Function at 0x10077cc0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xe0
mov esi, esp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xcc], esp
mov dword [esi + 0xd8], 0xffffffff
lea eax, [esi + 0xd0]
mov dword [esi + 0xd4], 0x100785e0
mov ecx, dword fs:[0]
mov dword [esi + 0xd0], ecx
mov dword fs:[0], eax
mov eax, 0x4a915672
mov ecx, 0x26f57c5c
mov dword [esi + 0xa4], ecx
mov dword [esi + 0xa0], eax
mov eax, 0xbbfd9d37
mov ecx, 0x4c2325f6
mov dword [esi + 0xac], ecx
mov dword [esi + 0xa8], eax
mov eax, 0x8adb2da9
mov ecx, 0x3c701b38
mov dword [esi + 0xb4], ecx
mov dword [esi + 0xb0], eax
mov ecx, 0xf3d16646
mov eax, 0xd2f129fd
mov dword [esi + 0x1c], ecx
mov dword [esi + 0xc], eax
mov eax, 0x2fe5383b
mov ecx, 0x5290122e
mov dword [esi + 0x18], eax
mov ebx, ecx
mov ecx, 0xc892f174
mov eax, 0x22426d93
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov edi, 0x3c701b38
mov edx, 0x8abe41cd
lea ecx, [esi + 0x20]
xor eax, eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0xb8], eax
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x24], ebx
mov ebx, dword [esi + 0x18]
mov dword [esi + 0x20], ebx
mov ebx, dword [esi + 0x10]
mov dword [esi + 0x2c], ebx
mov ebx, dword [esi + 0x14]
mov dword [esi + 0x28], ebx
mov dword [esi + 0x78], edi
mov dword [esi + 0x34], edi
mov dword [esi + 0x70], edx
mov dword [esi + 0x30], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 0x3c], edx
mov dword [esi + 0x38], eax
movaps xmm0, xmmword [esi + 0xa0]
xorps xmm0, xmmword [ecx]
movaps xmmword [esi + 0xa0], xmm0
movaps xmm0, xmmword [esi + 0xb0]
mov dword [esi + 0x74], ecx
xorps xmm0, xmmword [ecx + 0x10]
movaps xmmword [esi + 0xb0], xmm0
mov dword [esi + 0x58], 0
mov dword [esi + 0x68], 0
mov dword [esi + 0x6c], 0xf
mov byte [esi + 0x58], 0
lea ebx, [esi + 0xa0]
push ebx
call fcn.10086fa0
add esp, 4
mov edi, eax
cmp eax, 0xf
jbe 0x10077e43
mov dword [esi + 0xd8], 2
sub esp, 0xc
mov al, byte [esi + 0x20]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
lea ecx, [esi + 0x58]
call fcn.10003a10
jmp 0x10077e59
mov dword [esi + 0x68], edi
lea eax, [esi + 0x58]
push edi
push ebx
push eax
call fcn.10083fd0
add esp, 0xc
mov byte [esi + edi + 0x58], 0
mov eax, 0x2f8c384c
mov ecx, 0x52f91240
mov dword [esi + 0x84], ecx
mov dword [esi + 0x80], eax
mov eax, 0xc8f7f11a
mov ecx, 0x226c6de7
mov dword [esi + 0x8c], ecx
mov dword [esi + 0x88], eax
mov eax, 0x8ad241a9
mov ecx, 0x3c701b54
mov dword [esi + 0x94], ecx
mov dword [esi + 0x90], eax
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x24], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x2c], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x78]
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x70]
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0xc]
mov dword [esi + 0x9c], eax
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x98], eax
mov dword [esi + 0x38], eax
movaps xmm0, xmmword [esi + 0x80]
mov eax, dword [esi + 0x74]
xorps xmm0, xmmword [eax]
movaps xmmword [esi + 0x80], xmm0
movaps xmm0, xmmword [esi + 0x90]
xorps xmm0, xmmword [eax + 0x10]
movaps xmmword [esi + 0x90], xmm0
mov dword [esi + 0x40], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 7
mov word [esi + 0x40], 0
lea ebx, [esi + 0x80]
push ebx
call fcn.100875e6
add esp, 4
mov edi, eax
cmp eax, 7
jbe 0x10077f53
mov dword [esi + 0xd8], 3
sub esp, 0xc
mov al, byte [esi + 0x20]
mov byte [esp + 4], al
mov dword [esp + 8], ebx
mov dword [esp], edi
lea ecx, [esi + 0x40]
call fcn.1000cb60
jmp 0x10077f79
mov dword [esi + 0x50], edi
mov eax, edi
add eax, edi
lea ecx, [esi + 0x40]
push eax
push ebx
push ecx
call fcn.10083fd0
add esp, 0xc
mov word [esi + edi*2 + 0x40], 0
mov dword [esi + 0xd8], 4
mov dword [esi + 0xd8], 4
lea eax, [esi + 0x58]
lea ecx, [esi + 0x40]
lea edx, [esi + 0xc0]
push eax
push ecx
push edx
call fcn.1004e750
add esp, 0xc
cmp byte [esi + 0xc4], 0
je 0x10078031
push dword [ebp + 8]
call dword [esi + 0xc0]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x10077fe7
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x10077fdd
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x10078036
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.10080845
add esp, 8
mov eax, dword [esi + 0x6c]
cmp eax, 0x10
jb 0x1007801b
mov ecx, dword [esi + 0x58]
lea edx, [eax + 1]
cmp edx, 0x1000
jb 0x10078011
mov edi, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edi
cmp ecx, 0x20
jae 0x10078045
add eax, 0x24
mov edx, eax
mov ecx, edi
push edx
push ecx
call fcn.10080845
add esp, 8
mov eax, dword [esi + 0xd0]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
call fcn.10006e00
mov dword [esi + 0xd8], 0
call fcn.10086b08
mov dword [esi + 0xd8], 1
call fcn.10086b08
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.100824b8
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.100824b8
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
mov ecx, dword [esi + 0x54]
cmp ecx, 8
jb 0x100780e7
mov eax, dword [esi + 0x40]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x100780dd
mov edx, eax
add edx, 0xfffffffc
mov eax, dword [eax - 4]
sub edx, eax
cmp edx, 0x20
jae 0x100780ec
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.10080845
add esp, 8
add esp, 0xc
pop ebp
ret
call fcn.10086b08
nop word cs:[eax + eax]
nop dword [eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
mov eax, dword [esi + 0x6c]
cmp eax, 0x10
jb 0x10078144
mov ecx, dword [esi + 0x58]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x1007813a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x10078149
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.10080845
add esp, 8
add esp, 0xc
pop ebp
ret
call fcn.10086b08
nop
push ebp
sub esp, 0xc
lea esi, [ebp - 0xdc]
mov ebp, dword [esi + 0xc8]
call fcn.100824b8
int3