Function at 0x2fc4ce6f0
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x84], 0x60
mov eax, dword [rsp + 0x84]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0x78], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx]
mov qword [rsp + 0x50], rcx
xor eax, eax
mov ecx, dword [0x2fc4f6174]
mov edx, dword [0x2fc4f6180]
mov r8d, 0xf8242167
add r8d, 0
sub r8d, 1
sub r8d, 0xf8242167
mov r9d, eax
sub r9d, ecx
mov r10d, eax
sub r10d, r8d
add r9d, r10d
sub eax, r9d
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete r11b
cmp edx, 0xa
setl bl
mov sil, r11b
xor sil, 0xff
and sil, 1
mov dil, 1
mov bpl, dil
xor bpl, 1
mov r14b, r11b
and r14b, bpl
mov r15b, dil
xor r15b, 1
and r15b, 0xff
and bpl, 1
or sil, r14b
or r15b, bpl
xor sil, r15b
mov bpl, bl
xor bpl, 0xff
and bpl, 1
mov r14b, dil
xor r14b, 1
mov r15b, bl
and r15b, r14b
mov r12b, dil
xor r12b, 1
and r12b, 0xff
and r14b, 1
or bpl, r15b
or r12b, r14b
xor bpl, r12b
mov r14b, dil
xor r14b, 0
and r14b, 1
mov r15b, dil
xor r15b, 1
and r15b, 0
or r14b, r15b
mov r15b, dil
xor r15b, 0
mov r12b, sil
xor r12b, r15b
and r12b, sil
xor r11b, 0xff
mov r15b, r14b
xor r15b, 0xff
mov r13b, dil
xor r13b, 1
or r11b, r15b
or r13b, 1
xor r11b, 0xff
and r11b, r13b
mov r15b, dil
xor r15b, 0
mov r13b, bpl
xor r13b, r15b
and r13b, bpl
xor bl, 0xff
mov r15b, r14b
xor r15b, 0xff
mov al, dil
xor al, 1
or bl, r15b
or al, 1
xor bl, 0xff
and bl, al
mov al, r12b
xor al, 0xff
mov r15b, r11b
xor r15b, 0xff
mov cl, dil
xor cl, 1
mov dl, al
and dl, 0xff
and r12b, cl
mov r8b, r15b
and r8b, 0xff
and r11b, cl
or dl, r12b
or r8b, r11b
xor dl, r8b
or al, r15b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov al, r13b
and al, bl
xor r13b, bl
or al, r13b
mov cl, dl
xor cl, 0xff
and cl, 1
mov r8b, dil
xor r8b, 1
and dl, r8b
mov r11b, al
xor r11b, 0xff
and r11b, 0xff
and al, r8b
or cl, dl
or r11b, al
xor cl, r11b
mov al, sil
xor al, 0xff
mov dl, bpl
xor dl, 0xff
mov r8b, dil
xor r8b, 0
mov r11b, al
and r11b, 0
and sil, r8b
mov bl, dl
and bl, 0
and bpl, r8b
or r11b, sil
or bl, bpl
xor r11b, bl
or al, dl
xor al, 0xff
or r8b, 0
and al, r8b
or r11b, al
mov al, r11b
xor al, 0xff
and al, 1
mov dl, dil
xor dl, 1
and r11b, dl
or al, r11b
mov dl, r14b
and dl, 0
xor r14b, 0
or dl, r14b
xor al, 0xff
xor dl, 0xff
mov r8b, dil
xor r8b, 1
or al, dl
or r8b, 1
xor al, 0xff
and al, r8b
mov dl, cl
xor dl, 0xff
mov r8b, al
xor r8b, 0xff
xor dil, 1
mov r11b, dl
and r11b, 0xff
and cl, dil
mov bl, r8b
and bl, 0xff
and al, dil
or r11b, cl
or bl, al
xor r11b, bl
or dl, r8b
xor dl, 0xff
or dil, 1
and dl, dil
or r11b, dl
test r11b, 1
jne 0x2fc4ce996
jmp 0x2fc4cf263
xor eax, eax
mov rcx, qword [rsp + 0x50]
cmp rcx, qword [rsp + 0x58]
setne dl
mov r8d, dword [0x2fc4f6174]
mov r9d, dword [0x2fc4f6180]
mov r10d, r8d
sub r10d, 0x91ae59d6
sub r10d, 0x345017b7
add r10d, 0x91ae59d6
sub eax, 1
add r10d, eax
sub r10d, 0xa5ee5efc
add r10d, 0x345017b7
add r10d, 0xa5ee5efc
imul r8d, r10d
and r8d, 1
cmp r8d, 0
sete r11b
cmp r9d, 0xa
setl bl
mov sil, bl
xor sil, 0xff
mov dil, r11b
xor dil, sil
and dil, r11b
mov sil, r11b
xor sil, 0xff
and sil, 1
mov bpl, 1
xor bpl, 1
and r11b, bpl
mov r14b, bl
xor r14b, 0xff
and r14b, 0xff
and bl, bpl
or sil, r11b
or r14b, bl
xor sil, r14b
mov r11b, dil
and r11b, sil
xor dil, sil
or r11b, dil
test r11b, 1
mov byte [rsp + 0x47], dl
jne 0x2fc4cea58
jmp 0x2fc4cf263
mov al, byte [rsp + 0x47]
test al, 1
jne 0x2fc4cea69
jmp 0x2fc4cede1
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], rcx
mov rcx, rax
mov qword [rsp + 0x30], rdx
call sym.StrLen
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov r8, rax
call sym.W2Anicmp
cmp eax, 0
jne 0x2fc4ceac6
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x70], rax
jmp 0x2fc4cef41
xor eax, eax
mov ecx, dword [0x2fc4f6174]
mov edx, dword [0x2fc4f6180]
mov r8d, ecx
sub r8d, 0x96e8ce32
add r8d, 0xdc20c0f4
add r8d, 0x96e8ce32
sub eax, 1
add r8d, eax
sub r8d, 0xd7c6a035
sub r8d, 0xdc20c0f4
add r8d, 0xd7c6a035
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
and r11b, 1
mov bl, 1
mov sil, bl
xor sil, 1
mov dil, r9b
and dil, sil
mov bpl, bl
xor bpl, 1
and bpl, 0xff
and sil, 1
or r11b, dil
or bpl, sil
xor r11b, bpl
mov sil, r10b
xor sil, 0xff
and sil, 1
mov dil, bl
xor dil, 1
mov bpl, r10b
and bpl, dil
mov r14b, bl
xor r14b, 1
and r14b, 0xff
and dil, 1
or sil, bpl
or r14b, dil
xor sil, r14b
mov dil, bl
xor dil, 0
and dil, 1
mov bpl, bl
xor bpl, 1
and bpl, 0
or dil, bpl
mov bpl, r11b
xor bpl, 0xff
mov r14b, bl
xor r14b, 0
mov r15b, bl
xor r15b, 1
or bpl, r14b
or r15b, 1
xor bpl, 0xff
and bpl, r15b
mov r14b, dil
xor r14b, 0xff
mov r15b, r9b
xor r15b, r14b
and r15b, r9b
mov r9b, sil
xor r9b, 0xff
mov r14b, bl
xor r14b, 0
mov r12b, bl
xor r12b, 1
or r9b, r14b
or r12b, 1
xor r9b, 0xff
and r9b, r12b
xor r10b, 0xff
mov r14b, dil
xor r14b, 0xff
mov r12b, bl
xor r12b, 0
or r10b, r14b
or r12b, 0
xor r10b, 0xff
and r10b, r12b
mov r14b, bpl
and r14b, r15b
xor bpl, r15b
or r14b, bpl
mov bpl, r9b
xor bpl, 0xff
mov r15b, r10b
xor r15b, 0xff
mov r12b, bl
xor r12b, 1
mov r13b, bpl
and r13b, 0xff
and r9b, r12b
mov al, r15b
and al, 0xff
and r10b, r12b
or r13b, r9b
or al, r10b
xor r13b, al
or bpl, r15b
xor bpl, 0xff
or r12b, 1
and bpl, r12b
or r13b, bpl
mov al, r14b
xor al, 0xff
mov r9b, r13b
and r9b, al
xor r13b, 0xff
and r14b, r13b
or r9b, r14b
mov al, r11b
xor al, 0xff
mov r10b, sil
xor r10b, 0xff
mov bpl, bl
xor bpl, 1
mov r14b, al
and r14b, 0xff
and r11b, bpl
mov r15b, r10b
and r15b, 0xff
and sil, bpl
or r14b, r11b
or r15b, sil
xor r14b, r15b
or al, r10b
xor al, 0xff
or bpl, 1
and al, bpl
or r14b, al
mov al, r14b
xor al, 0xff
and al, 1
mov r10b, bl
xor r10b, 1
and r14b, r10b
or al, r14b
mov r10b, dil
and r10b, 0
xor dil, 0
or r10b, dil
xor r10b, 0xff
mov r11b, al
xor r11b, r10b
and r11b, al
mov al, r9b
xor al, 0xff
mov r10b, r11b
xor r10b, 0xff
xor bl, 0
mov sil, al
and sil, 0
and r9b, bl
mov dil, r10b
and dil, 0
and r11b, bl
or sil, r9b
or dil, r11b
xor sil, dil
or al, r10b
xor al, 0xff
or bl, 0
and al, bl
or sil, al
test sil, 1
jne 0x2fc4ced25
jmp 0x2fc4cf268
xor eax, eax
mov rcx, qword [rsp + 0x50]
mov rcx, qword [rcx]
mov qword [rsp + 0x50], rcx
mov edx, dword [0x2fc4f6174]
mov r8d, dword [0x2fc4f6180]
mov r9d, eax
sub r9d, 0x5bdaf435
mov r10d, edx
add r10d, r9d
mov r9d, eax
sub r9d, 1
add r10d, r9d
mov r9d, eax
sub r9d, r10d
mov r10d, eax
sub r10d, 0x5bdaf435
add r9d, r10d
sub eax, r9d
imul edx, eax
and edx, 1
cmp edx, 0
sete r11b
cmp r8d, 0xa
setl bl
mov sil, bl
xor sil, 0xff
mov dil, r11b
xor dil, sil
and dil, r11b
mov sil, r11b
xor sil, 0xff
and sil, 1
mov bpl, 1
xor bpl, 1
and r11b, bpl
mov r14b, bl
xor r14b, 0xff
and r14b, 0xff
and bl, bpl
or sil, r11b
or r14b, bl
xor sil, r14b
mov r11b, dil
and r11b, sil
xor dil, sil
or r11b, dil
test r11b, 1
jne 0x2fc4ceddc
jmp 0x2fc4cf268
jmp 0x2fc4ce751
xor eax, eax
mov ecx, dword [0x2fc4f6174]
mov edx, dword [0x2fc4f6180]
sub eax, 0xaa49f03e
sub eax, 1
add eax, 0xaa49f03e
mov r8d, ecx
add r8d, 0xbec34f9c
add r8d, eax
sub r8d, 0xbec34f9c
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r10b
xor r11b, 0xff
mov bl, r9b
xor bl, r11b
and bl, r9b
mov r11b, r9b
xor r11b, 0xff
mov sil, r10b
and sil, r11b
xor r10b, 0xff
and r9b, r10b
or sil, r9b
mov r9b, bl
and r9b, sil
xor bl, sil
or r9b, bl
test r9b, 1
jne 0x2fc4cee67
jmp 0x2fc4cf27a
xor eax, eax
mov qword [rsp + 0x70], 0
mov ecx, dword [0x2fc4f6174]
mov edx, dword [0x2fc4f6180]
sub eax, 0xa3e502f3
sub eax, 1
add eax, 0xa3e502f3
mov r8d, ecx
add r8d, 0xf54c9316
add r8d, eax
sub r8d, 0xf54c9316
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
mov bl, r10b
xor bl, 0xff
mov sil, 1
mov dil, sil
xor dil, 0
or r11b, bl
or dil, 0
xor r11b, 0xff
and r11b, dil
mov bl, r9b
xor bl, 0xff
mov dil, r10b
and dil, bl
xor r10b, 0xff
and r9b, r10b
or dil, r9b
mov r9b, r11b
xor r9b, 0xff
mov r10b, dil
xor r10b, 0xff
xor sil, 1
mov bl, r9b
and bl, 0xff
and r11b, sil
mov bpl, r10b
and bpl, 0xff
and dil, sil
or bl, r11b
or bpl, dil
xor bl, bpl
or r9b, r10b
xor r9b, 0xff
or sil, 1
and r9b, sil
or bl, r9b
test bl, 1
jne 0x2fc4cef3c
jmp 0x2fc4cf27a
jmp 0x2fc4cef41
xor eax, eax
mov ecx, dword [0x2fc4f6174]
mov edx, dword [0x2fc4f6180]
mov r8d, ecx
sub r8d, 0x60162755
sub r8d, 0xd1574d65
add r8d, 0x60162755
mov r9d, eax
sub r9d, 1
add r8d, r9d
mov r9d, eax
sub r9d, r8d
mov r8d, eax
sub r8d, 0xd1574d65
add r9d, r8d
sub eax, r9d
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete r10b
cmp edx, 0xa
setl r11b
mov bl, r10b
xor bl, 0xff
mov sil, r11b
xor sil, 0xff
mov dil, 1
mov bpl, dil
xor bpl, 1
or bl, sil
or bpl, 1
xor bl, 0xff
and bl, bpl
mov sil, r10b
xor sil, 0xff
and sil, 1
xor dil, 1
and r10b, dil
mov bpl, r11b
xor bpl, 0xff
and bpl, 0xff
and r11b, dil
or sil, r10b
or bpl, r11b
xor sil, bpl
mov r10b, bl
and r10b, sil
xor bl, sil
or r10b, bl
test r10b, 1
jne 0x2fc4cf003
jmp 0x2fc4cf288
xor eax, eax
mov rcx, qword [rsp + 0x70]
mov edx, dword [0x2fc4f6174]
mov r8d, dword [0x2fc4f6180]
sub eax, 1
add eax, 0
mov r9d, edx
sub r9d, 0xf87a6ffb
add r9d, eax
add r9d, 0xf87a6ffb
imul edx, r9d
and edx, 1
cmp edx, 0
sete r10b
cmp r8d, 0xa
setl r11b
mov bl, r10b
xor bl, 0xff
and bl, 0
mov sil, 1
mov dil, sil
xor dil, 0
mov bpl, r10b
and bpl, dil
mov r14b, sil
xor r14b, 1
and r14b, 0
and dil, 1
or bl, bpl
or r14b, dil
xor bl, r14b
mov dil, r11b
xor dil, 0xff
and dil, 0
mov bpl, sil
xor bpl, 0
mov r14b, r11b
and r14b, bpl
mov r15b, sil
xor r15b, 1
and r15b, 0
and bpl, 1
or dil, r14b
or r15b, bpl
xor dil, r15b
mov bpl, sil
xor bpl, 1
and bpl, 1
mov r14b, sil
xor r14b, 1
mov r15b, r14b
and r15b, 1
mov r12b, sil
xor r12b, 1
and r12b, 0xff
and r14b, 1
or bpl, r15b
or r12b, r14b
xor bpl, r12b
mov r14b, sil
xor r14b, 1
mov r15b, bl
xor r15b, r14b
and r15b, bl
mov r14b, bpl
xor r14b, 0xff
mov r12b, r10b
xor r12b, r14b
and r12b, r10b
mov r10b, sil
xor r10b, 1
mov r14b, dil
xor r14b, r10b
and r14b, dil
mov r10b, bpl
xor r10b, 0xff
mov r13b, r11b
xor r13b, r10b
and r13b, r11b
mov r10b, r15b
and r10b, r12b
xor r15b, r12b
or r10b, r15b
mov r11b, r14b
and r11b, r13b
xor r14b, r13b
or r11b, r14b
mov r14b, r10b
xor r14b, 0xff
and r14b, 1
mov r15b, sil
xor r15b, 1
and r10b, r15b
mov r12b, r11b
xor r12b, 0xff
and r12b, 0xff
and r11b, r15b
or r14b, r10b
or r12b, r11b
xor r14b, r12b
mov r10b, bl
and r10b, dil
xor bl, dil
or r10b, bl
mov r11b, r10b
xor r11b, 0xff
and r11b, 1
mov bl, sil
xor bl, 1
and r10b, bl
mov dil, sil
xor dil, 1
and dil, 0xff
and bl, 1
or r11b, r10b
or dil, bl
xor r11b, dil
mov r10b, sil
xor r10b, 1
mov bl, bpl
xor bl, 0xff
mov dil, sil
xor dil, 0
mov r15b, r10b
and r15b, 0
mov r12b, dil
and r12b, 1
mov r13b, bl
and r13b, 0
and bpl, dil
or r15b, r12b
or r13b, bpl
xor r15b, r13b
or r10b, bl
xor r10b, 0xff
or dil, 0
and r10b, dil
or r15b, r10b
xor r11b, 0xff
xor r15b, 0xff
mov r10b, sil
xor r10b, 1
or r11b, r15b
or r10b, 1
xor r11b, 0xff
and r11b, r10b
mov r10b, r14b
xor r10b, 0xff
mov bl, r11b
xor bl, 0xff
xor sil, 0
mov dil, r10b
and dil, 0
and r14b, sil
mov bpl, bl
and bpl, 0
and r11b, sil
or dil, r14b
or bpl, r11b
xor dil, bpl
or r10b, bl
xor r10b, 0xff
or sil, 0
and r10b, sil
or dil, r10b
test dil, 1
mov qword [rsp + 0x28], rcx
jne 0x2fc4cf24a
jmp 0x2fc4cf288
mov rax, qword [rsp + 0x28]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x2fc4ce996
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
jmp 0x2fc4ced25
mov qword [rsp + 0x70], 0
jmp 0x2fc4cee67
jmp 0x2fc4cf003