fcn.00459100
mov rcx, qword [rsp + 0xc8]
mov qword [r11], rcx
mov qword [rax], rcx
lea rcx, [0x005ea400]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00712210], 0
je 0x519b10
nop dword [rax + rax]
call fcn.00459120
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
nop
ret
nop
lea rax, [0x00572de0]
call fcn.0040bdc0
mov qword [rax + 8], 0x1a
lea rcx, [0x0059e3eb]
mov qword [rax], rcx
lea rcx, [0x005ea400]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00712210], 0
je 0x519b70
nop dword [rax]
call fcn.00459120
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
nop
ret
mov rax, rdx
call fcn.00459540
mov eax, 1
xor ecx, ecx
call fcn.00459540
call fcn.004594c0
dec rsi
mov r9, rsi
neg r9
sar r9, 0x3f
and r9d, 1
add r8, r9
test rsi, rsi
je 0x519bd7
movzx r9d, byte [r8]
cmp r9b, 0x20
je 0x519b9a
nop dword [rax]
cmp r9b, 9
je 0x519b9a
cmp r9b, 0xa
je 0x519b9a
cmp r9b, 0xd
je 0x519b9a
jmp 0x519bd7
dec rsi
test rsi, rsi
je 0x519bfa
movzx r9d, byte [r8 + rsi - 1]
cmp r9b, 0x20
je 0x519bd4
cmp r9b, 9
je 0x519bd4
cmp r9b, 0xa
je 0x519bd4
cmp r9b, 0xd
je 0x519bd4
mov rax, rsi
mov rdx, r8
jmp 0x5196f6
mov rcx, rdx
call fcn.00459540
call fcn.004594c0
mov rax, rdi
mov rcx, rdx
call fcn.00459540
nop dword [rax]
call fcn.004594c0
call fcn.004594c0
nop
mov qword [rsp + 8], rax
call fcn.00457200
mov rax, qword [rsp + 8]
jmp fcn.00519380