Function at 0x2975a5180
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x178]
cmp r12, qword [r14 + 0x10]
jbe 0x2975a582b
push rbp
mov rbp, rsp
sub rsp, 0x1f0
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
movups xmmword [rsp + 0x1d0], xmm15
movups xmmword [rsp + 0x1e0], xmm15
movups xmmword [rsp + 0x10e], xmm15
movups xmmword [rsp + 0x11e], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0x10e], rdx
movabs rsi, 0x65747379535c7377
mov qword [rsp + 0x116], rsi
movabs rdi, 0x6e72656b5c32336d
mov qword [rsp + 0x11e], rdi
movabs rdi, 0x6c6c642e32336c65
mov qword [rsp + 0x126], rdi
xor eax, eax
lea rbx, [rsp + 0x10e]
mov ecx, 0x20
call fcn.29753c0c0
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1b0], rax
movups xmmword [rsp + 0x12e], xmm15
movups xmmword [rsp + 0x130], xmm15
movups xmmword [rsp + 0x140], xmm15
mov word [rsp + 0x12e], 0x3a43
movabs rdx, 0x73776f646e69575c
mov qword [rsp + 0x130], rdx
movabs rdx, 0x336d65747379535c
mov qword [rsp + 0x138], rdx
movabs rdx, 0x6c656e72656b5c32
mov qword [rsp + 0x140], rdx
movabs rdx, 0x6c6c642e65736162
mov qword [rsp + 0x148], rdx
xor eax, eax
lea rbx, [rsp + 0x12e]
mov ecx, 0x22
nop dword [rax + rax]
call fcn.29753c0c0
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1c0], rax
movups xmmword [rsp + 0xee], xmm15
movups xmmword [rsp + 0xfe], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0xee], rdx
movabs rdx, 0x65747379535c7377
mov qword [rsp + 0xf6], rdx
movabs rdx, 0x617664615c32336d
mov qword [rsp + 0xfe], rdx
movabs rdx, 0x6c6c642e32336970
mov qword [rsp + 0x106], rdx
xor eax, eax
lea rbx, [rsp + 0xee]
mov ecx, 0x20
nop
call fcn.29753c0c0
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1d0], rax
movups xmmword [rsp + 0xb1], xmm15
movups xmmword [rsp + 0xbe], xmm15
mov byte [rsp + 0xb1], 0x43
mov dword [rsp + 0xb2], 0x69575c3a
movabs rdx, 0x79535c73776f646e
mov qword [rsp + 0xb6], rdx
movabs rdx, 0x6e5c32336d657473
mov qword [rsp + 0xbe], rdx
movabs rdx, 0x6c6c642e6c6c6474
mov qword [rsp + 0xc6], rdx
xor eax, eax
lea rbx, [rsp + 0xb1]
mov ecx, 0x1d
nop
call fcn.29753c0c0
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1e0], rax
xor eax, eax
jmp 0x2975a54ad
movzx ecx, word [0x2977455c0]
mov word [rsp + 0x46], cx
mov rdx, qword [rsp + 0x60]
inc rdx
mov qword [rsp + 0xa8], rdx
lea rbx, [rsp + 0x78]
mov qword [rsp + 0x188], rbx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x180], rbx
lea rbx, [rsp + 0x88]
mov qword [rsp + 0x178], rbx
lea rax, [0x2975cdf40]
call fcn.2974fcb40
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x188]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x180]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x20
mov rcx, qword [rsp + 0x178]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x46]
mov word [rsp], cx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.297598ca0
xorps xmm15, xmm15
mov r14, qword [0x2977457f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0xa8]
cmp rax, 4
jge 0x2975a5775
mov qword [rsp + 0x60], rax
shl rax, 4
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + rax + 0x1b0]
mov rbx, qword [rsp + rax + 0x1b8]
mov rax, rdx
nop dword [rax + rax]
call fcn.297581100
test rdi, rdi
jne 0x2975a5766
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x150], rax
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + rcx + 0x1b0]
mov rbx, qword [rsp + rcx + 0x1b8]
call fcn.297591e00
nop dword [rax + rax]
test rbx, rbx
jne 0x2975a5757
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x4b], 0
mov byte [rsp + 0x4f], 0
mov byte [rsp + 0x4b], 0x2e
mov dword [rsp + 0x4c], 0x74786574
lea rax, [rsp + 0xce]
lea rbx, [rsp + 0x4b]
mov ecx, 5
nop dword [rax]
call fcn.29753c0c0
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x70], rbx
mov rdx, qword [rsp + 0x160]
mov rsi, qword [rdx + 0x28]
mov qword [rsp + 0x1a8], rsi
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0xa0], rdx
xor ecx, ecx
jmp 0x2975a5785
mov rax, qword [rsp + 0x158]
jmp 0x2975a55a5
xor eax, eax
mov ecx, dword [rax + 0x18]
mov rdx, qword [rsp + 0x50]
cmp rdx, rcx
jb 0x2975a5825
mov esi, dword [rax + 0x1c]
nop dword [rax]
cmp rcx, rsi
jb 0x2975a581a
mov qword [rsp + 0x158], rax
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x98], rcx
mov rcx, rsi
sub rsi, rdx
sar rsi, 0x3f
and rsi, rcx
mov qword [rsp + 0x90], rsi
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + rdx + 0x1b0]
mov rbx, qword [rsp + rdx + 0x1b8]
call fcn.29759d0a0
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0xa0]
sub rdx, rsi
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x150]
add rsi, rdi
nop dword [rax]
test rbx, rbx
jne 0x2975a57ef
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x168], rsi
mov rcx, qword [rsp + 0x158]
mov ecx, dword [rcx + 0x14]
add rcx, qword [rax + 0x10]
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], 0
nop
call fcn.2975a4b40
mov qword [rsp + 0x58], rax
movzx ecx, word [0x2977455c0]
mov word [rsp + 0x48], cx
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x1a0], rdx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x198], rbx
lea rsi, [rsp + 0x88]
mov qword [rsp + 0x190], rsi
lea rax, [0x2975cdf40]
call fcn.2974fcb40
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x1a0]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x198]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x40
mov rcx, qword [rsp + 0x190]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x48]
mov word [rsp], cx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.297598ca0
xorps xmm15, xmm15
mov r14, qword [0x2977457f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x168]
xor edx, edx
jmp 0x2975a5810
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rax, rdi
mov rbx, rsi
add rsp, 0x1f0
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x1f0
pop rbp
ret
inc rcx
cmp rcx, rdx
jge 0x2975a55a3
mov rdi, qword [rsi + rcx*8]
mov r8, qword [rdi + 8]
cmp rbx, r8
jne 0x2975a5782
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x158], rdi
mov rdx, qword [rdi]
mov rbx, rax
mov rcx, r8
mov rax, rdx
call fcn.2974f3380
nop dword [rax]
test al, al
jne 0x2975a5599
mov rax, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x1a8]
jmp 0x2975a5782
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rbx, qword [rsp + 0x78]
add rbx, rdx
movzx esi, byte [rcx + rdx]
mov byte [rbx], sil
inc rdx
cmp rdx, rax
jl 0x2975a57fe
jmp 0x2975a53dc
mov rax, rsi
nop dword [rax]
call fcn.297551980
call fcn.297551940
nop
call fcn.29754f620
jmp fcn.2975a5180