Function at 0x2f79a3900
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x160]
cmp r12, qword [r14 + 0x10]
jbe 0x2f79a44d9
push rbp
mov rbp, rsp
sub rsp, 0x1d8
movq qword [rsp + 0x1d0], xmm15
mov byte [rsp + 0x46], 0
call fcn.2f796f380
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0x168], rcx
mov rdi, qword [0x2f7ab99f8]
mov rsi, qword [0x2f7ab9a00]
mov r8, qword [0x2f7ab9a08]
mov rdx, qword [0x2f79c2dc0]
mov qword [rsp + 0x120], rdx
mov r9, qword [0x2f79c2dc8]
mov qword [rsp + 0x80], r9
nop dword [rax]
call fcn.2f796e3a0
test al, al
je 0x2f79a39c2
mov rcx, qword [0x2f7ab9a18]
mov rbx, qword [rsp + 0x80]
cmp rcx, rbx
je 0x2f79a39a2
xor eax, eax
nop
jmp 0x2f79a39cc
mov rax, qword [0x2f7ab9a10]
mov rbx, qword [rsp + 0x120]
call fcn.2f78f3600
mov rbx, qword [rsp + 0x80]
nop
jmp 0x2f79a39cc
mov rbx, qword [rsp + 0x80]
xor eax, eax
test al, al
je 0x2f79a39f2
mov rcx, qword [0x2f7ab99e8]
test rcx, rcx
je 0x2f79a39e2
mov rcx, qword [rcx]
nop
jmp 0x2f79a39e4
xor ecx, ecx
test rcx, rcx
jle 0x2f79a39f2
add rsp, 0x1d8
pop rbp
ret
mov rax, qword [rsp + 0x120]
call fcn.2f79aed40
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0xa8], rbx
nop dword [rax]
test rsi, rsi
je 0x2f79a3a34
mov r9, qword [rsp + 0x80]
xor edx, edx
jmp 0x2f79a3aec
mov rdx, qword [0x2f7ab9a18]
mov r9, qword [rsp + 0x80]
cmp rdx, r9
je 0x2f79a3a4c
xor edx, edx
jmp 0x2f79a3a8c
mov rax, qword [0x2f7ab9a10]
mov rbx, qword [rsp + 0x120]
mov rcx, rdx
nop
call fcn.2f78f3600
mov rcx, qword [rsp + 0x160]
mov rbx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x58]
mov r9, qword [rsp + 0x80]
mov edx, eax
mov rax, qword [rsp + 0xb0]
test dl, dl
jne 0x2f79a3a94
xor edx, edx
jmp 0x2f79a3aec
mov rdx, qword [0x2f7ab9a20]
mov r9, qword [0x2f7ab9a28]
mov r10, qword [0x2f7ab9a30]
mov rdi, rax
mov rsi, rbx
mov r8, rcx
mov rax, rdx
mov rbx, r9
mov rcx, r10
nop dword [rax + rax]
call fcn.2f796e460
mov rcx, qword [rsp + 0x160]
mov rbx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x58]
mov r9, qword [rsp + 0x80]
mov edx, eax
mov rax, qword [rsp + 0xb0]
test dl, dl
je 0x2f79a3b63
cmp qword [0x2f7ab9a38], rdi
jne 0x2f79a3b63
mov rax, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x168]
movabs rdi, 0x12a05f200
nop dword [rax + rax]
call fcn.2f796ec80
mov qword [0x2f7ab99f8], rax
mov qword [0x2f7ab9a00], rbx
cmp dword [0x2f7b0c9d0], 0
je 0x2f79a3b53
nop dword [rax]
call fcn.2f7954760
mov qword [r11], rcx
mov rax, qword [0x2f7ab9a08]
mov qword [r11 + 8], rax
mov qword [0x2f7ab9a08], rcx
add rsp, 0x1d8
pop rbp
ret
call fcn.2f78fdae0
mov qword [rsp + 0x118], rax
call fcn.2f78fdae0
mov qword [rsp + 0x110], rax
mov rbx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x120]
call fcn.2f79aec60
mov qword [rsp + 0x128], rax
test rbx, rbx
je 0x2f79a3c00
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x130], rcx
mov rdx, qword [0x2f7ab93a0]
mov rdi, qword [0x2f7ab93a8]
mov rax, rbx
mov rbx, rcx
mov rcx, rdx
call fcn.2f795bee0
test al, al
jne 0x2f79a3bf6
mov rcx, qword [0x2f7ab9380]
mov rdi, qword [0x2f7ab9388]
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x130]
call fcn.2f795bee0
test al, al
je 0x2f79a3c49
mov rax, qword [rsp + 0x128]
nop
test rax, rax
je 0x2f79a3c45
movups xmmword [rsp + 0x170], xmm15
lea rcx, [0x2f79a4500]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x1d0], rcx
mov byte [rsp + 0x46], 1
call fcn.2f79aea60
nop
jmp 0x2f79a3dd2
xor eax, eax
jmp 0x2f79a3c52
add rsp, 0x1d8
pop rbp
ret
mov byte [rsp + 0x47], al
mov rbx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x168]
movabs rdi, 0x12a05f200
mov rax, qword [rsp + 0xc0]
call fcn.2f796ec80
mov qword [0x2f7ab99f8], rax
mov qword [0x2f7ab9a00], rbx
cmp dword [0x2f7b0c9d0], 0
je 0x2f79a3ca7
call fcn.2f7954760
mov qword [r11], rcx
mov rax, qword [0x2f7ab9a08]
mov qword [r11 + 8], rax
mov qword [0x2f7ab9a08], rcx
mov rax, qword [rsp + 0x80]
mov qword [0x2f7ab9a18], rax
cmp dword [0x2f7b0c9d0], 0
jne 0x2f79a3ce2
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x118]
mov rbx, qword [rsp + 0x110]
nop
jmp 0x2f79a3d2b
call fcn.2f79547e0
mov rax, qword [rsp + 0x120]
mov qword [r11], rax
mov rcx, qword [0x2f7ab9a10]
mov qword [r11 + 8], rcx
mov rcx, qword [rsp + 0x118]
mov qword [r11 + 0x10], rcx
mov rbx, qword [0x2f7ab99e8]
mov qword [r11 + 0x18], rbx
mov rbx, qword [rsp + 0x110]
mov qword [r11 + 0x20], rbx
mov rsi, qword [0x2f7ab99f0]
mov qword [r11 + 0x28], rsi
mov qword [0x2f7ab9a10], rax
mov qword [0x2f7ab99e8], rcx
mov qword [0x2f7ab99f0], rbx
mov rax, qword [rsp + 0xb0]
mov qword [0x2f7ab9a20], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x2f7ab9a28], rax
cmp dword [0x2f7b0c9d0], 0
jne 0x2f79a3d71
mov rax, qword [rsp + 0x160]
jmp 0x2f79a3d8c
call fcn.2f7954760
mov rax, qword [rsp + 0x160]
mov qword [r11], rax
mov rcx, qword [0x2f7ab9a30]
mov qword [r11 + 8], rcx
mov qword [0x2f7ab9a30], rax
mov rax, qword [rsp + 0x58]
mov qword [0x2f7ab9a38], rax
movzx eax, byte [rsp + 0x47]
test al, 1
je 0x2f79a3dbc
and eax, 0xfffffffe
mov byte [rsp + 0x46], al
mov rdx, qword [rsp + 0x1d0]
mov rax, qword [rdx]
call rax
add rsp, 0x1d8
pop rbp
ret
mov rax, qword [rsp + 0x128]
call fcn.2f79aea60
test cl, cl
je 0x2f79a3e95
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x108], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x23
call fcn.2f78f3b00
xorps xmm15, xmm15
mov r14, qword [0x2f7b0c940]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jl 0x2f79a3e2a
mov rdx, qword [rsp + 0x70]
nop dword [rax + rax]
cmp rdx, rcx
jae 0x2f79a3e2f
jmp 0x2f79a44c5
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x108]
mov rbx, rcx
lea rcx, [0x2f79f6bb2]
mov edi, 4
call fcn.2f79aeec0
cmp rbx, 2
jl 0x2f79a3dc5
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0xf0], rax
mov rcx, qword [rax]
mov rbx, qword [rax + 8]
mov rax, rcx
call fcn.2f79a38a0
test rbx, rbx
je 0x2f79a3dc5
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x140], rax
mov ecx, 1
xor edx, edx
xor esi, esi
jmp 0x2f79a3ec7
mov eax, 1
jmp 0x2f79a3c52
mov rcx, qword [rsp + 0x78]
inc rcx
mov rax, qword [rsp + 0x140]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x50]
cmp rdi, rcx
jle 0x2f79a3dc5
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x138], rsi
shl rcx, 4
mov qword [rsp + 0xa0], rcx
mov rdx, qword [rsp + 0xf0]
mov rbx, qword [rcx + rdx + 8]
mov qword [rsp + 0x68], rbx
mov rsi, qword [rcx + rdx]
mov qword [rsp + 0x100], rsi
mov qword [rsp], rsi
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x2e
call fcn.2f78f3b00
xorps xmm15, xmm15
mov r14, qword [0x2f7b0c940]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
nop
je 0x2f79a3f87
mov rax, qword [rsp + 0x68]
lea rdx, [rax - 1]
cmp rax, rdx
jbe 0x2f79a44ba
mov rbx, qword [rsp + 0x100]
movzx edx, byte [rax + rbx - 1]
cmp dl, 0x2e
je 0x2f79a3f94
mov rcx, rax
lea rdi, [0x2f7a1e388]
mov esi, 1
xor eax, eax
call fcn.2f793e7a0
mov rcx, rbx
mov rbx, rax
mov rax, rcx
jmp 0x2f79a3f94
mov rbx, qword [rsp + 0x100]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x100], rbx
mov rdx, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xa0]
mov rdi, qword [rsi + rdx]
mov rcx, qword [rsi + rdx + 8]
lea rax, [rsp + 0xc8]
mov rbx, rdi
call fcn.2f793ece0
xor ecx, ecx
jmp 0x2f79a4491
mov rcx, rbx
mov rbx, rax
xor eax, eax
call fcn.2f793eb20
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0xf8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x2e
call fcn.2f78f3b00
xorps xmm15, xmm15
mov r14, qword [0x2f7b0c940]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
je 0x2f79a405d
mov rax, qword [rsp + 0x60]
lea rdx, [rax - 1]
cmp rax, rdx
jbe 0x2f79a44af
mov rbx, qword [rsp + 0xf8]
movzx edx, byte [rbx + rax - 1]
cmp dl, 0x2e
je 0x2f79a406a
mov rcx, rax
lea rdi, [0x2f7a1e388]
mov esi, 1
xor eax, eax
call fcn.2f793e7a0
mov rcx, rax
mov rax, rbx
mov rbx, rcx
jmp 0x2f79a406a
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0xf8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xe8], rbx
mov rcx, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x98]
lea rax, [0x2f79db240]
mov rbx, qword [rsp + 0x110]
call fcn.2f7901c60
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov rdx, qword [rax]
mov rsi, qword [rsp + 0x78]
cmp rsi, 1
mov r8, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x48]
cmove r8, rdi
mov qword [rsp + 0x90], r8
mov r9, qword [rsp + 0x138]
mov r10, qword [rsp + 0xe8]
cmove r9, r10
mov qword [rsp + 0x138], r9
cmp rcx, rbx
jae 0x2f79a415d
mov qword [rsp + 0x158], rax
mov rax, rdx
mov edi, 1
lea rsi, [0x2f79d5860]
call fcn.2f793aaa0
mov rdx, qword [rsp + 0x158]
mov qword [rdx + 0x10], rcx
cmp dword [0x2f7b0c9d0], 0
je 0x2f79a412f
nop dword [rax]
call fcn.2f7954760
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x90]
mov r9, qword [rsp + 0x138]
mov r10, qword [rsp + 0xe8]
mov rcx, rax
mov rax, rdx
mov rdx, rcx
mov qword [rax + 8], rbx
lea r11, [rbx - 1]
shl r11, 4
mov r12, qword [rsp + 0x68]
mov qword [rdx + r11 + 8], r12
cmp dword [0x2f7b0c9d0], 0
jne 0x2f79a4189
mov rax, r11
mov r12, qword [rsp + 0x100]
jmp 0x2f79a41a4
mov rax, r11
call fcn.2f7954760
mov r12, qword [rsp + 0x100]
mov qword [r11], r12
mov r13, qword [rdx + rax]
mov qword [r11 + 8], r13
mov qword [rdx + rax], r12
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
lea rax, [0x2f79db1e0]
mov rbx, qword [rsp + 0x118]
mov rcx, r10
call fcn.2f7901880
mov rdx, qword [rax]
mov qword [rsp + 0x1a8], rdx
movups xmm0, xmmword [rax + 8]
movups xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rax + 0x18]
movups xmmword [rsp + 0x1c0], xmm0
mov rdx, qword [rsp + 0x1a8]
mov qword [rsp + 0x180], rdx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rsp + 0x188], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsp + 0x198], xmm0
test bl, bl
je 0x2f79a4378
mov rcx, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x188]
inc rbx
mov rax, qword [rsp + 0x180]
cmp rcx, rbx
jae 0x2f79a4266
mov edi, 1
lea rsi, [0x2f79d5860]
call fcn.2f793aaa0
lea rdx, [rbx - 1]
shl rdx, 4
mov rsi, qword [rsp + 0x98]
mov qword [rax + rdx + 8], rsi
cmp dword [0x2f7b0c9d0], 0
jne 0x2f79a428e
mov r8, qword [rsp + 0x140]
jmp 0x2f79a42a6
call fcn.2f7954760
mov r8, qword [rsp + 0x140]
mov qword [r11], r8
mov r9, qword [rdx + rax]
mov qword [r11 + 8], r9
mov qword [rax + rdx], r8
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], rbx
mov qword [rsp + 0x1b8], rcx
mov rdx, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x1a0]
mov qword [rsp + 0x1c0], rdx
mov qword [rsp + 0x1c8], rsi
lea rax, [0x2f79db1e0]
mov rbx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x48]
call fcn.2f7901c60
test byte [rax], al
cmp dword [0x2f7b0c9d0], 0
je 0x2f79a4350
mov qword [rsp + 0x150], rax
mov rbx, rax
lea rcx, [rsp + 0x1a8]
lea rax, [0x2f79e20e0]
call fcn.2f7902920
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x1a8]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rax + 0x18], xmm0
jmp 0x2f79a3e9f
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
lea rax, [0x2f79d7680]
call fcn.2f78fd060
mov rcx, qword [rsp + 0x98]
mov qword [rax + 8], rcx
cmp dword [0x2f7b0c9d0], 0
jne 0x2f79a43c0
mov rdx, qword [rsp + 0x140]
jmp 0x2f79a43d0
call fcn.2f7954740
mov rdx, qword [rsp + 0x140]
mov qword [r11], rdx
mov qword [rax], rdx
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], 1
mov qword [rsp + 0x1b8], 1
mov rsi, qword [rsp + 0x138]
mov qword [rsp + 0x1c0], rsi
mov r8, qword [rsp + 0x90]
mov qword [rsp + 0x1c8], r8
lea rax, [0x2f79db1e0]
mov rbx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x48]
call fcn.2f7901c60
test byte [rax], al
cmp dword [0x2f7b0c9d0], 0
je 0x2f79a4466
mov qword [rsp + 0x148], rax
mov rbx, rax
lea rcx, [rsp + 0x1a8]
lea rax, [0x2f79e20e0]
call fcn.2f7902920
mov rax, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x1a8]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rax + 0x18], xmm0
jmp 0x2f79a3e9f
inc rcx
cmp rbx, rcx
jle 0x2f79a3fd1
movzx edx, byte [rax + rcx]
lea esi, [rdx - 0x41]
cmp sil, 0x19
ja 0x2f79a448e
add edx, 0x20
mov byte [rax + rcx], dl
jmp 0x2f79a448e
mov rcx, rax
mov rax, rdx
call fcn.2f7954ac0
mov rcx, rax
mov rax, rdx
call fcn.2f7954ac0
call fcn.2f7954b00
nop
call fcn.2f7925280
add rsp, 0x1d8
pop rbp
ret
call fcn.2f7952820
nop
jmp fcn.2f79a3900