Function at 0x2fc4c3be0
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0xc4], 0x60
mov eax, dword [rsp + 0xc4]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x40], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0x2c], 0xf0befff3
mov eax, dword [rsp + 0x2c]
mov ecx, eax
sub ecx, 0x824dea57
mov dword [rsp + 0x28], eax
je 0x2fc4c3e2f
jmp 0x2fc4c3c5b
mov eax, dword [rsp + 0x28]
sub eax, 0xa378b2eb
je 0x2fc4c3fa1
jmp 0x2fc4c3c6f
mov eax, dword [rsp + 0x28]
sub eax, 0xc6d6d7e2
je 0x2fc4c3ed0
jmp 0x2fc4c3c83
mov eax, dword [rsp + 0x28]
sub eax, 0xc9d3f1cc
je 0x2fc4c3f2a
jmp 0x2fc4c3c97
mov eax, dword [rsp + 0x28]
sub eax, 0xcc7c0c8d
je 0x2fc4c3f87
jmp 0x2fc4c3cab
mov eax, dword [rsp + 0x28]
sub eax, 0xcd2052cd
je 0x2fc4c3ef3
jmp 0x2fc4c3cbf
mov eax, dword [rsp + 0x28]
sub eax, 0xd16ef388
je 0x2fc4c3f64
jmp 0x2fc4c3cd3
mov eax, dword [rsp + 0x28]
sub eax, 0xd43d2447
je 0x2fc4c3eb6
jmp 0x2fc4c3ce7
mov eax, dword [rsp + 0x28]
sub eax, 0xf0befff3
je 0x2fc4c3db4
jmp 0x2fc4c3cfb
mov eax, dword [rsp + 0x28]
sub eax, 0xa641fea
je 0x2fc4c3f10
jmp 0x2fc4c3d0f
mov eax, dword [rsp + 0x28]
sub eax, 0xc928e36
je 0x2fc4c3dce
jmp 0x2fc4c3d23
mov eax, dword [rsp + 0x28]
sub eax, 0xea4df0a
je 0x2fc4c3e80
jmp 0x2fc4c3d37
mov eax, dword [rsp + 0x28]
sub eax, 0x4940e919
je 0x2fc4c3e54
jmp 0x2fc4c3d4b
mov eax, dword [rsp + 0x28]
sub eax, 0x54aaeb2a
je 0x2fc4c3e09
jmp 0x2fc4c3d5f
mov eax, dword [rsp + 0x28]
sub eax, 0x6e64e3c0
je 0x2fc4c3df2
jmp 0x2fc4c3d73
mov eax, dword [rsp + 0x28]
sub eax, 0x6ee75f5e
je 0x2fc4c3f4a
jmp 0x2fc4c3d87
mov eax, dword [rsp + 0x28]
sub eax, 0x79149156
je 0x2fc4c3ddb
jmp 0x2fc4c3d9b
mov eax, dword [rsp + 0x28]
sub eax, 0x7e228317
je 0x2fc4c3f7a
jmp 0x2fc4c3daf
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x2c], 0xc928e36
jmp 0x2fc4c3fb1
mov dword [rsp + 0x2c], 0x79149156
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x2c], 0x6e64e3c0
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x2c], 0x54aaeb2a
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
mov edx, 0x824dea57
mov r8d, 0xd16ef388
cmovne r8d, edx
mov dword [rsp + 0x2c], r8d
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x60]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x2c], 0x4940e919
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x50]
call fcn.2fc4c3280
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x2c], 0xea4df0a
jmp 0x2fc4c3fb1
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call fcn.2fc4c4350
cmp eax, 0
mov eax, 0xd43d2447
mov r9d, 0xa641fea
cmove r9d, eax
mov dword [rsp + 0x2c], r9d
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x2c], 0xc6d6d7e2
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x90]
add rax, 0x30
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x2c], 0xcd2052cd
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x98]
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x2c], 0xcc7c0c8d
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x2c], 0xc9d3f1cc
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x2c], 0x6ee75f5e
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x2c], 0x79149156
jmp 0x2fc4c3fb1
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x2c], 0x7e228317
jmp 0x2fc4c3fb1
mov dword [rsp + 0x2c], 0xcc7c0c8d
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x2c], 0xa378b2eb
jmp 0x2fc4c3fb1
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3c40