Function at 0x2fc4c3e40
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov dword [rsp + 0x44], 0x3ab78c92
mov qword [rsp + 0x38], rcx
mov eax, dword [rsp + 0x44]
mov ecx, eax
sub ecx, 0x8a6a6a4a
mov dword [rsp + 0x34], eax
je 0x2fc4c413a
jmp 0x2fc4c3e6f
mov eax, dword [rsp + 0x34]
sub eax, 0xa33611b6
je 0x2fc4c405f
jmp 0x2fc4c3e83
mov eax, dword [rsp + 0x34]
sub eax, 0xaf7824ea
je 0x2fc4c40a8
jmp 0x2fc4c3e97
mov eax, dword [rsp + 0x34]
sub eax, 0xc4d20aa0
je 0x2fc4c40c2
jmp 0x2fc4c3eab
mov eax, dword [rsp + 0x34]
sub eax, 0xdb9b58e4
je 0x2fc4c4089
jmp 0x2fc4c3ebf
mov eax, dword [rsp + 0x34]
sub eax, 0xef688746
je 0x2fc4c4177
jmp 0x2fc4c3ed3
mov eax, dword [rsp + 0x34]
sub eax, 0xf58bd52f
je 0x2fc4c41eb
jmp 0x2fc4c3ee7
mov eax, dword [rsp + 0x34]
sub eax, 0xfed980ef
je 0x2fc4c411a
jmp 0x2fc4c3efb
mov eax, dword [rsp + 0x34]
sub eax, 0x8b76e9a
je 0x2fc4c402e
jmp 0x2fc4c3f0f
mov eax, dword [rsp + 0x34]
sub eax, 0xa09b1b8
je 0x2fc4c419e
jmp 0x2fc4c3f23
mov eax, dword [rsp + 0x34]
sub eax, 0x2afca410
je 0x2fc4c4184
jmp 0x2fc4c3f37
mov eax, dword [rsp + 0x34]
sub eax, 0x3ab78c92
je 0x2fc4c3fc8
jmp 0x2fc4c3f4b
mov eax, dword [rsp + 0x34]
sub eax, 0x49e0e8a9
je 0x2fc4c4205
jmp 0x2fc4c3f5f
mov eax, dword [rsp + 0x34]
sub eax, 0x4fcc1091
je 0x2fc4c41bb
jmp 0x2fc4c3f73
mov eax, dword [rsp + 0x34]
sub eax, 0x57a77372
je 0x2fc4c403b
jmp 0x2fc4c3f87
mov eax, dword [rsp + 0x34]
sub eax, 0x5a860cef
je 0x2fc4c415a
jmp 0x2fc4c3f9b
mov eax, dword [rsp + 0x34]
sub eax, 0x5af8c32b
je 0x2fc4c41de
jmp 0x2fc4c3faf
mov eax, dword [rsp + 0x34]
sub eax, 0x7281736d
je 0x2fc4c41c8
jmp 0x2fc4c3fc3
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0xc4], 0x60
mov ecx, dword [rsp + 0xc4]
mov edx, ecx
mov rdx, qword gs:[rdx]
mov qword [rsp + 0xb8], rdx
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x60], rdx
mov rdx, qword [rsp + 0x60]
mov rdx, qword [rdx + 0x18]
add rdx, 0x10
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx]
mov qword [rsp + 0x50], rdx
mov dword [rsp + 0x44], 0x8b76e9a
jmp 0x2fc4c4215
mov dword [rsp + 0x44], 0x57a77372
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x44], 0xa33611b6
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
cmp rax, rcx
setne dl
and dl, 1
mov byte [rsp + 0x8f], dl
mov dword [rsp + 0x44], 0xdb9b58e4
jmp 0x2fc4c4215
mov al, byte [rsp + 0x8f]
test al, 1
mov ecx, 0xaf7824ea
mov edx, 0x7281736d
cmovne edx, ecx
mov dword [rsp + 0x44], edx
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x44], 0xc4d20aa0
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov rcx, rax
mov qword [rsp + 0x20], rdx
call fcn.2fc4c34f0
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov r8, rax
call fcn.2fc4c45c0
mov dword [rsp + 0x9c], eax
mov dword [rsp + 0x44], 0xfed980ef
jmp 0x2fc4c4215
mov eax, dword [rsp + 0x9c]
cmp eax, 0
mov eax, 0x8a6a6a4a
mov ecx, 0x2afca410
cmove ecx, eax
mov dword [rsp + 0x44], ecx
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x48]
add rax, 0x30
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x44], 0x5a860cef
jmp 0x2fc4c4215
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x44], 0xef688746
jmp 0x2fc4c4215
mov dword [rsp + 0x44], 0xf58bd52f
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x44], 0xa09b1b8
jmp 0x2fc4c4215
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x44], 0x4fcc1091
jmp 0x2fc4c4215
mov dword [rsp + 0x44], 0x57a77372
jmp 0x2fc4c4215
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x44], 0x5af8c32b
jmp 0x2fc4c4215
mov dword [rsp + 0x44], 0xf58bd52f
jmp 0x2fc4c4215
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x44], 0x49e0e8a9
jmp 0x2fc4c4215
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3e54