Function at 0x10078730
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xe0
mov esi, esp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xcc], esp
mov dword [esi + 0xd8], 0xffffffff
lea eax, [esi + 0xd0]
mov dword [esi + 0xd4], 0x10079050
mov ecx, dword fs:[0]
mov dword [esi + 0xd0], ecx
mov dword fs:[0], eax
mov eax, 0x4a915672
mov ecx, 0x26f57c5c
mov dword [esi + 0xa4], ecx
mov dword [esi + 0xa0], eax
mov eax, 0xbbfd9d37
mov ecx, 0x4c2325f6
mov dword [esi + 0xac], ecx
mov dword [esi + 0xa8], eax
mov eax, 0x8adb2da9
mov ecx, 0x3c701b38
mov dword [esi + 0xb4], ecx
mov dword [esi + 0xb0], eax
mov ecx, 0xf3d16646
mov eax, 0xd2f129fd
mov dword [esi + 0x1c], ecx
mov dword [esi + 0xc], eax
mov eax, 0x2fe5383b
mov ecx, 0x5290122e
mov dword [esi + 0x18], eax
mov ebx, ecx
mov ecx, 0xc892f174
mov eax, 0x22426d93
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov edi, 0x3c701b38
mov edx, 0x8abe41cd
lea ecx, [esi + 0x20]
xor eax, eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0xb8], eax
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x18]
mov dword [esi + 0x20], ebx
mov ebx, dword [esi + 0x10]
mov dword [esi + 0x2c], ebx
mov ebx, dword [esi + 0x14]
mov dword [esi + 0x28], ebx
mov dword [esi + 0x78], edi
mov dword [esi + 0x34], edi
mov dword [esi + 0x70], edx
mov dword [esi + 0x30], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 0x3c], edx
mov dword [esi + 0x38], eax
movaps xmm0, xmmword [esi + 0xa0]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0xa0], xmm0
movaps xmm0, xmmword [esi + 0xb0]
mov dword [esi + 0x74], ecx
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0xb0], xmm0
mov dword [esi + 0x58], 0
mov dword [esi + 0x68], 0
mov dword [esi + 0x6c], 0xf
mov byte [esi + 0x58], 0
lea ebx, [esi + 0xa0]
push ebx
call fcn.10087a10
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x100788b3
mov dword [esi + 0xd8], 2
sub esp, 0xc
mov al, byte [esi + 0x20]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
lea ecx, [esi + 0x58]
call fcn.100033b0
jmp 0x100788c9
mov dword [esi + 0x68], edi
lea eax, [esi + 0x58]
push edi
push ebx
push eax
call fcn.10084a40
add esp, 0xc
mov byte [esi + edi + 0x58], 0
mov eax, 0x2f8c384c
mov ecx, 0x52f91240
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
mov eax, 0xc8f7f11a
mov ecx, 0x226c6de7
mov dword [esi + 0x8c], ecx
mov dword [esi + 0x88], eax
mov eax, 0x8ad241a9
mov ecx, 0x3c701b54
mov dword [esi + 0x94], ecx
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x24], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x2c], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x78]
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x70]
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0x9c], eax
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x98], eax
mov dword [esi + 0x38], eax
movaps xmm0, xmmword [esi + 0x80]
mov eax, dword [esi + 0x74]
xorps xmm0, xmmword [eax]
movaps xmmword [esi + 0x80], xmm0
movaps xmm0, xmmword [esi + 0x90]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x90], xmm0
mov dword [esi + 0x40], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 7
mov word [esi + 0x40], 0
lea ebx, [esi + 0x80]
push ebx
call fcn.10088056
add esp, 4
mov edi, eax
cmp eax, 7
jbe 0x100789c3
mov dword [esi + 0xd8], 3
sub esp, 0xc
mov al, byte [esi + 0x20]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
lea ecx, [esi + 0x40]
call fcn.1000c8e0
jmp 0x100789e9
mov dword [esi + 0x50], edi
mov eax, edi
add eax, edi
lea ecx, [esi + 0x40]
push eax
push ebx
push ecx
call fcn.10084a40
add esp, 0xc
mov word [esi + edi*2 + 0x40], 0
mov dword [esi + 0xd8], 4
mov dword [esi + 0xd8], 4
lea eax, [esi + 0x58]
lea ecx, [esi + 0x40]
lea edx, [esi + 0xc0]
push eax
push ecx
push edx
call fcn.1004e0a0
add esp, 0xc
cmp byte [esi + 0xc4], 0
je 0x10078aa1
push dword [ebp + 8]
call dword [esi + 0xc0]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x10078a57
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x10078a4d
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x10078aa6
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.100812b5
add esp, 8
mov eax, dword [esi + 0x6c]
cmp eax, 0x10
jb 0x10078a8b
mov ecx, dword [esi + 0x58]
lea edx, [eax + 1]
cmp edx, 0x1000
jb 0x10078a81
mov edi, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edi
cmp ecx, 0x20
jae 0x10078ab5
add eax, 0x24
mov edx, eax
mov ecx, edi
push edx
push ecx
call fcn.100812b5
add esp, 8
mov eax, dword [esi + 0xd0]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
call fcn.10005c60
mov dword [esi + 0xd8], 0
call fcn.10087578
mov dword [esi + 0xd8], 1
call fcn.10087578
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.10082f28
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.10082f28
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x10078b57
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x10078b4d
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x10078b5c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.100812b5
add esp, 8
add esp, 0xc
pop ebp
ret
call fcn.10087578
nop word cs:[eax + eax]
nop dword [eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
mov eax, dword [esi + 0x6c]
cmp eax, 0x10
jb 0x10078bb4
mov ecx, dword [esi + 0x58]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x10078baa
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10078bb9
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.100812b5
add esp, 8
add esp, 0xc
pop ebp
ret
call fcn.10087578
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.10082f28
int3