Function at 0x72f500
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x180
mov esi, esp
mov dword [esi + 0x168], ebp
mov edi, dword [ebp + 8]
mov dword [esi + 0x16c], esp
mov dword [esi + 0x178], 0xffffffff
lea eax, [esi + 0x170]
mov dword [esi + 0x174], 0x730b90
mov ecx, dword fs:[0]
mov dword [esi + 0x170], ecx
mov dword fs:[0], eax
call fcn.00730b80
mov edx, dword [0xb4170c]
mov ecx, dword [0xb416f0]
mov ebx, 0xffff7811
sub ebx, eax
mov dword [esi + 0x14], ebx
sub ecx, ebx
add ecx, edx
call dword [0xb0836c]
call ecx
mov byte [edi], 0
mov dword [edi + 0x14], 0
mov ecx, eax
xor ecx, 0x31fee452
mov dword [edi + 0x18], ecx
mov byte [edi + 4], 0
mov dword [edi + 0x2c], 0
mov dword [esi + 0xc], ecx
mov dword [edi + 0x30], ecx
mov byte [edi + 0x1c], 0
mov byte [edi + 0x34], 0
mov dword [edi + 0x38], 0
xorps xmm0, xmm0
movaps xmmword [esi + 0x30], xmm0
mov dword [esi + 8], eax
mov edx, eax
xor edx, 0x31fee454
mov dword [esi + 0xb8], 0xac0404
lea eax, [esi + 0x30]
mov dword [esi + 0xbc], eax
lea ecx, [esi + 0xb8]
mov dword [esi + 0x10], edx
mov dword [esi + edx*4 + 0xb8], ecx
mov dword [esi + 0x178], 0x14
call fcn.00730b60
mov eax, dword [esi + 0x10]
mov edi, dword [esi + eax*4 + 0xb8]
test edi, edi
mov ecx, dword [esi + 8]
lea edx, [esi + 0xb8]
je 0x72f639
xor ebx, ebx
cmp edi, edx
setne bl
mov eax, dword [edi]
mov ecx, dword [esi + 8]
xor ecx, 0x31fee459
mov ecx, dword [eax + ecx*4]
mov dword [esi], ecx
mov dword [esi + 0x178], 0xffffffff
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi]
mov ecx, dword [esi + 8]
lea edx, [esi + 0xb8]
mov eax, dword [esi + 0x38]
xor cl, 0x42
shr eax, cl
mov ecx, dword [ebp + 8]
mov byte [ecx], al
xorps xmm0, xmm0
movaps xmmword [esi + 0x80], xmm0
mov dword [esi + 0xb8], 0xac0624
lea eax, [esi + 0x80]
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0x10]
mov dword [esi + eax*4 + 0xb8], edx
mov dword [esi + 0x178], 0x13
mov ecx, edx
call fcn.00730b60
mov eax, dword [esi + 0x10]
mov edi, dword [esi + eax*4 + 0xb8]
test edi, edi
je 0x72f6c1
xor ebx, ebx
lea eax, [esi + 0xb8]
cmp edi, eax
setne bl
mov eax, dword [edi]
mov ecx, dword [esi + 8]
xor ecx, 0x31fee459
mov ecx, dword [eax + ecx*4]
mov dword [esi], ecx
mov dword [esi + 0x178], 0xffffffff
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi]
mov dword [esi + 0x178], 9
lea ecx, [esi + 0xb8]
push 1
call fcn.005440b0
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0x31fee44d
mov edx, eax
xor edx, 0x31fee459
mov eax, dword [esi + 0xc]
mov dword [esi + 0x44], eax
mov dword [esi + 0x40], edx
mov eax, dword [esi + edx + 0x80]
mov dword [esi + 0x30], eax
mov dword [esi + 0x74], ecx
lea ecx, [esi + ecx + 0xb8]
mov byte [esi + edx + 0x30], 0
mov dword [esi + 0x178], 0x12
mov dword [esi + 0x18], edx
push edx
lea eax, [esi + 0x30]
push eax
mov dword [esi + 0x24], ecx
push ecx
call fcn.00652be0
add esp, 0xc
mov eax, dword [esi + 0x44]
cmp eax, dword [esi + 0xc]
jbe 0x72f7d3
mov dword [0xb416d8], 0xfb42bdf6
mov ebx, dword [esi + 8]
mov ecx, ebx
xor ecx, 0xc8956143
mov edx, eax
sub edx, ecx
inc edx
mov edi, edx
xor edi, ecx
and edx, ecx
mov ecx, dword [esi + 0x30]
mov dword [esi], ecx
lea edx, [edi + edx*2]
mov ecx, ebx
xor ecx, 0x31feeba2
cmp edx, ecx
jbe 0x72f79d
mov edi, dword [esi]
mov ecx, dword [edi - 4]
mov edx, ebx
xor edx, 0xce011ba1
add edx, edi
sub edx, ecx
mov edi, ebx
xor edi, 0x31fee47d
cmp edx, edi
jae 0x73034b
mov edx, ebx
xor edx, 0x31fee479
add eax, edx
mov dword [esi + 4], eax
mov dword [esi], ecx
jmp 0x72f7a0
mov dword [esi + 4], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push ebx
call edi
add esp, 4
mov eax, dword [esi + 8]
xor eax, 0x31fee451
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x44], ecx
mov ecx, dword [esi + 0x18]
mov dword [esi + 0x40], ecx
mov dword [esi + 0xa4], eax
mov eax, dword [esi + eax + 0x80]
mov dword [esi + 0x30], eax
mov byte [esi + ecx + 0x30], 0
mov dword [esi + 0x178], 0x11
push ecx
lea eax, [esi + 0x30]
push eax
push dword [esi + 0x24]
call fcn.00652be0
add esp, 0xc
mov eax, dword [esi + 0x44]
cmp eax, dword [esi + 0xc]
jbe 0x72f89b
mov edi, dword [esi + 0x30]
lea edx, [eax + 1]
mov ebx, dword [esi + 8]
mov ecx, ebx
xor ecx, 0x31feeba2
cmp edx, ecx
jbe 0x72f863
mov ecx, dword [edi - 4]
mov edx, ebx
xor edx, 0xce011ba1
add edx, edi
sub edx, ecx
mov edi, ebx
xor edi, 0x31fee47d
cmp edx, edi
jae 0x73035a
mov edx, ebx
xor edx, 0x31fee479
add eax, edx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp 0x72f868
mov dword [esi + 4], edi
mov dword [esi], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
push ebx
call edi
add esp, 4
mov eax, dword [esi + 8]
xor eax, 0x31fee455
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x44], ecx
mov ecx, dword [esi + 0x18]
mov dword [esi + 0x40], ecx
mov dword [esi + 0x7c], eax
mov eax, dword [esi + eax + 0x80]
mov dword [esi + 0x30], eax
mov byte [esi + ecx + 0x30], 0
mov dword [esi + 0x178], 0x10
push ecx
lea eax, [esi + 0x30]
push eax
push dword [esi + 0x24]
call fcn.00652be0
add esp, 0xc
mov eax, dword [esi + 0x44]
cmp eax, dword [esi + 0xc]
jbe 0x72f97b
mov edi, dword [esi + 0x30]
mov ecx, eax
xor ecx, 1
mov edx, eax
and edx, 1
lea edx, [ecx + edx*2]
mov ebx, dword [esi + 8]
mov ecx, ebx
xor ecx, 0x31feeba2
cmp edx, ecx
mov dword [esi], edi
jbe 0x72f945
mov ecx, dword [0xb53348]
add ecx, dword [edi - 4]
mov edx, ebx
xor edx, 0xce011ba1
mov edi, edx
xor edi, dword [esi]
and edx, dword [esi]
lea edx, [edi + edx*2]
sub edx, ecx
mov edi, ebx
xor edi, 0x31fee47d
cmp edx, edi
jae 0x730369
mov edx, ebx
xor edx, 0x31fee479
add eax, edx
mov dword [esi + 4], eax
mov dword [esi], ecx
jmp 0x72f948
mov dword [esi + 4], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push ebx
call edi
add esp, 4
lea ecx, [esi + 0xd0]
mov dword [esi + 0x178], 0xf
lea eax, [esi + 0x30]
push eax
call fcn.0055d5e0
mov eax, dword [0xb41700]
mov edi, dword [0xb416e8]
sub edi, dword [esi + 0x14]
add edi, eax
mov eax, dword [ebp + 8]
lea ebx, [eax + 4]
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
lea ecx, [esi + 0xb8]
call edi
lea eax, [esi + 0x30]
cmp ebx, eax
je 0x72fa75
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
cmp eax, dword [esi + 0xc]
jbe 0x72fa53
mov dword [esi], ebx
mov edi, dword [ebx]
lea edx, [eax + 1]
mov ebx, dword [esi + 8]
mov ecx, ebx
xor ecx, 0x31feeba2
cmp edx, ecx
jbe 0x72fa21
mov ecx, dword [edi - 4]
mov edx, ebx
xor edx, 0xce011ba1
add edx, edi
sub edx, ecx
mov edi, ebx
xor edi, 0x31fee47d
cmp edx, edi
jae 0x730396
mov edx, ebx
xor edx, 0x31fee479
add eax, edx
mov dword [esi + 4], eax
mov dword [esi + 0x28], ecx
jmp 0x72fa27
mov dword [esi + 0x28], edi
mov dword [esi + 4], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 4]
push ebx
call edi
add esp, 4
mov ebx, dword [esi]
movsd xmm0, qword [esi + 0x40]
movsd qword [ebx + 0x10], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebx], xmm0
mov dword [esi + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esi + 0x44], eax
mov byte [esi + 0x30], 0
mov eax, dword [esi + 0x44]
mov ecx, dword [0xb416c0]
add ecx, dword [ecx]
mov dword [esi + 0x70], ecx
mov edx, dword [esi + 8]
mov ecx, edx
xor ecx, 0x12af0d8f
cmp dword [0xb416c8], ecx
jne 0x72faa9
mov ecx, dword [0xac0648]
mov dword [esi + 0x28], ecx
mov ecx, dword [0xb416c4]
mov edi, ecx
jmp 0x72facd
mov dword [0xb416cc], 0x63cc3ea1
mov ecx, dword [0xac0648]
mov dword [esi + 0x28], ecx
mov edi, dword [0xb416c4]
mov ecx, edx
xor ecx, 0xe011ba7
lea ecx, [edi + ecx*4]
mov ecx, dword [ecx]
mov dword [esi], ecx
xor edx, 0xb965e460
mov ecx, 0x57f82e3e
cmp dword [0xb416cc], edx
je 0x72faf3
mov dword [0xb416d8], 0xb55ca432
mov ecx, 0x57f82e44
mov dword [esi + 0x60], edi
cmp eax, dword [esi + 0xc]
jbe 0x72fb7f
mov edi, dword [esi + 0x30]
mov ebx, dword [esi + 8]
mov edx, ebx
xor edx, 0x99f9359f
add edx, eax
add edx, ecx
inc edx
mov ecx, ebx
xor ecx, 0x31feeba2
cmp edx, ecx
jbe 0x72fb4f
mov ecx, dword [edi - 4]
mov edx, ebx
xor edx, 0xce011ba1
add edx, edi
sub edx, ecx
mov edi, ebx
xor edi, 0x31fee47d
cmp edx, edi
jae 0x730378
mov edx, ebx
xor edx, 0x31fee479
add eax, edx
mov dword [esi + 4], eax
mov dword [esi + 0x20], ecx
jmp 0x72fb55
mov dword [esi + 0x20], edi
mov dword [esi + 4], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 4]
push ebx
call edi
add esp, 4
xorps xmm0, xmm0
movaps xmmword [esi + 0x80], xmm0
mov dword [esi + 0xb8], 0xac0654
lea eax, [esi + 0x80]
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0x10]
lea ecx, [esi + 0xb8]
mov dword [esi + eax*4 + 0xb8], ecx
mov dword [esi + 0x178], 0xe
call fcn.00730b60
mov edx, dword [0xb416bc]
lea edi, [edx + 1]
mov dword [0xb416bc], edi
test edi, edx
mov eax, dword [esi + 8]
mov dword [esi + 0xa0], edx
mov dword [esi + 0x9c], edi
je 0x72feb0
mov dword [esi + 0x20], 0
mov ecx, dword [esi + 0x10]
mov edi, dword [esi + ecx*4 + 0xb8]
test edi, edi
je 0x72fc28
xor ebx, ebx
lea eax, [esi + 0xb8]
cmp edi, eax
setne bl
mov eax, dword [edi]
mov ecx, dword [esi + 0x18]
mov ecx, dword [eax + ecx*4]
mov dword [esi], ecx
mov dword [esi + 0x178], 0xffffffff
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi]
mov eax, dword [esi + 8]
xor eax, 0xb1fee459
cmp dword [esi + 0x80], eax
jae 0x72fc4b
mov dword [esi + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esi + 0x44], eax
mov byte [esi + 0x30], 0
jmp 0x72fe34
mov dword [esi + 0x178], 9
lea ecx, [esi + 0xb8]
push 1
call fcn.005440b0
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0x31fee45e
mov dword [esi + 0x28], ecx
mov ecx, eax
xor ecx, 0x31feeba2
mov dword [esi + 0x70], ecx
mov ecx, eax
xor ecx, 0xce011ba1
mov dword [esi + 0x68], ecx
mov ecx, eax
xor ecx, 0x31fee47d
mov dword [esi + 0x60], ecx
mov ecx, eax
xor ecx, 0x31fee479
mov dword [esi + 0x64], ecx
xor eax, 0xff19e3a5
mov dword [esi + 0x6c], eax
xor edx, edx
jmp 0x72fce5
mov dword [esi + 4], ecx
mov eax, dword [0xb41708]
mov ebx, dword [0xb416ec]
sub ebx, dword [esi + 0x14]
add ebx, eax
mov dword [esi + 0x178], 0xffffffff
mov ecx, ebx
call dword [0xb0836c]
mov ecx, edi
mov edx, dword [esi + 4]
push dword [esi + 0x6c]
call ebx
add esp, 4
mov edx, dword [esi]
inc edx
cmp edx, dword [esi + 0x28]
mov eax, dword [esi + 0x10]
jae 0x72fdf1
mov dword [esi + 0x30], 0xac0674
lea ecx, [esi + 0x80]
mov dword [esi + 0x34], ecx
mov dword [esi], edx
mov dword [esi + 0x38], edx
lea ecx, [esi + 0x30]
mov dword [esi + eax*4 + 0x30], ecx
mov dword [esi + 0x178], 0xd
call fcn.00730b60
mov eax, dword [esi + 0x10]
mov edi, dword [esi + eax*4 + 0x30]
test edi, edi
lea ecx, [esi + 0x30]
je 0x72fd55
xor ebx, ebx
cmp edi, ecx
setne bl
mov eax, dword [edi]
mov ecx, dword [esi + 0x18]
mov ecx, dword [eax + ecx*4]
mov dword [esi + 4], ecx
mov dword [esi + 0x178], 0xffffffff
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi + 4]
lea ecx, [esi + 0x30]
mov dword [esi + 0x40], 0
mov eax, dword [esi + 0xc]
mov dword [esi + 0x44], eax
mov byte [esi + 0x30], 0
mov dword [esi + 0x178], 0xb
sub esp, 0xc
movzx eax, byte [esi + 0x78]
mov byte [esp + 4], al
lea eax, [esi + 0x80]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x74]
mov dword [esp], eax
call fcn.0052ce20
lea eax, [esi + 0x30]
mov ecx, dword [esi + 0xc]
cmp dword [esi + 0x44], ecx
jbe 0x72fd9e
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x40]
mov dword [esi + 0x178], 0xc
push ecx
push eax
push dword [esi + 0x24]
call fcn.00652be0
add esp, 0xc
mov eax, dword [esi + 0x44]
cmp eax, dword [esi + 0xc]
jbe 0x72fce2
mov edi, dword [esi + 0x30]
lea ecx, [eax + 1]
cmp ecx, dword [esi + 0x70]
jbe 0x72fcb0
mov ecx, dword [edi - 4]
add edi, dword [esi + 0x68]
sub edi, ecx
cmp edi, dword [esi + 0x60]
jae 0x73033c
add eax, dword [esi + 0x64]
mov dword [esi + 4], eax
mov edi, ecx
jmp 0x72fcb3
lea ecx, [esi + 0xd0]
mov dword [esi + 0x178], 0xb
lea eax, [esi + 0x30]
push eax
call fcn.0055d5e0
mov eax, dword [0xb41700]
mov edi, dword [0xb416e8]
sub edi, dword [esi + 0x14]
add edi, eax
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
lea ecx, [esi + 0xb8]
call edi
mov eax, dword [ebp + 8]
lea ebx, [eax + 0x1c]
lea edx, [esi + 0x30]
cmp ebx, edx
mov ecx, dword [esi + 0xc]
je 0x7300c6
mov edi, dword [eax + 0x30]
cmp edi, ecx
jbe 0x7300a4
mov ecx, edi
mov edi, dword [ebx]
mov dword [esi], ecx
lea edx, [ecx + 1]
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0x31feeba2
cmp edx, ecx
jbe 0x73005f
mov ecx, dword [edi - 4]
mov edx, eax
xor edx, 0xce011ba1
add edx, edi
sub edx, ecx
mov edi, eax
xor edi, 0x31fee47d
cmp edx, edi
jae 0x7303a5
mov edx, eax
xor edx, 0x31fee479
mov edi, dword [esi]
add edi, edx
mov dword [esi + 0x178], 0xffffffff
mov dword [esi], edi
mov dword [esi + 4], ecx
mov ecx, eax
jmp 0x730066
mov ebx, dword [esi + 0x60]
add ebx, dword [esi]
mov ecx, eax
xor eax, str.5zmK
cmp dword [0xb416d0], eax
mov dword [esi + 0x60], ebx
jne 0x72fee0
mov eax, ecx
xor eax, 0xe011ba1
lea edx, [ebx + eax*4]
add edx, dword [ebx + eax*4]
mov dword [0xb416d0], 0xb34885c8
jmp 0x72fee4
mov edx, dword [ebx]
add edx, ebx
mov ebx, dword [esi + 0x18]
xor edi, edi
cmp dword [esi + 0x28], 0
mov eax, dword [esi + 8]
jle 0x72fbe4
mov ecx, eax
xor ecx, 0xc221f785
mov dword [esi + 0x6c], ecx
mov ecx, eax
xor ecx, 0xaf6ee9ec
mov dword [esi + 0x64], ecx
xor al, 0x5e
mov byte [esi + 0x1f], al
mov eax, dword [esi + 8]
xor al, 5
mov ecx, dword [esi + 8]
xor cl, 0xfa
add cl, al
mov byte [esi + 0x2f], cl
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0xfa6c3410
mov dword [esi + 0xb0], ecx
xor eax, 0x593cbef
mov dword [esi + 0xac], eax
mov eax, dword [0xb416d8]
mov dword [esi + 0x68], eax
mov eax, dword [0xb416d4]
mov dword [esi + 0xb4], eax
lea eax, [ebx - 1]
mov dword [esi + 0xa8], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0
xor ebx, ebx
jmp 0x72ff85
mov eax, dword [esi + 0x20]
xor al, ch
mov dword [esi + 0x20], eax
mov eax, dword [esi + 8]
inc edi
cmp edi, dword [esi + 0x28]
jge 0x72fbeb
mov dword [esi], ebx
mov ecx, dword [esi + 0x70]
lea eax, [ecx + edi]
mov ebx, edx
sub ebx, eax
mov eax, dword [esi + 4]
sbb eax, 0
cmp ebx, 1
sbb eax, 0
mov ch, byte [ecx + edi]
jl 0x72ffb0
mov ebx, dword [esi]
jmp 0x73002a
mov eax, dword [esi + 0xb4]
cmp eax, dword [esi + 0x64]
jne 0x72fffd
mov eax, ebx
mov cl, byte [esi + 0x1f]
sub al, cl
mul cl
mov cl, al
sub bl, al
mov eax, ebx
mul cl
sub cl, al
shl al, cl
mov ah, 1
mov cl, al
shl ah, cl
mov al, 1
mov cl, ah
shl al, cl
mov cl, 1
sub cl, al
shl al, cl
sub al, cl
mov dl, ch
mov cl, al
shl dl, cl
mov ebx, dword [esi]
add ebx, dword [esi + 0xb0]
mov eax, dword [esi + 0xac]
add ebx, eax
inc ebx
jmp 0x730018
mov eax, ebx
mov cl, byte [esi + 0x1f]
shl al, cl
mov dl, 1
mov cl, al
shl dl, cl
add edi, dword [esi + 0xa8]
add edi, ebx
add dl, byte [esi + 0x2f]
mov ebx, dword [esi]
inc ebx
and ch, dl
mov eax, dword [esi + 0x60]
lea edx, [eax + ebx*4]
add edx, dword [eax + ebx*4]
mov dword [esi + 4], 0
mov eax, dword [esi + 0x68]
cmp eax, dword [esi + 0x6c]
jne 0x72ff70
mov cl, ch
mov dword [esi], edx
mov edx, ebx
mov ebx, dword [esi + 0x20]
shl bl, cl
mov eax, ebx
sub al, ch
mul ch
mov dword [0xb416dc], 0xf596e3a0
xor bl, al
mov dword [esi + 0x20], ebx
mov ebx, edx
mov edx, dword [esi]
jmp 0x72ff78
mov ecx, eax
mov dword [esi + 4], edi
mov dword [esi], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ecx, 0xff19e3a5
mov dword [esi + 0x24], ecx
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
push dword [esi + 0x24]
call edi
add esp, 4
mov eax, dword [ebp + 8]
lea edx, [esi + 0x30]
movsd xmm0, qword [esi + 0x40]
movsd qword [ebx + 0x10], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebx], xmm0
mov dword [esi + 0x40], 0
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x44], ecx
mov byte [esi + 0x30], 0
mov ebx, dword [esi + 0x44]
cmp ebx, ecx
jbe 0x730177
mov edi, dword [esi + 0x30]
lea edx, [ebx + 1]
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0x31feeba2
cmp edx, ecx
mov dword [esi], edi
jbe 0x730139
mov ecx, eax
xor ecx, 0xce420456
mov edx, eax
xor edx, 0xce011ba1
sub edx, ecx
add edx, edi
mov edi, edx
xor edi, ecx
and edx, ecx
mov ecx, dword [esi]
mov ecx, dword [ecx - 4]
lea edx, [edi + edx*2]
sub edx, ecx
mov edi, eax
xor edi, 0x31fee47d
cmp edx, edi
jae 0x730387
mov edx, eax
xor edx, 0x31fee479
add ebx, edx
mov dword [esi + 0x178], 0xffffffff
mov dword [esi + 4], ebx
mov dword [esi], ecx
mov ebx, eax
jmp 0x73013e
mov ebx, eax
mov dword [esi + 4], edx
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
xor ebx, 0xff19e3a5
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push ebx
call edi
add esp, 4
mov eax, dword [ebp + 8]
lea edx, [esi + 0x30]
cmp byte [eax], 0
je 0x730327
xorps xmm0, xmm0
movaps xmmword [esi + 0x30], xmm0
mov dword [esi + 0xb8], 0xac0694
mov dword [esi + 0xbc], edx
lea ecx, [esi + 0xb8]
mov eax, dword [esi + 0x10]
mov dword [esi + eax*4 + 0xb8], ecx
mov dword [esi + 0x178], 0xa
call fcn.00730b60
mov eax, dword [esi + 0x10]
mov edi, dword [esi + eax*4 + 0xb8]
test edi, edi
mov edx, dword [esi + 0x18]
je 0x7301f5
xor ebx, ebx
lea eax, [esi + 0xb8]
cmp edi, eax
setne bl
mov eax, dword [edi]
mov ecx, dword [eax + edx*4]
mov dword [esi + 0x10], ecx
mov dword [esi + 0x178], 0xffffffff
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi + 0x10]
mov edx, dword [esi + 0x18]
mov edi, dword [esi + edx + 0x30]
mov edx, dword [esi + 0x7c]
mov ebx, dword [esi + edx + 0x30]
mov ecx, dword [esi + edx + 0x34]
mov eax, dword [ebp + 8]
cmp byte [eax + 0x34], 0
je 0x730301
mov dword [esi + 0x10], ecx
mov ecx, dword [esi + 0x74]
mov ecx, dword [eax + ecx + 0x3c]
cmp ecx, dword [esi + 0xc]
jbe 0x7302f6
mov dword [esi + 4], ebx
mov dword [esi], edi
mov edi, dword [eax + 0x38]
mov edx, ecx
xor ecx, 1
mov dword [esi + 0x24], edx
and edx, 1
lea ebx, [ecx + edx*2]
mov eax, dword [esi + 8]
mov ecx, eax
xor ecx, 0x31feeba2
cmp ebx, ecx
jbe 0x7302b1
mov edx, eax
xor edx, 0xce011ba1
add edx, edi
mov ecx, dword [edi - 4]
movzx ebx, byte [0xac063c]
sub bl, byte [esi + 0x20]
sub edx, ecx
mov edi, dword [esi + 0x9c]
test dword [esi + 0xa0], edi
movzx ebx, bl
mov edi, 0
cmovne ebx, edi
add dword [0xb53348], ebx
mov edi, eax
xor edi, 0x31fee47d
cmp edx, edi
jae 0x7303b4
mov edx, eax
xor edx, 0x31fee479
mov ebx, dword [esi + 0x24]
add ebx, edx
add ebx, dword [0xb53350]
mov dword [esi + 0x178], 0xffffffff
mov dword [esi + 0x24], ecx
jmp 0x7302b4
mov dword [esi + 0x24], edi
xor eax, 0xff19e3a5
mov dword [esi + 8], eax
mov eax, dword [0xb41708]
mov edi, dword [0xb416ec]
sub edi, dword [esi + 0x14]
add edi, eax
mov dword [esi + 0x178], 0xffffffff
mov ecx, edi
call dword [0xb0836c]
mov ecx, dword [esi + 0x24]
mov edx, ebx
push dword [esi + 8]
call edi
add esp, 4
mov eax, dword [ebp + 8]
mov edx, dword [esi + 0x7c]
mov edi, dword [esi]
mov ebx, dword [esi + 4]
mov byte [eax + 0x38], 0
mov byte [eax + 0x34], 0
mov ecx, dword [esi + 0x10]
mov dword [eax + 0x38], edi
mov dword [eax + 0x3c], ebx
mov dword [eax + 0x40], ecx
mov byte [eax + edx + 0x3c], 0
mov ecx, dword [esi + 0xa4]
mov dword [eax + ecx + 0x3c], ecx
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x74]
mov dword [eax + edx + 0x3c], ecx
mov byte [eax + 0x34], 1
mov ecx, dword [esi + 0x170]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0x178], 5
call fcn.00748ef1
mov dword [esi + 0x178], 0
call fcn.00748ef1
mov dword [esi + 0x178], 1
call fcn.00748ef1
mov dword [esi + 0x178], 2
call fcn.00748ef1
mov dword [esi + 0x178], 4
call fcn.00748ef1
mov dword [esi + 0x178], 7
call fcn.00748ef1
mov dword [esi + 0x178], 3
call fcn.00748ef1
mov dword [esi + 0x178], 6
call fcn.00748ef1
mov dword [esi + 0x178], 8
call fcn.00748ef1
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
call fcn.0077ccd0
nop word cs:[eax + eax]
push ebp
sub esp, 0xc
lea esi, [ebp - 0x17c]
mov ebp, dword [esi + 0x168]
mov eax, dword [esi + 0x10]
mov edi, dword [esi + eax*4 + 0xb8]
test edi, edi
je 0x730512
xor ebx, ebx
lea eax, [esi + 0xb8]
cmp edi, eax
setne bl
mov eax, dword [edi]
mov ecx, dword [esi + 0x18]
mov ecx, dword [eax + ecx*4]
mov dword [esi + 0xc], ecx
call dword [0xb0836c]
mov ecx, edi
push ebx
call dword [esi + 0xc]
add esp, 0xc
pop ebp
ret