Function at 0x518820
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x308
mov r12, qword [rcx]
mov rsi, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x18]
mov r9, qword [rcx + 0x38]
mov r10, qword [rcx + 0x20]
mov qword [rsp + 0x360], r8
lea rbp, [rsp + 0x80]
mov r8, qword [rcx + 0x30]
mov qword [rsp + 0x80], r12
mov r11, qword [rcx + 0x28]
mov qword [rsp + 0x90], rsi
mov r14, qword [rcx + 0x40]
mov qword [rsp + 0x98], rdi
mov r13, qword [rcx + 8]
mov qword [rsp + 0xb8], r9
mov r15, qword [rcx + 0x48]
mov qword [rsp + 0xb0], r8
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0x100], r8
mov qword [rsp + 0x108], r9
mov qword [rsp + 0x110], r14
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x88], r13
mov qword [rsp + 0xa0], r10
mov qword [rsp + 0xa8], r11
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xf0], r10
mov qword [rsp + 0xf8], r11
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x128], r13
movdqu xmm5, xmmword [rcx]
mov rbx, qword [rdx + 0x18]
mov qword [rsp + 0x150], r8
movups xmmword [rsp + 0x170], xmm5
movdqu xmm5, xmmword [rdx + 0x20]
mov rcx, qword [rdx + 0x10]
mov qword [rsp + 0x158], r9
mov qword [rsp + 0x1b0], r8
mov r8, qword [rdx]
mov qword [rsp + 0x1b8], r9
mov r9, qword [rdx + 8]
movups xmmword [rsp + 0x1e0], xmm5
movdqu xmm5, xmmword [rdx + 0x30]
mov qword [rsp + 0x130], rsi
movups xmmword [rsp + 0x1f0], xmm5
movdqu xmm5, xmmword [rdx + 0x40]
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x160], r14
lea r14, [rsp + 0x1c0]
mov qword [rsp + 0x180], r12
lea r12, [rsp + 0x2e0]
mov qword [rsp + 0x190], rsi
xor esi, esi
mov qword [rsp + 0x198], rdi
mov edi, 0x20
mov qword [rsp + 0x140], r10
mov qword [rsp + 0x148], r11
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x188], r13
mov qword [rsp + 0x1a0], r10
mov qword [rsp + 0x1a8], r11
mov qword [rsp + 0x1c0], r8
mov qword [rsp + 0x1c8], r9
mov qword [rsp + 0x1d0], rcx
mov qword [rsp + 0x1d8], rbx
movups xmmword [rsp + 0x200], xmm5
movdqu xmm5, xmmword [rdx + 0x50]
mov qword [rsp + 0x2c0], r8
movups xmmword [rsp + 0x210], xmm5
movdqu xmm5, xmmword [rdx + 0x60]
mov qword [rsp + 0x2c8], r9
movups xmmword [rsp + 0x220], xmm5
movdqu xmm5, xmmword [rdx + 0x70]
mov qword [rsp + 0x2d0], rcx
movups xmmword [rsp + 0x230], xmm5
movdqu xmm5, xmmword [rdx + 0x80]
mov qword [rsp + 0x2d8], rbx
movups xmmword [rsp + 0x240], xmm5
movdqu xmm5, xmmword [rdx + 0x90]
movups xmmword [rsp + 0x250], xmm5
movdqu xmm5, xmmword [rdx + 0xa0]
movups xmmword [rsp + 0x260], xmm5
movdqu xmm5, xmmword [rdx + 0xb0]
movups xmmword [rsp + 0x270], xmm5
movdqu xmm5, xmmword [rdx + 0xc0]
movups xmmword [rsp + 0x280], xmm5
movdqu xmm5, xmmword [rdx + 0xd0]
movups xmmword [rsp + 0x290], xmm5
movdqu xmm5, xmmword [rdx + 0xe0]
movups xmmword [rsp + 0x2a0], xmm5
movdqu xmm5, xmmword [rdx + 0xf0]
movups xmmword [rsp + 0x2b0], xmm5
jmp 0x518ae9
sub edi, 1
je 0x518d1f
lea rdx, [r14 + rsi]
mov r8, r12
lea rcx, [rbp + rsi]
call fcn.00518620
mov edx, dword [rsp + 0x2e0]
movdqu xmm2, xmmword [rsp + 0x2e0]
movdqu xmm1, xmmword [rsp + 0x2f0]
pmovzxbw xmm4, xmm2
psrldq xmm2, 8
pmovzxwd xmm0, xmm4
psrldq xmm4, 8
pmovzxbw xmm2, xmm2
pmovzxwd xmm4, xmm4
pmovzxbw xmm3, xmm1
paddd xmm0, xmm4
psrldq xmm1, 8
pmovzxwd xmm4, xmm2
psrldq xmm2, 8
pmovzxbw xmm1, xmm1
pmovzxwd xmm2, xmm2
paddd xmm2, xmm4
paddd xmm0, xmm2
pmovzxwd xmm2, xmm3
psrldq xmm3, 8
pmovzxwd xmm3, xmm3
paddd xmm3, xmm2
pmovzxwd xmm2, xmm1
psrldq xmm1, 8
paddd xmm0, xmm3
pmovzxwd xmm1, xmm1
paddd xmm1, xmm2
paddd xmm0, xmm1
movdqu xmm1, xmm0
psrldq xmm1, 8
paddd xmm0, xmm1
movdqu xmm1, xmm0
psrldq xmm1, 4
paddd xmm0, xmm1
movd eax, xmm0
movzx esi, al
lea rbx, [r14 + rsi]
mov r13, rsi
xor dword [rbx], edx
mov edx, dword [rsp + 0x2e4]
xor dword [rbx + 4], edx
mov edx, dword [rsp + 0x2e8]
xor dword [rbx + 8], edx
mov edx, dword [rsp + 0x2ec]
xor dword [rbx + 0xc], edx
mov edx, dword [rsp + 0x2f0]
xor dword [rbx + 0x10], edx
mov edx, dword [rsp + 0x2f4]
xor dword [rbx + 0x14], edx
mov edx, dword [rsp + 0x2f8]
xor dword [rbx + 0x18], edx
mov edx, dword [rsp + 0x2fc]
xor dword [rbx + 0x1c], edx
and eax, 0xe0
jne 0x518c95
lea edx, [rsi + 0x100]
add rdx, r14
cmp esi, 0x20
ja 0x518da0
mov r9d, 0x20
sub r9d, esi
mov eax, r9d
mov r8d, r9d
and eax, 3
shr r8d, 2
je 0x518c70
lea ecx, [r8 - 1]
test r8d, r8d
mov r11d, 4
lea rcx, [rcx*4 + 4]
cmove rcx, r11
mov r8d, ecx
cmp ecx, 8
jae 0x518db1
and ecx, 4
jne 0x519449
test r8d, r8d
je 0x518c70
movzx ecx, byte [rbx]
mov byte [rdx], cl
test r8b, 2
jne 0x51952d
test eax, eax
je 0x518c95
mov ecx, r9d
sub ecx, eax
cmp ecx, r9d
jae 0x518c95
mov r8d, ecx
sub eax, 1
lea rcx, [rdx + r8]
lea rdx, [rbx + r8]
lea r8, [rax + 1]
call sub.msvcrt.dll_memcpy
mov r15d, 0x100
sub r15d, r13d
cmp r15d, 0x1f
ja 0x518ae0
lea r9d, [r13 - 0xe0]
mov eax, r9d
shr eax, 2
je 0x518cdc
sub eax, 1
mov rcx, r14
mov dword [rsp + 0x20], r9d
lea rdx, [rsp + 0x2c0]
lea r8, [rax*4 + 4]
call sub.msvcrt.dll_memmove
mov r9d, dword [rsp + 0x20]
mov edx, r9d
and edx, 3
je 0x518ae0
mov eax, r9d
sub eax, edx
cmp r9d, eax
jbe 0x518ae0
lea rcx, [r14 + rax]
sub edx, r9d
lea r8d, [r13 + rdx - 0xe1]
lea rdx, [rsp + rax + 0x2c0]
add r8, 1
call sub.msvcrt.dll_memmove
sub edi, 1
jne 0x518ae9
cmp r15d, 0x1f
jbe 0x518dea
lea rax, [rbx + 0x10]
cmp rbp, rax
jae 0x518d43
lea rax, [rsp + 0x90]
cmp rbx, rax
jb 0x51945c
movdqu xmm0, xmmword [rbx]
pxor xmm0, xmmword [rsp + 0x80]
movups xmmword [rbx], xmm0
movdqu xmm0, xmmword [rbx + 0x10]
pxor xmm0, xmmword [rsp + 0x90]
movups xmmword [rbx + 0x10], xmm0
mov rax, qword [rsp + 0x360]
movdqu xmm5, xmmword [rbx]
mov rdi, qword [rsp + 0x360]
mov rdx, qword [rbx + 0x18]
movups xmmword [rax], xmm5
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x18], rdx
mov qword [rdi + 0x10], rax
add rsp, 0x308
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r8d, 8
mov r9d, 0x20
jmp 0x518c2e
mov r8d, ecx
mov r10, qword [rbx + r8 - 8]
mov qword [rdx + r8 - 8], r10
lea r8d, [rcx - 1]
cmp r8d, 8
jb 0x518c70
and r8d, 0xfffffff8
xor ecx, ecx
mov r10d, ecx
add ecx, 8
mov r11, qword [rbx + r10]
mov qword [rdx + r10], r11
cmp ecx, r8d
jb 0x518dd2
jmp 0x518c70
mov edx, r15d
shr edx, 2
je 0x518e5f
lea rax, [rbx + 0x10]
cmp rbp, rax
lea rax, [rsp + 0x90]
setae cl
cmp rbx, rax
setae al
or cl, al
je 0x5194b0
lea eax, [rdx - 1]
cmp eax, 2
jbe 0x5194b0
movdqu xmm0, xmmword [rbx]
pxor xmm0, xmmword [rsp + 0x80]
movups xmmword [rbx], xmm0
cmp edx, 4
je 0x518e5f
mov eax, dword [rsp + 0x90]
xor dword [rbx + 0x10], eax
cmp edx, 5
je 0x518e5f
mov eax, dword [rsp + 0x94]
xor dword [rbx + 0x14], eax
cmp edx, 7
jne 0x519561
mov eax, dword [rsp + 0x98]
xor dword [rbx + 0x18], eax
mov r9d, r15d
and r9d, 3
je 0x5193ea
mov eax, r15d
sub eax, r9d
cmp r15d, eax
jbe 0x5193ea
lea rcx, [rsp + 0x40]
mov r8d, eax
lea r11, [rbx + r8 + 0x10]
lea r12, [rsp + r8 + 0x80]
lea rsi, [rbx + r8]
cmp r12, r11
lea r11, [rsp + r8 + 0x90]
setae r10b
cmp rsi, r11
setae r11b
or r10b, r11b
je 0x5193bc
lea r10d, [r9 - 1]
lea r11d, [r13 + r9 - 0x100]
cmp r10d, 0xe
jbe 0x5193bc
add r11d, r15d
movdqu xmm0, xmmword [r12]
movdqu xmm5, xmmword [rsi]
mov r8d, r11d
and r8d, 0xfffffff0
pxor xmm0, xmm5
add eax, r8d
movups xmmword [rsi], xmm0
cmp r11d, r8d
je 0x519053
mov r8d, eax
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 1]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 2]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 3]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 4]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 5]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 6]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 7]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 8]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 9]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 0xa]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 0xb]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 0xc]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
xor byte [rbx + r8], r11b
lea r8d, [rax + 0xd]
cmp r15d, r8d
jbe 0x519053
movzx r11d, byte [rsp + r8 + 0x80]
add eax, 0xe
xor byte [rbx + r8], r11b
cmp r15d, eax
jbe 0x519053
movzx r8d, byte [rsp + rax + 0x80]
xor byte [rbx + rax], r8b
mov r12d, r15d
lea esi, [r13 - 0xe0]
add rbp, r12
mov r10d, esi
shr r10d, 2
je 0x51912d
lea rax, [rcx + r12 + 0x40]
mov qword [rsp + 0x20], rax
lea rax, [rcx + r12 + 0x50]
lea r11d, [r10 - 1]
cmp r14, rax
setae byte [rsp + 0x28]
movzx r8d, byte [rsp + 0x28]
lea rax, [rsp + 0x1d0]
cmp qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rax
setae al
or r8b, al
je 0x519500
cmp r11d, 2
jbe 0x519500
lea r8, [rcx + r12 + 0x40]
mov r11d, esi
mov rax, r14
shr r11d, 4
mov dword [rsp + 0x20], r11d
sub r11d, 1
shl r11, 4
add r11, qword [rsp + 0x28]
movdqu xmm0, xmmword [r8]
add rax, 0x10
pxor xmm0, xmmword [rax - 0x10]
add r8, 0x10
movups xmmword [rax - 0x10], xmm0
cmp rax, r11
jne 0x5190d7
mov eax, dword [rsp + 0x20]
shl eax, 2
cmp eax, r10d
je 0x51912d
mov r8d, eax
mov r11d, dword [rbp + r8*4]
xor dword [r14 + r8*4], r11d
lea r8d, [rax + 1]
cmp r10d, r8d
jbe 0x51912d
add eax, 2
mov r11d, dword [rbp + r8*4]
xor dword [r14 + r8*4], r11d
cmp r10d, eax
jbe 0x51912d
mov r8d, dword [rbp + rax*4]
xor dword [r14 + rax*4], r8d
mov eax, esi
and eax, 3
mov dword [rsp + 0x20], eax
je 0x519300
mov eax, esi
sub eax, dword [rsp + 0x20]
mov dword [rsp + 0x3c], eax
cmp esi, eax
jbe 0x519300
lea r8, [rax + 0x180]
mov r11, r8
lea r8, [r12 + rax + 0x40]
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x28], r8
lea r8, [r12 + rax + 0x50]
cmp r11, r8
lea r8, [rax + 0x190]
setge r11b
cmp r8, qword [rsp + 0x28]
setle r8b
or r11b, r8b
je 0x5193d4
mov r11d, dword [rsp + 0x20]
sub r11d, esi
lea r8d, [r13 + r11 - 0xe1]
cmp r8d, 0xe
jbe 0x5193d4
mov r8, qword [rsp + 0x30]
mov r11d, 0x10000000
xor eax, eax
add r8, rcx
add rcx, qword [rsp + 0x28]
movdqu xmm0, xmmword [r8 + rax]
add edi, 1
movdqu xmm5, xmmword [rcx + rax]
pxor xmm0, xmm5
movups xmmword [r8 + rax], xmm0
add rax, 0x10
cmp r11d, edi
ja 0x5191bb
mov ecx, dword [rsp + 0x20]
mov eax, dword [rsp + 0x3c]
test ecx, ecx
je 0x519300
mov ecx, eax
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 1]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 2]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 3]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 4]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 5]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 6]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 7]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 8]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 9]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 0xa]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 0xb]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 0xc]
cmp esi, ecx
jbe 0x519300
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
lea ecx, [rax + 0xd]
cmp esi, ecx
jbe 0x519300
add eax, 0xe
movzx r8d, byte [rbp + rcx]
xor byte [r14 + rcx], r8b
cmp esi, eax
jbe 0x519300
movzx ecx, byte [rbp + rax]
xor byte [r14 + rax], cl
test edx, edx
je 0x519328
lea eax, [rdx - 1]
lea rax, [rax*4 + 4]
cmp eax, 8
jae 0x5193f4
test al, 4
jne 0x51953e
test eax, eax
jne 0x519437
test r9d, r9d
je 0x51935d
mov edx, r15d
sub edx, r9d
cmp r15d, edx
jbe 0x51935d
mov rcx, qword [rsp + 0x360]
lea eax, [r9 - 1]
mov dword [rsp + 0x28], r10d
lea r8, [rax + 1]
add rcx, rdx
add rdx, rbx
call sub.msvcrt.dll_memcpy
mov r10d, dword [rsp + 0x28]
add r12, qword [rsp + 0x360]
test r10d, r10d
je 0x519381
mov rdx, r14
mov rcx, r12
lea eax, [r10 - 1]
lea r8, [rax*4 + 4]
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x20]
test eax, eax
je 0x518d8c
mov eax, dword [rsp + 0x20]
mov edx, esi
sub edx, eax
cmp esi, edx
jbe 0x518d8c
lea rcx, [r12 + rdx]
sub eax, esi
add rdx, r14
lea eax, [r13 + rax - 0xe1]
lea r8, [rax + 1]
call sub.msvcrt.dll_memcpy
jmp 0x518d8c
movzx eax, byte [rbp + r8]
xor byte [rbx + r8], al
add r8, 1
cmp r15d, r8d
ja 0x5193bc
jmp 0x519053
movzx ecx, byte [rbp + rax]
xor byte [r14 + rax], cl
add rax, 1
cmp esi, eax
ja 0x5193d4
jmp 0x519300
lea rcx, [rsp + 0x40]
jmp 0x519053
mov edx, eax
mov rdi, qword [rsp + 0x360]
sub eax, 1
mov rcx, qword [rbx + rdx - 8]
mov qword [rdi + rdx - 8], rcx
cmp eax, 8
jb 0x519328
and eax, 0xfffffff8
xor edx, edx
mov ecx, edx
mov rdi, qword [rsp + 0x360]
add edx, 8
mov r8, qword [rbx + rcx]
mov qword [rdi + rcx], r8
cmp edx, eax
jb 0x519419
jmp 0x519328
movzx eax, byte [rbx]
mov rdi, qword [rsp + 0x360]
mov byte [rdi], al
jmp 0x519328
mov ecx, dword [rbx]
mov dword [rdx], ecx
mov ecx, dword [rbx + r8 - 4]
mov dword [rdx + r8 - 4], ecx
jmp 0x518c70
mov eax, dword [rsp + 0x80]
xor dword [rbx], eax
mov eax, dword [rsp + 0x84]
xor dword [rbx + 4], eax
mov eax, dword [rsp + 0x88]
xor dword [rbx + 8], eax
mov eax, dword [rsp + 0x8c]
xor dword [rbx + 0xc], eax
mov eax, dword [rsp + 0x90]
xor dword [rbx + 0x10], eax
mov eax, dword [rsp + 0x94]
xor dword [rbx + 0x14], eax
mov eax, dword [rsp + 0x98]
xor dword [rbx + 0x18], eax
mov eax, dword [rsp + 0x9c]
xor dword [rbx + 0x1c], eax
jmp 0x518d65
mov eax, dword [rsp + 0x80]
xor dword [rbx], eax
cmp edx, 1
je 0x518e5f
mov eax, dword [rsp + 0x84]
xor dword [rbx + 4], eax
cmp edx, 2
je 0x518e5f
mov eax, dword [rsp + 0x88]
xor dword [rbx + 8], eax
cmp edx, 3
je 0x518e5f
mov eax, dword [rsp + 0x8c]
xor dword [rbx + 0xc], eax
cmp edx, 4
jne 0x518e33
jmp 0x518e5f
mov rax, r14
mov r8, rbp
mov dword [rsp + 0x20], edx
lea r11, [rsp + r11*4 + 0x1c4]
mov edx, dword [r8]
add r8, 4
xor dword [rax], edx
add rax, 4
cmp r11, rax
jne 0x519512
mov edx, dword [rsp + 0x20]
jmp 0x51912d
movzx ecx, word [rbx + r8 - 2]
mov word [rdx + r8 - 2], cx
jmp 0x518c70
mov edx, dword [rbx]
mov eax, eax
mov rdi, qword [rsp + 0x360]
mov dword [rdi], edx
mov edx, dword [rbx + rax - 4]
mov rdi, qword [rsp + 0x360]
mov dword [rdi + rax - 4], edx
jmp 0x519328
mov edx, 6
jmp 0x518e5f