Function at 0x2fc4c3dd0
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0xc8
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0xc4], 0x60
mov eax, dword [rsp + 0xc4]
mov ecx, eax
mov rcx, qword gs:[rcx]
mov qword [rsp + 0xb8], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
mov qword [rsp + 0x70], rcx
mov dword [rsp + 0x3c], 0x42bb056e
mov eax, dword [rsp + 0x3c]
mov ecx, eax
sub ecx, 0xa5af58c1
mov dword [rsp + 0x38], eax
je 0x2fc4c415d
jmp 0x2fc4c3e41
mov eax, dword [rsp + 0x38]
sub eax, 0xa87fe2b0
je 0x2fc4c3fb1
jmp 0x2fc4c3e55
mov eax, dword [rsp + 0x38]
sub eax, 0xc2513c5f
je 0x2fc4c4109
jmp 0x2fc4c3e69
mov eax, dword [rsp + 0x38]
sub eax, 0xc6c5146c
je 0x2fc4c4052
jmp 0x2fc4c3e7d
mov eax, dword [rsp + 0x38]
sub eax, 0xd9f5c138
je 0x2fc4c4123
jmp 0x2fc4c3e91
mov eax, dword [rsp + 0x38]
sub eax, 0xe8888cd4
je 0x2fc4c3fef
jmp 0x2fc4c3ea5
mov eax, dword [rsp + 0x38]
sub eax, 0xf063968b
je 0x2fc4c4143
jmp 0x2fc4c3eb9
mov eax, dword [rsp + 0x38]
sub eax, 0xfe00935d
je 0x2fc4c4038
jmp 0x2fc4c3ecd
mov eax, dword [rsp + 0x38]
sub eax, 0xb6ef5b9
je 0x2fc4c406c
jmp 0x2fc4c3ee1
mov eax, dword [rsp + 0x38]
sub eax, 0x2bef2ea6
je 0x2fc4c4019
jmp 0x2fc4c3ef5
mov eax, dword [rsp + 0x38]
sub eax, 0x2fbde8ca
je 0x2fc4c40fc
jmp 0x2fc4c3f09
mov eax, dword [rsp + 0x38]
sub eax, 0x3230e1c7
je 0x2fc4c419a
jmp 0x2fc4c3f1d
mov eax, dword [rsp + 0x38]
sub eax, 0x42bb056e
je 0x2fc4c3f9a
jmp 0x2fc4c3f31
mov eax, dword [rsp + 0x38]
sub eax, 0x48e3a533
je 0x2fc4c4180
jmp 0x2fc4c3f45
mov eax, dword [rsp + 0x38]
sub eax, 0x4a95b4a2
je 0x2fc4c4173
jmp 0x2fc4c3f59
mov eax, dword [rsp + 0x38]
sub eax, 0x55fafc0c
je 0x2fc4c3fcb
jmp 0x2fc4c3f6d
mov eax, dword [rsp + 0x38]
sub eax, 0x5cf84e08
je 0x2fc4c40bf
jmp 0x2fc4c3f81
mov eax, dword [rsp + 0x38]
sub eax, 0x7bcc9bc9
je 0x2fc4c40df
jmp 0x2fc4c3f95
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x3c], 0xa87fe2b0
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0x55fafc0c
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x3c], 0xe8888cd4
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
cmp rax, rcx
setne dl
and dl, 1
mov byte [rsp + 0x8f], dl
mov dword [rsp + 0x3c], 0x2bef2ea6
jmp 0x2fc4c41aa
mov al, byte [rsp + 0x8f]
test al, 1
mov ecx, 0xfe00935d
mov edx, 0xa5af58c1
cmovne edx, ecx
mov dword [rsp + 0x3c], edx
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x3c], 0xc6c5146c
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x3c], 0xb6ef5b9
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov rcx, rax
mov qword [rsp + 0x28], rdx
call fcn.2fc4c3480
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov r8, rax
call fcn.2fc4c4530
cmp eax, 0
mov eax, 0x5cf84e08
mov r9d, 0xc2513c5f
cmove r9d, eax
mov dword [rsp + 0x3c], r9d
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x40]
add rax, 0x30
mov qword [rsp + 0x98], rax
mov dword [rsp + 0x3c], 0x7bcc9bc9
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x98]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x3c], 0x2fbde8ca
jmp 0x2fc4c41aa
mov dword [rsp + 0x3c], 0x48e3a533
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x3c], 0xd9f5c138
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x3c], 0xf063968b
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x3c], 0x55fafc0c
jmp 0x2fc4c41aa
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x3c], 0x4a95b4a2
jmp 0x2fc4c41aa
mov dword [rsp + 0x3c], 0x48e3a533
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x3c], 0x3230e1c7
jmp 0x2fc4c41aa
mov rax, qword [rsp + 0xb0]
add rsp, 0xc8
ret
jmp 0x2fc4c3e26