Function at 0x2fc4c3ff0
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xd8
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0xd4], 0x60
mov eax, dword [rsp + 0xd4]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x70], rcx
mov dword [rsp + 0x3c], 0x9a20c861
mov eax, dword [rsp + 0x3c]
mov ecx, eax
sub ecx, 0x9a20c861
mov dword [rsp + 0x38], eax
je 0x2fc4c41ba
jmp 0x2fc4c4061
mov eax, dword [rsp + 0x38]
sub eax, 0xbbd94b01
je 0x2fc4c429f
jmp 0x2fc4c4075
mov eax, dword [rsp + 0x38]
sub eax, 0xbdc3dc58
je 0x2fc4c43db
jmp 0x2fc4c4089
mov eax, dword [rsp + 0x38]
sub eax, 0xcf92f1e5
je 0x2fc4c4330
jmp 0x2fc4c409d
mov eax, dword [rsp + 0x38]
sub eax, 0xe4478e72
je 0x2fc4c4364
jmp 0x2fc4c40b1
mov eax, dword [rsp + 0x38]
sub eax, 0xf87501bb
je 0x2fc4c434a
jmp 0x2fc4c40c5
mov eax, dword [rsp + 0x38]
sub eax, 0xd6f5937
je 0x2fc4c41de
jmp 0x2fc4c40d9
mov eax, dword [rsp + 0x38]
sub eax, 0x11dd2755
je 0x2fc4c430f
jmp 0x2fc4c40ed
mov eax, dword [rsp + 0x38]
sub eax, 0x18d3495b
je 0x2fc4c4272
jmp 0x2fc4c4101
mov eax, dword [rsp + 0x38]
sub eax, 0x197ae493
je 0x2fc4c4384
jmp 0x2fc4c4115
mov eax, dword [rsp + 0x38]
sub eax, 0x22d51db0
je 0x2fc4c4239
jmp 0x2fc4c4129
mov eax, dword [rsp + 0x38]
sub eax, 0x2f72f10e
je 0x2fc4c41f5
jmp 0x2fc4c413d
mov eax, dword [rsp + 0x38]
sub eax, 0x4b60e3f8
je 0x2fc4c439e
jmp 0x2fc4c4151
mov eax, dword [rsp + 0x38]
sub eax, 0x529f629a
je 0x2fc4c42f5
jmp 0x2fc4c4165
mov eax, dword [rsp + 0x38]
sub eax, 0x5c3e5d0f
je 0x2fc4c43c1
jmp 0x2fc4c4179
mov eax, dword [rsp + 0x38]
sub eax, 0x613236b5
je 0x2fc4c43b4
jmp 0x2fc4c418d
mov eax, dword [rsp + 0x38]
sub eax, 0x77794337
je 0x2fc4c420f
jmp 0x2fc4c41a1
mov eax, dword [rsp + 0x38]
sub eax, 0x7d28d102
je 0x2fc4c4258
jmp 0x2fc4c41b5
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x3c], 0xd6f5937
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0x2f72f10e
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x3c], 0x77794337
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x80]
cmp rcx, rax
setne dl
and dl, 1
mov byte [rsp + 0x8f], dl
mov dword [rsp + 0x3c], 0x22d51db0
jmp 0x2fc4c43eb
mov al, byte [rsp + 0x8f]
test al, 1
mov ecx, 0x7d28d102
mov edx, 0x4b60e3f8
cmovne edx, ecx
mov dword [rsp + 0x3c], edx
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x3c], 0x18d3495b
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
add rax, 0x58
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x3c], 0xbbd94b01
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x98]
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov rcx, rax
mov qword [rsp + 0x28], rdx
call fcn.2fc4c3680
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov r8, rax
call fcn.2fc4c47c0
cmp eax, 0
mov eax, 0x529f629a
mov r9d, 0xf87501bb
cmove r9d, eax
mov dword [rsp + 0x3c], r9d
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x3c], 0x11dd2755
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x3c], 0xcf92f1e5
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x3c], 0x5c3e5d0f
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x3c], 0xe4478e72
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x3c], 0x197ae493
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0x2f72f10e
jmp 0x2fc4c43eb
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x3c], 0x613236b5
jmp 0x2fc4c43eb
mov dword [rsp + 0x3c], 0x5c3e5d0f
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x3c], 0xbdc3dc58
jmp 0x2fc4c43eb
mov rax, qword [rsp + 0xc0]
add rsp, 0xd8
ret
jmp 0x2fc4c4046