Function at 0x2fc4ce080
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x84], 0x60
mov eax, dword [rsp + 0x84]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0x78], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx]
mov qword [rsp + 0x50], rcx
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x58]
je 0x2fc4ce869
xor eax, eax
mov ecx, dword [0x2fc4f4174]
mov edx, dword [0x2fc4f4180]
mov r8d, eax
sub r8d, 1
add r8d, 0
mov r9d, eax
sub r9d, ecx
mov r10d, eax
sub r10d, r8d
add r9d, r10d
sub eax, r9d
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete r11b
cmp edx, 0xa
setl bl
mov sil, r11b
xor sil, 0xff
and sil, 0
mov dil, 1
mov bpl, dil
xor bpl, 0
mov r14b, r11b
and r14b, bpl
mov r15b, dil
xor r15b, 1
and r15b, 0
and bpl, 1
or sil, r14b
or r15b, bpl
xor sil, r15b
mov bpl, bl
xor bpl, 0xff
and bpl, 1
mov r14b, dil
xor r14b, 1
mov r15b, bl
and r15b, r14b
mov r12b, dil
xor r12b, 1
and r12b, 0xff
and r14b, 1
or bpl, r15b
or r12b, r14b
xor bpl, r12b
mov r14b, dil
xor r14b, 0
and r14b, 0
mov r15b, dil
xor r15b, 0
mov r12b, r15b
and r12b, 0
mov r13b, dil
xor r13b, 1
and r13b, 0
and r15b, 1
or r14b, r12b
or r13b, r15b
xor r14b, r13b
mov r15b, dil
xor r15b, 0
mov r12b, sil
xor r12b, r15b
and r12b, sil
xor r11b, 0xff
mov r15b, r14b
xor r15b, 0xff
mov r13b, dil
xor r13b, 0
or r11b, r15b
or r13b, 0
xor r11b, 0xff
and r11b, r13b
mov r15b, dil
xor r15b, 0
mov r13b, bpl
xor r13b, r15b
and r13b, bpl
mov r15b, r14b
xor r15b, 0xff
mov al, bl
xor al, r15b
and al, bl
mov bl, r12b
and bl, r11b
xor r12b, r11b
or bl, r12b
mov r11b, r13b
xor r11b, 0xff
mov r15b, al
xor r15b, 0xff
mov r12b, dil
xor r12b, 0
mov cl, r11b
and cl, 0
and r13b, r12b
mov dl, r15b
and dl, 0
and al, r12b
or cl, r13b
or dl, al
xor cl, dl
or r11b, r15b
xor r11b, 0xff
or r12b, 0
and r11b, r12b
or cl, r11b
mov al, bl
xor al, 0xff
and al, 1
mov dl, dil
xor dl, 1
and bl, dl
mov r11b, cl
xor r11b, 0xff
and r11b, 0xff
and cl, dl
or al, bl
or r11b, cl
xor al, r11b
mov cl, sil
xor cl, 0xff
mov dl, bpl
xor dl, 0xff
mov r11b, dil
xor r11b, 1
mov bl, cl
and bl, 0xff
and sil, r11b
mov r15b, dl
and r15b, 0xff
and bpl, r11b
or bl, sil
or r15b, bpl
xor bl, r15b
or cl, dl
xor cl, 0xff
or r11b, 1
and cl, r11b
or bl, cl
mov cl, bl
xor cl, 0xff
and cl, 1
mov dl, dil
xor dl, 1
and bl, dl
mov r11b, dil
xor r11b, 1
and r11b, 0xff
and dl, 1
or cl, bl
or r11b, dl
xor cl, r11b
mov dl, dil
xor dl, 0
mov r11b, r14b
xor r11b, 0xff
xor dil, 1
mov bl, dl
and bl, 0xff
mov sil, dil
and sil, 0
mov bpl, r11b
and bpl, 0xff
and r14b, dil
or bl, sil
or bpl, r14b
xor bl, bpl
or dl, r11b
xor dl, 0xff
or dil, 1
and dl, dil
or bl, dl
xor bl, 0xff
mov dl, cl
xor dl, bl
and dl, cl
mov cl, al
and cl, dl
xor al, dl
or cl, al
test cl, 1
jne 0x2fc4ce33f
jmp 0x2fc4ce8d1
xor eax, eax
mov ecx, dword [0x2fc4f4174]
mov edx, dword [0x2fc4f4180]
mov r8d, eax
sub r8d, 1
add r8d, 0
mov r9d, eax
sub r9d, ecx
mov r10d, eax
sub r10d, r8d
add r9d, r10d
sub eax, r9d
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete r11b
cmp edx, 0xa
setl bl
mov sil, r11b
xor sil, 0xff
and sil, 0
mov dil, 1
mov bpl, dil
xor bpl, 0
mov r14b, r11b
and r14b, bpl
mov r15b, dil
xor r15b, 1
and r15b, 0
and bpl, 1
or sil, r14b
or r15b, bpl
xor sil, r15b
mov bpl, bl
xor bpl, 0xff
and bpl, 0
mov r14b, dil
xor r14b, 0
mov r15b, bl
and r15b, r14b
mov r12b, dil
xor r12b, 1
and r12b, 0
and r14b, 1
or bpl, r15b
or r12b, r14b
xor bpl, r12b
mov r14b, dil
xor r14b, 0
and r14b, 1
mov r15b, dil
xor r15b, 1
and r15b, 0
or r14b, r15b
mov r15b, dil
xor r15b, 0
mov r12b, sil
xor r12b, r15b
and r12b, sil
mov r15b, r14b
xor r15b, 0xff
mov r13b, r11b
xor r13b, r15b
and r13b, r11b
mov r11b, dil
xor r11b, 0
mov r15b, bpl
xor r15b, r11b
and r15b, bpl
xor bl, 0xff
mov r11b, r14b
xor r11b, 0xff
mov al, dil
xor al, 0
or bl, r11b
or al, 0
xor bl, 0xff
and bl, al
mov al, r12b
xor al, 0xff
mov r11b, r13b
xor r11b, 0xff
mov cl, dil
xor cl, 1
mov dl, al
and dl, 0xff
and r12b, cl
mov r8b, r11b
and r8b, 0xff
and r13b, cl
or dl, r12b
or r8b, r13b
xor dl, r8b
or al, r11b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov al, r15b
and al, bl
xor r15b, bl
or al, r15b
mov cl, dl
xor cl, 0xff
and cl, 1
mov r8b, dil
xor r8b, 1
and dl, r8b
mov r11b, al
xor r11b, 0xff
and r11b, 0xff
and al, r8b
or cl, dl
or r11b, al
xor cl, r11b
mov al, sil
and al, bpl
xor sil, bpl
or al, sil
mov dl, al
xor dl, 0xff
and dl, 1
mov r8b, dil
xor r8b, 1
and al, r8b
or dl, al
mov al, dil
xor al, 0
mov r8b, r14b
xor r8b, 0xff
mov r11b, dil
xor r11b, 1
mov bl, al
and bl, 0xff
mov sil, r11b
and sil, 0
mov bpl, r8b
and bpl, 0xff
and r14b, r11b
or bl, sil
or bpl, r14b
xor bl, bpl
or al, r8b
xor al, 0xff
or r11b, 1
and al, r11b
or bl, al
xor dl, 0xff
xor bl, 0xff
xor dil, 0
or dl, bl
or dil, 0
xor dl, 0xff
and dl, dil
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x2fc4ce539
jmp 0x2fc4ce8d1
xor eax, eax
mov ecx, dword [0x2fc4f4174]
mov edx, dword [0x2fc4f4180]
mov r8d, 0x4774fa5a
add r8d, 0
sub r8d, 1
sub r8d, 0x4774fa5a
sub eax, r8d
mov r8d, ecx
sub r8d, eax
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
mov bl, r10b
xor bl, 0xff
mov sil, 1
mov dil, sil
xor dil, 1
or r11b, bl
or dil, 1
xor r11b, 0xff
and r11b, dil
mov bl, r9b
xor bl, 0xff
mov dil, r10b
and dil, bl
xor r10b, 0xff
and r9b, r10b
or dil, r9b
mov r9b, r11b
xor r9b, 0xff
mov r10b, dil
xor r10b, 0xff
xor sil, 0
mov bl, r9b
and bl, 0
and r11b, sil
mov bpl, r10b
and bpl, 0
and dil, sil
or bl, r11b
or bpl, dil
xor bl, bpl
or r9b, r10b
xor r9b, 0xff
or sil, 0
and r9b, sil
or bl, r9b
test bl, 1
jne 0x2fc4ce602
jmp 0x2fc4ce88b
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rcx
mov rcx, rax
mov qword [rsp + 0x38], rdx
call sym.StrLen
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov r8, rax
call sym.W2Anicmp
xor r9d, r9d
cmp eax, 0
sete r10b
mov eax, dword [0x2fc4f4174]
mov r11d, dword [0x2fc4f4180]
mov esi, r9d
sub esi, 0xd1e4bc43
mov edi, eax
add edi, esi
sub r9d, 1
add edi, r9d
sub edi, 0x62f81f82
add edi, 0xd1e4bc43
add edi, 0x62f81f82
imul eax, edi
and eax, 1
cmp eax, 0
sete bl
cmp r11d, 0xa
setl bpl
mov r14b, bpl
xor r14b, 0xff
mov r15b, bl
xor r15b, r14b
and r15b, bl
mov r14b, bl
xor r14b, 0xff
and r14b, 1
mov r12b, 1
mov r13b, r12b
xor r13b, 1
and bl, r13b
mov al, bpl
xor al, 0xff
and al, 0xff
and bpl, r13b
or r14b, bl
or al, bpl
xor r14b, al
mov al, r15b
xor al, 0xff
mov bl, r14b
xor bl, 0xff
xor r12b, 0
mov bpl, al
and bpl, 0
and r15b, r12b
mov r13b, bl
and r13b, 0
and r14b, r12b
or bpl, r15b
or r13b, r14b
xor bpl, r13b
or al, bl
xor al, 0xff
or r12b, 0
and al, r12b
or bpl, al
test bpl, 1
mov byte [rsp + 0x37], r10b
jne 0x2fc4ce71d
jmp 0x2fc4ce88b
mov al, byte [rsp + 0x37]
test al, 1
jne 0x2fc4ce72e
jmp 0x2fc4ce741
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x70], rax
jmp 0x2fc4ce872
mov eax, dword [0x2fc4f4174]
mov ecx, dword [0x2fc4f4180]
mov edx, eax
add edx, 0xeeb3f27d
add edx, 0xf8dad05e
sub edx, 0xeeb3f27d
sub edx, 0x2aa94684
sub edx, 1
add edx, 0x2aa94684
sub edx, 0xbeda8cba
sub edx, 0xf8dad05e
add edx, 0xbeda8cba
imul eax, edx
and eax, 1
cmp eax, 0
sete r8b
cmp ecx, 0xa
setl r9b
mov r10b, r9b
xor r10b, 0xff
mov r11b, r8b
xor r11b, r10b
and r11b, r8b
mov r10b, r8b
xor r10b, 0xff
mov bl, r9b
and bl, r10b
xor r9b, 0xff
and r8b, r9b
or bl, r8b
mov r8b, r11b
and r8b, bl
xor r11b, bl
or r8b, r11b
test r8b, 1
jne 0x2fc4ce7d8
jmp 0x2fc4ce8d6
xor eax, eax
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx]
mov qword [rsp + 0x50], rcx
mov edx, dword [0x2fc4f4174]
mov r8d, dword [0x2fc4f4180]
sub eax, 1
add eax, 0
mov r9d, edx
add r9d, 0xd2d5b086
add r9d, eax
sub r9d, 0xd2d5b086
imul edx, r9d
and edx, 1
cmp edx, 0
sete r10b
cmp r8d, 0xa
setl r11b
mov bl, r11b
xor bl, 0xff
mov sil, r10b
xor sil, bl
and sil, r10b
mov bl, r10b
xor bl, 0xff
mov dil, r11b
and dil, bl
xor r11b, 0xff
and r10b, r11b
or dil, r10b
mov r10b, sil
and r10b, dil
xor sil, dil
or r10b, sil
test r10b, 1
jne 0x2fc4ce864
jmp 0x2fc4ce8d6
jmp 0x2fc4ce0e1
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov rcx, rax
mov qword [rsp + 0x20], rdx
call sym.StrLen
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov r8, rax
call sym.W2Anicmp
jmp 0x2fc4ce602
jmp 0x2fc4ce33f
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
jmp 0x2fc4ce7d8