Function at 0x739960
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
inc dword [0x005f100c]
pushfq
call fcn.00732acf
lea rsp, [rsp + 4]
pushfq
bts r12, r11
mov r12d, dword [rsp + 1]
mov dword [rsp + 0xa], ebx
mov r14b, byte [rsp + 0xd]
jmp 0x732d7e
lea rsp, [rsp + 1]
mov bl, al
xchg r8, rbx
mov r8w, sp
not ebx
jmp 0x732d08
xchg esi, eax
xchg rbx, r8
mov word [rsp], sp
xchg ecx, edx
mov rax, 0xffffffffe8e92f16
not si
jmp 0x732cbb
xchg word [rsp], r14w
cld
cld
xchg dx, r8w
xchg cx, dx
mov r8w, 0x86ce
jmp 0x732cd1
bswap r12d
neg r12
not bx
mov dx, ax
sub rsp, 0x18
mov cx, ax
jmp 0x732d59
lea r14, [rcx + riz - 0x31]
lea rsp, [rsp + 1]
rdtsc
mov r8d, 0x5c2c153f
not cl
mov r14b, 0xfe
jmp 0x732cf3
pop r12
push qword [rsp + 0xd]
xchg rdx, rbx
mov edx, 0x95b3fb51
jmp 0x732e03
lea r14, [rsp + r13]
xchg qword [rsp + 0xe], r8
mov dword [rsp + 8], r11d
mov cl, bl
mov ebx, dword [rsp + 6]
mov cl, 0x1c
jmp 0x732d43
xchg r14b, r12b
mov cl, r15b
bsr eax, r8d
sub rsp, 1
neg ebx
add rsp, 0xe
jmp 0x732d2a
add rsp, 0x14
add rsp, 3
mov r8w, r12w
rdtsc
rdtsc
mov si, r9w
call fcn.00732dc3
xchg word [rsp + 0xa], cx
cld
add rsp, 0x15
bt edx, r10d
mov r12d, 0xfa2f6489
xchg rdx, r12
jmp 0x732e78
cmp dword [0x005f100c], 0
jmp 0x734126
clc
mov dl, r9b
lea rsp, [rsp]
xchg cl, r12b
xchg r14d, eax
mov r14w, r8w
jmp 0x732f4f
bswap r14d
mov r14w, word [rsp]
bswap r14
cpuid
setle sil
mov rdx, 0xffffffffeb542780
jmp 0x732e4f
mov sil, byte [rsp]
xchg r12, rax
pushfq
std
mov bx, 0x7b88
not si
jmp 0x732ea7
cpuid
mov r12, qword [rsp]
mov rax, 0xa9e0744
inc rdx
jmp 0x732ed3
mov esi, r12d
sub rbx, r8
lea rcx, [rdx + rbp]
neg r14
xor rcx, rsp
mov r8b, r9b
jmp 0x732e92
pop word [rsp + 1]
neg r14d
dec r8d
neg rsi
rcl ecx, 0xa
sub rsp, 0x1f
jmp 0x732f21
bswap r14d
mov rcx, qword [rsp + 0xd]
sub rsp, 0x1f
mov r12b, 0x88
mov r14d, esi
add rsp, 0x3b
jmp 0x732ebe
bswap rcx
pop r8
lea rbx, [rdx + rdx]
mov r14b, 0x20
neg rcx
jmp 0x732f36
push qword [rsp + 0x20]
mov esi, edx
cmc
pop dx
push word [rsp + 0x1c]
mov rbx, r15
jmp 0x732f0b
mov dword [rsp + 0x13], r8d
mov si, word [rsp + 0x1b]
pop qword [rsp + 5]
jmp 0x732f84
mov ecx, dword [rsp]
sub rsp, 0x1c
mov bx, 0x616f
xchg word [rsp + 6], r14w
sbb r8b, 0x89
mov sil, byte [rsp + 1]
jmp 0x732ef3
mov sil, r10b
pop r12
dec sil
mov eax, 0x688bb689
xchg qword [rsp], r12
jmp 0x732fb6
mov dword [rsp + 0x19], r11d
pop word [rsp + 0xd]
btc dx, cx
not r14d
pop qword [rsp + 9]
mov cx, 0xd656
jmp 0x732f6b
bswap rdx
push rcx
xchg si, cx
lea r12, [rcx + rbx]
bswap rdx
jmp 0x732fe3
dec sil
mov r8w, word [rsp + 5]
dec rbx
xchg ecx, esi
xchg qword [rsp], rdx
xchg r12d, r8d
jmp 0x732fa0
cpuid
bswap eax
push qword [rsp + 3]
sub rsp, 0x10
jmp 0x734353
bswap rsi
xchg sil, al
bsf r14, rdi
pop rbx
rcr rax, cl
xchg cx, r8w
jmp 0x732fcd
pop cx
mov dword [rsp + 0xc], edi
mov rax, qword [rsp + 2]
mov rax, 0xffffffffc5cb4392
mov r12w, word [rsp + 0x1c]
bswap rcx
call fcn.0073314d
lea r12, [rcx + riz]
push qword [rsp + 0xa]
mov rsi, qword [rsp + 0xa]
pop r8
jmp 0x733240
setl r8b
xchg dword [rsp + 0xc], ebx
xchg qword [rsp + 6], rsi
mov dword [rsp + 5], r13d
pop r14
jmp 0x733289
mov rdx, 0x13aae791
mov qword [rsp], rsi
xchg dword [rsp], eax
std
bswap r12d
push qword [rsp + 7]
jmp 0x733222
mov ax, 0x1d6
pop word [rsp]
cld
xor r12w, 0xdb6c
jmp 0x7332a1
mov cx, 0xb27c
neg rbx
xchg qword [rsp], r8
bswap rcx
mov bx, bp
jmp 0x733259
mov bx, 0x6d99
mov r14d, dword [rsp + 2]
mov eax, dword [rsp + 4]
xchg r14d, eax
bts rbx, r13
rdtsc
jmp 0x73326f
xchg word [rsp + 1], dx
lea rsp, [rsp]
mov al, bpl
shr r12, 7
rol ebx, 0xf
stc
jmp 0x7332fc
mov cx, word [rsp]
mov rbx, r15
mov rsi, 0xffffffff8b4d8c62
xchg rsi, rdx
mov cl, 0xa5
mov dword [rsp + 3], ebp
jmp 0x73331a
std
setl r14b
inc sil
push qword [rsp + 8]
lea rdx, [rbx*4]
mov rcx, 0x41f519d9
jmp 0x7332da
mov esi, edx
mov cx, word [rsp + 8]
pop word [rsp + 9]
mov r14b, 0xbb
lea rsp, [rsp + 4]
jmp 0x733369
lea r8, [rsp + rbx]
mov dx, word [rsp + 6]
pop rcx
xchg rcx, rdx
cpuid
jmp 0x733380
mov esi, dword [rsp + 7]
bswap rdx
btc esi, r14d
mov byte [rsp + 4], cl
mov al, r11b
xchg bl, r8b
jmp 0x733353
mov word [rsp], ax
btc ax, r8w
mov r14w, 0xcf71
btr r12w, si
mov r8d, dword [rsp]
jmp 0x733488
bsf r12d, r11d
not sil
bts r12, rbx
lea rsp, [rsp + 6]
mov r12, qword [rsp + 0xb]
mov r12b, 0xfc
jmp 0x7331bb
xchg cx, bx
mov r8w, si
xchg r12b, cl
neg cl
pushfq
xchg r8w, ax
jmp 0x733400
push r10w
xchg dword [rsp], r12d
rdtsc
bts r12, r11
bts ax, di
pop word [rsp]
jmp 0x7333bc
add rsp, 2
and rax, rbx
pop dx
pop word [rsp]
jmp 0x73344e
mov qword [rsp], r8
btr r12w, r12w
not r12
neg bx
mov rdx, r14
seto r14b
jmp 0x7333ea
sbb al, 0xb3
lea rsp, [rsp + 1]
bswap rax
mov rbx, qword [rsp]
bsr ebx, ebx
sbb sil, 0xee
jmp 0x7333d2
lea rsp, [rsp + 1]
mov r14, 0xffffffffa36dd552
jmp 0x733464
mov word [rsp], ax
pop r12w
rdtsc
mov r8, rbx
xchg rsi, rax
bsr rax, rcx
jmp 0x733438
rcl r14w, 0xe
dec edx
mov r14d, dword [rsp]
mov r8w, 0xddaa
cld
mov rcx, 0xffffffff8ce2b52e
jmp 0x7335b1
lea rax, [r14 + riz + 0x2f]
xchg bl, r14b
not r8b
rol cx, cl
mov rcx, r15
cld
jmp 0x733421
mov r8b, bl
call fcn.00733544
cmp eax, 0xb34021b1
pop rdi
cmp eax, 0xb24720b2
push rax
xor ebp, dword [rdx]
bswap rbx
add rsp, 0
mov r14b, byte [rsp]
bt cx, sp
mov r8w, dx
mov r8w, r10w
jmp 0x73349c
not rax
cld
xchg r12b, bl
bswap rcx
bsr cx, bp
mov cl, al
jmp 0x7334b2
xchg dl, r12b
bswap rax
mov ebx, dword [rsp + 0x15]
mov rsi, r15
xchg r14b, dl
mov si, 0xe4c6
jmp 0x73339f
mov esi, dword [rsp + 0xc]
xchg dword [rsp + 0xa], ecx
mov dx, 0x9a61
xchg word [rsp + 0x1f], r12w
push qword [rsp + 0x15]
xchg dword [rsp + 0xf], eax
jmp 0x733744
je 0x732c7a
lea rsp, [rsp + 0x10]
add rsp, 8
call fcn.00734110
mov byte [rsp + 1], bl
lea rsp, [rsp + 5]
push rbp
mov bp, r15w
jmp 0x73430b
mov bpl, r13b
mov bp, word [rsp]
mov bpl, byte [rsp]
mov rbp, r11
push r9
mov rbp, rax
call fcn.00734281
not ebx
xchg r13w, di
not r10b
xchg r8d, ebp
mov rcx, rax
jmp 0x7346f2
mov eax, 0x8a6f31b3
xchg esi, eax
push r14w
mov r8b, byte [rsp + 0x18]
pop r14w
neg r8b
jmp 0x7338b5
not cl
setne al
xchg r11w, bx
mov r10b, byte [rsp]
mov rbx, 0x8e79068
mov r10b, byte [rsp]
jmp 0x734410
mov dil, 0x28
bswap r10
mov r14w, word [rsp]
mov r13b, 0x49
xchg cx, r10w
not r13
jmp 0x73436e
mov eax, 0x2e6e23c
lea r8, [rbx + riz - 0x8a]
xchg r9b, r13b
lea r14, [rsp - 0x4b64]
call fcn.007343a9
mov r11b, byte [rsp]
mov rbp, qword [rsp]
bswap eax
setl r10b
mov ecx, 0x29329eb9
mov r11w, 0x271
jmp 0x7343bf
mov r10d, 0xcd644154
lea rcx, [rbx + r10]
bswap rbp
lea rdi, [rbx + rbx]
mov r11, qword [rsp]
mov bpl, r14b
jmp 0x734392
mov r9d, dword [rsp]
mov cl, byte [rsp]
mov r13d, dword [rsp]
lea r8, [r9 + r14]
xchg r10, rax
mov r10, qword [rsp]
jmp 0x7345a7
call 0x739145
jmp 0x7399dd
lea rsp, [rsp + 0x30]
pushfq
pop word [rsp + 0x10]
mov byte [rsp + 0xf], r9b
jmp 0x739981
mov byte [rsp], r8b
lea rsp, [rsp + 5]
lea rsp, [rsp + 0x18]
jmp 0x739a6e
pop rax
sub rax, 0x339145
push rax
jmp 0x732e39
mov rax, qword [rax + riz]
mov rax, qword [rax + riz + 0x10]
push rax
jmp 0x739140
mov rax, qword gs:[0x60]
mov rax, qword [rax + riz + 0x18]
mov rax, qword [rax + riz + 0x30]
jmp 0x739a2c