Function at 0x1008ee00
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100b6e31
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x10], ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 1
push 0
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0xffffffff
call edi
push 0
push 0
push 1
push 0
mov dword [ebx + 8], eax
call edi
push 0
push 0
push 1
push 0
mov dword [ebx + 0xc], eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [ebx + 0x10], eax
lea eax, [ebx + 0x14]
push eax
call esi
mov dword [esp + 0x20], 0
mov dword [ebx + 0x2c], vtable.TThread_class_vbox::VBoxService_.0
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x38], 0
mov dword [ebx + 0x3c], ebx
mov byte [esp + 0x20], 1
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
call fcn.100957a0
mov dword [ebx + 0x40], eax
lea eax, [ebx + 0x48]
push eax
call esi
mov byte [esp + 0x20], 3
mov dword [ebx + 0xa8], 0
mov dword [ebx + 0xac], 0
call fcn.100698f0
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xb4], vtable.CWinPipeBuf.0
mov dword [ebx + 0xc4], 0x4000
mov dword [ebx + 0xbc], 0
mov dword [ebx + 0xb8], 0
mov dword [ebx + 0xc0], 0
mov byte [esp + 0x20], 5
mov byte [ebx + 0xc8], 0
mov dword [ebx + 0xcc], 0
mov dword [ebx + 0xd0], 0
call fcn.10034060
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd4]
push eax
call esi
mov dword [ebx + 0xec], 0
mov dword [ebx + 0x104], 0xf
mov dword [ebx + 0x100], 0
mov byte [ebx + 0xf0], 0
mov dword [ebx + 0x3820], 0
mov byte [esp + 0x20], 9
mov dword [ebx + 0x3828], 0
mov dword [ebx + 0x382c], 0
call fcn.10069980
mov dword [ebx + 0x3828], eax
lea eax, [ebx + 0x3830]
push eax
call esi
xor eax, eax
mov dword [ebx + 0x387c], 7
mov dword [ebx + 0x3878], 0
mov word [ebx + 0x3868], ax
xorps xmm0, xmm0
movsd qword [ebx + 0x3880], xmm0
mov dword [ebx + 0x389c], 0xf
mov dword [ebx + 0x3898], eax
mov byte [ebx + 0x3888], al
mov dword [ebx + 0x38b4], 0xf
mov dword [ebx + 0x38b0], eax
mov byte [ebx + 0x38a0], al
mov dword [ebx + 0x38cc], 0xf
mov dword [ebx + 0x38c8], eax
mov byte [ebx + 0x38b8], al
lea ecx, [ebx + 0x38d0]
mov byte [esp + 0x20], 0xf
call fcn.1000ebe0
mov dword [ebx + 0x3aa8], 0x100bce18
lea eax, [ebx + 0x3aac]
mov ecx, 1
xchg dword [eax], ecx
push 0x3704
lea esi, [ebx + 0x108]
mov dword [ebx + 0x3ab0], 0
push 0
push esi
mov dword [ebx + 0x3ab4], 0
call sub.MSVCR120.dll_memset
mov dword [esi], 1
mov dword [ebx + 0x3a8c], ebx
mov dword [ebx + 0x3ab0], ebx
call dword [sym.imp.MSVCR120.dll_rand]
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebx + 0x3848], 0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x100d1160]
mulss xmm0, dword [0x100d0e64]
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x100d1080]
cvtpd2ps xmm0, xmm0
movss dword [ebx + 0x384c], xmm0
mulss xmm0, xmm0
cvtps2pd xmm1, xmm0
movsd xmm0, qword [0x100d10f0]
subsd xmm0, xmm1
call sub.MSVCR120.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 0x48
lea eax, [ebx + 0x60]
mov dword [ebx + 0x3854], 0
push 0
push eax
mov dword [ebx + 0x3858], 0
movss dword [ebx + 0x3850], xmm0
mov byte [ebx + 0x385c], 0
mov dword [ebx + 0x3860], 0
mov dword [ebx + 0x3864], 0
call sub.MSVCR120.dll_memset
add esp, 0x18
push 0
push 0
push 1
push 0
call edi
mov dword [ebx + 0xb0], eax
mov eax, ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret