Function at 0x2fc4c3a80
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0xc4], 0x60
mov eax, dword [rsp + 0xc4]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0x2c], 0x48cac1c8
mov eax, dword [rsp + 0x2c]
mov ecx, eax
sub ecx, 0x83125e36
mov dword [rsp + 0x28], eax
je 0x2fc4c3cc0
jmp 0x2fc4c3af1
mov eax, dword [rsp + 0x28]
sub eax, 0xb14db3c0
je 0x2fc4c3e1b
jmp 0x2fc4c3b05
mov eax, dword [rsp + 0x28]
sub eax, 0xb9493ff6
je 0x2fc4c3e28
jmp 0x2fc4c3b19
mov eax, dword [rsp + 0x28]
sub eax, 0xbd337482
je 0x2fc4c3cdc
jmp 0x2fc4c3b2d
mov eax, dword [rsp + 0x28]
sub eax, 0xe0a8d06c
je 0x2fc4c3c6e
jmp 0x2fc4c3b41
mov eax, dword [rsp + 0x28]
sub eax, 0xffdb6c53
je 0x2fc4c3dc1
jmp 0x2fc4c3b55
mov eax, dword [rsp + 0x28]
sub eax, 0xf9ac69
je 0x2fc4c3c85
jmp 0x2fc4c3b69
mov eax, dword [rsp + 0x28]
sub eax, 0x1f53c017
je 0x2fc4c3d9a
jmp 0x2fc4c3b7d
mov eax, dword [rsp + 0x28]
sub eax, 0x21d0c729
je 0x2fc4c3e42
jmp 0x2fc4c3b91
mov eax, dword [rsp + 0x28]
sub eax, 0x2d60623a
je 0x2fc4c3db4
jmp 0x2fc4c3ba5
mov eax, dword [rsp + 0x28]
sub eax, 0x2eab474d
je 0x2fc4c3c9c
jmp 0x2fc4c3bb9
mov eax, dword [rsp + 0x28]
sub eax, 0x30a5f3b5
je 0x2fc4c3d7c
jmp 0x2fc4c3bcd
mov eax, dword [rsp + 0x28]
sub eax, 0x3d92fdf7
je 0x2fc4c3cf6
jmp 0x2fc4c3be1
mov eax, dword [rsp + 0x28]
sub eax, 0x48cac1c8
je 0x2fc4c3c4a
jmp 0x2fc4c3bf5
mov eax, dword [rsp + 0x28]
sub eax, 0x59e1f514
je 0x2fc4c3e05
jmp 0x2fc4c3c09
mov eax, dword [rsp + 0x28]
sub eax, 0x5a81ac16
je 0x2fc4c3ddb
jmp 0x2fc4c3c1d
mov eax, dword [rsp + 0x28]
sub eax, 0x5e436b7c
je 0x2fc4c3df8
jmp 0x2fc4c3c31
mov eax, dword [rsp + 0x28]
sub eax, 0x7660c150
je 0x2fc4c3d3b
jmp 0x2fc4c3c45
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x2c], 0xe0a8d06c
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x2c], 0xf9ac69
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x2c], 0x2eab474d
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
setne dl
and dl, 1
mov byte [rsp + 0x7f], dl
mov dword [rsp + 0x2c], 0x83125e36
jmp 0x2fc4c3e52
mov al, byte [rsp + 0x7f]
test al, 1
mov ecx, 0xbd337482
mov edx, 0x59e1f514
cmovne edx, ecx
mov dword [rsp + 0x2c], edx
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x2c], 0x3d92fdf7
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x60]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x2c], 0x7660c150
jmp 0x2fc4c3e52
mov rcx, qword [rsp + 0x98]
call fcn.2fc4c3160
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x90]
mov r8, rax
call fcn.2fc4c41f0
cmp eax, 0
mov eax, 0x30a5f3b5
mov r9d, 0xffdb6c53
cmove r9d, eax
mov dword [rsp + 0x2c], r9d
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x2c], 0x1f53c017
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x2c], 0x2d60623a
jmp 0x2fc4c3e52
mov dword [rsp + 0x2c], 0xb9493ff6
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x2c], 0x5a81ac16
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x2c], 0x5e436b7c
jmp 0x2fc4c3e52
mov dword [rsp + 0x2c], 0xf9ac69
jmp 0x2fc4c3e52
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x2c], 0xb14db3c0
jmp 0x2fc4c3e52
mov dword [rsp + 0x2c], 0xb9493ff6
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x2c], 0x21d0c729
jmp 0x2fc4c3e52
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3ad6