Function at 0x2fc4c3cd0
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0xc4], 0x60
mov eax, dword [rsp + 0xc4]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0x3c], 0x657b50ef
mov eax, dword [rsp + 0x3c]
mov ecx, eax
sub ecx, 0x8039d733
mov dword [rsp + 0x38], eax
je 0x2fc4c3fc5
jmp 0x2fc4c3d41
mov eax, dword [rsp + 0x38]
sub eax, 0xce65f714
je 0x2fc4c3ec1
jmp 0x2fc4c3d55
mov eax, dword [rsp + 0x38]
sub eax, 0xd833c2b2
je 0x2fc4c4081
jmp 0x2fc4c3d69
mov eax, dword [rsp + 0x38]
sub eax, 0xdb166271
je 0x2fc4c3f42
jmp 0x2fc4c3d7d
mov eax, dword [rsp + 0x38]
sub eax, 0xe38284b0
je 0x2fc4c409b
jmp 0x2fc4c3d91
mov eax, dword [rsp + 0x38]
sub eax, 0xe808943e
je 0x2fc4c400a
jmp 0x2fc4c3da5
mov eax, dword [rsp + 0x38]
sub eax, 0xf6a4cb50
je 0x2fc4c4041
jmp 0x2fc4c3db9
mov eax, dword [rsp + 0x38]
sub eax, 0xf754f8bc
je 0x2fc4c3f6f
jmp 0x2fc4c3dcd
mov eax, dword [rsp + 0x38]
sub eax, 0xfa4e6828
je 0x2fc4c3ee2
jmp 0x2fc4c3de1
mov eax, dword [rsp + 0x38]
sub eax, 0xfeac2114
je 0x2fc4c3fdf
jmp 0x2fc4c3df5
mov eax, dword [rsp + 0x38]
sub eax, 0x4a6056f
je 0x2fc4c4024
jmp 0x2fc4c3e09
mov eax, dword [rsp + 0x38]
sub eax, 0xa153a3d
je 0x2fc4c3eb4
jmp 0x2fc4c3e1d
mov eax, dword [rsp + 0x38]
sub eax, 0x35a17260
je 0x2fc4c3f28
jmp 0x2fc4c3e31
mov eax, dword [rsp + 0x38]
sub eax, 0x3931f309
je 0x2fc4c3ffd
jmp 0x2fc4c3e45
mov eax, dword [rsp + 0x38]
sub eax, 0x40e0998e
je 0x2fc4c405e
jmp 0x2fc4c3e59
mov eax, dword [rsp + 0x38]
sub eax, 0x435ed79e
je 0x2fc4c3f09
jmp 0x2fc4c3e6d
mov eax, dword [rsp + 0x38]
sub eax, 0x657b50ef
je 0x2fc4c3e9a
jmp 0x2fc4c3e81
mov eax, dword [rsp + 0x38]
sub eax, 0x727bf2d9
je 0x2fc4c4074
jmp 0x2fc4c3e95
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0xa153a3d
jmp 0x2fc4c40ab
mov dword [rsp + 0x3c], 0xce65f714
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x3c], 0xfa4e6828
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
cmp rax, rcx
setne dl
and dl, 1
mov byte [rsp + 0x87], dl
mov dword [rsp + 0x3c], 0x435ed79e
jmp 0x2fc4c40ab
mov al, byte [rsp + 0x87]
test al, 1
mov ecx, 0x35a17260
mov edx, 0x40e0998e
cmovne edx, ecx
mov dword [rsp + 0x3c], edx
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x3c], 0xdb166271
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
add rax, 0x58
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x3c], 0xf754f8bc
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov rcx, rax
mov qword [rsp + 0x28], rdx
call fcn.2fc4c3440
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov r8, rax
call fcn.2fc4c4430
cmp eax, 0
mov eax, 0x8039d733
mov r9d, 0xe808943e
cmove r9d, eax
mov dword [rsp + 0x3c], r9d
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x3c], 0xfeac2114
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x98]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x3c], 0x3931f309
jmp 0x2fc4c40ab
mov dword [rsp + 0x3c], 0xd833c2b2
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x3c], 0x4a6056f
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x3c], 0xf6a4cb50
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0xce65f714
jmp 0x2fc4c40ab
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x3c], 0x727bf2d9
jmp 0x2fc4c40ab
mov dword [rsp + 0x3c], 0xd833c2b2
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x3c], 0xe38284b0
jmp 0x2fc4c40ab
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3d26