Function at 0x2fc4c3c70
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov dword [rsp + 0x44], 0x78764f3c
mov qword [rsp + 0x38], rcx
mov eax, dword [rsp + 0x44]
mov ecx, eax
sub ecx, 0x81b98506
mov dword [rsp + 0x34], eax
je 0x2fc4c4019
jmp 0x2fc4c3c9f
mov eax, dword [rsp + 0x34]
sub eax, 0x84937886
je 0x2fc4c3f4d
jmp 0x2fc4c3cb3
mov eax, dword [rsp + 0x34]
sub eax, 0x8b287f54
je 0x2fc4c3eff
jmp 0x2fc4c3cc7
mov eax, dword [rsp + 0x34]
sub eax, 0x9f78cdc2
je 0x2fc4c3fa5
jmp 0x2fc4c3cdb
mov eax, dword [rsp + 0x34]
sub eax, 0xb9cc2290
je 0x2fc4c3fb2
jmp 0x2fc4c3cef
mov eax, dword [rsp + 0x34]
sub eax, 0xe7166cbc
je 0x2fc4c3fe9
jmp 0x2fc4c3d03
mov eax, dword [rsp + 0x34]
sub eax, 0xef88e7a5
je 0x2fc4c3e8f
jmp 0x2fc4c3d17
mov eax, dword [rsp + 0x34]
sub eax, 0xf426890
je 0x2fc4c3ea9
jmp 0x2fc4c3d2b
mov eax, dword [rsp + 0x34]
sub eax, 0x256bacd4
je 0x2fc4c3f6d
jmp 0x2fc4c3d3f
mov eax, dword [rsp + 0x34]
sub eax, 0x259be1dd
je 0x2fc4c3ff6
jmp 0x2fc4c3d53
mov eax, dword [rsp + 0x34]
sub eax, 0x3a499d61
je 0x2fc4c3e75
jmp 0x2fc4c3d67
mov eax, dword [rsp + 0x34]
sub eax, 0x3e0b5975
je 0x2fc4c400c
jmp 0x2fc4c3d7b
mov eax, dword [rsp + 0x34]
sub eax, 0x44ac5abd
je 0x2fc4c3ed5
jmp 0x2fc4c3d8f
mov eax, dword [rsp + 0x34]
sub eax, 0x47f24dd0
je 0x2fc4c3e5b
jmp 0x2fc4c3da3
mov eax, dword [rsp + 0x34]
sub eax, 0x50d70da0
je 0x2fc4c4033
jmp 0x2fc4c3db7
mov eax, dword [rsp + 0x34]
sub eax, 0x5779cf97
je 0x2fc4c3fcf
jmp 0x2fc4c3dcb
mov eax, dword [rsp + 0x34]
sub eax, 0x6cd48966
je 0x2fc4c3f8b
jmp 0x2fc4c3ddf
mov eax, dword [rsp + 0x34]
sub eax, 0x78764f3c
je 0x2fc4c3df8
jmp 0x2fc4c3df3
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0xc4], 0x60
mov ecx, dword [rsp + 0xc4]
mov edx, ecx
mov rdx, qword gs:[rdx]
mov qword [rsp + 0xb8], rdx
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x60], rdx
mov rdx, qword [rsp + 0x60]
mov rdx, qword [rdx + 0x18]
add rdx, 0x10
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x78], rdx
mov dword [rsp + 0x44], 0x47f24dd0
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x44], 0x3a499d61
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x44], 0xef88e7a5
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x44], 0xf426890
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
cmp rax, rcx
mov edx, 0x44ac5abd
mov r8d, 0x259be1dd
cmovne r8d, edx
mov dword [rsp + 0x44], r8d
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
add rax, 0x58
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x44], 0x8b287f54
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov rcx, rax
mov qword [rsp + 0x20], rdx
call fcn.2fc4c3360
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov r8, rax
call fcn.2fc4c4410
mov dword [rsp + 0x9c], eax
mov dword [rsp + 0x44], 0x84937886
jmp 0x2fc4c4043
mov eax, dword [rsp + 0x9c]
cmp eax, 0
mov eax, 0x256bacd4
mov ecx, 0xb9cc2290
cmove ecx, eax
mov dword [rsp + 0x44], ecx
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x44], 0x6cd48966
jmp 0x2fc4c4043
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x44], 0x9f78cdc2
jmp 0x2fc4c4043
mov dword [rsp + 0x44], 0x81b98506
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x44], 0x5779cf97
jmp 0x2fc4c4043
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x44], 0xe7166cbc
jmp 0x2fc4c4043
mov dword [rsp + 0x44], 0x3a499d61
jmp 0x2fc4c4043
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x44], 0x3e0b5975
jmp 0x2fc4c4043
mov dword [rsp + 0x44], 0x81b98506
jmp 0x2fc4c4043
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x44], 0x50d70da0
jmp 0x2fc4c4043
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3c84