Function at 0x100ea760
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10342f76
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x105be7d0]
xor eax, esp
mov dword [esp + 0x28], eax
push esi
push edi
mov eax, dword [0x105be7d0]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], eax
xor eax, eax
push 0x10
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
push str.2345Pdf_x100.dll
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], 0
mov word [esp + 0x24], ax
call fcn.100cdd90
mov dword [esp + 0x40], 1
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
push 0x58
push edi
call esi
mov ecx, dword [esp + 0x10]
push 0x5a
push edi
mov dword [ecx + 4], eax
call esi
mov esi, dword [esp + 0x10]
push edi
push 0
mov dword [esi], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esi + 4]
movsd xmm4, qword [0x105890c0]
movsd xmm5, qword [0x105888f8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10589080]
cvtpd2ps xmm3, xmm0
divss xmm3, dword [0x10588cd4]
cvtps2pd xmm0, xmm3
movss dword [esi + 8], xmm3
subsd xmm0, qword [0x10588870]
movss dword [esi + 0x14], xmm3
andpd xmm0, xmm4
comisd xmm5, xmm0
jbe 0x100ea89e
mov esi, dword [esp + 0x14]
xor eax, eax
mov ecx, esi
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
lea eax, [esp + 0x1c]
push eax
call fcn.100cd880
mov dword [esp + 0x18], 1
mov byte [esp + 0x40], 0
jmp 0x100ea9bb
xor ecx, ecx
xor eax, eax
cvtps2pd xmm2, xmm3
jmp 0x100ea8b0
movss xmm1, dword [eax + 0x105bec54]
movapd xmm0, xmm2
cvtps2pd xmm1, xmm1
subsd xmm0, xmm1
andpd xmm0, xmm4
comisd xmm5, xmm0
ja 0x100ea8d3
comisd xmm2, xmm1
jbe 0x100ea8e0
movss xmm0, dword [eax + 0x105bec58]
comiss xmm0, xmm3
ja 0x100ea8ed
add eax, 0x4c
inc ecx
cmp eax, 0xe4
jb 0x100ea8b0
jmp 0x100ea92a
imul ecx, ecx, 0x4c
mov eax, dword [ecx + 0x105bec50]
lea edx, [ecx + 0x105bec10]
mov dword [esi + 0xc], eax
cmp word [edx], 0
jne 0x100ea909
xor ecx, ecx
jmp 0x100ea91f
mov ecx, edx
lea edi, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100ea910
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.100cdd90
movss xmm0, dword [esi + 0x14]
xor eax, eax
divss xmm0, dword [esi + 0xc]
movss dword [esi + 0x10], xmm0
mov esi, dword [esp + 0x14]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
cmp dword [esp + 0x30], 8
jae 0x100ea972
mov eax, dword [esp + 0x2c]
inc eax
je 0x100ea98a
add eax, eax
push eax
lea eax, [esp + 0x20]
push eax
push esi
call dword [sym.imp.MSVCR120.dll_memmove]
add esp, 0xc
jmp 0x100ea98a
mov byte [esp + 0x40], 2
mov eax, dword [esp + 0x1c]
mov dword [esi], eax
mov byte [esp + 0x40], 1
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x14], eax
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
mov dword [esp + 0x18], 1
mov byte [esp + 0x40], al
cmp dword [esp + 0x30], 8
jb 0x100ea9cf
push dword [esp + 0x1c]
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], eax
mov word [esp + 0x1c], ax
mov eax, esi
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.1033d458
add esp, 0x38
ret 8