Function at 0x100025dd
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
push ebx
push esi
push edi
xor ebx, ebx
push 9
mov dword [ebp - 4], ebx
call fcn.10003f2a
mov esi, eax
pop ecx
push esi
mov dword [esi], 0x6e72656b
mov dword [esi + 5], 0x32336c
mov byte [esi + 4], 0x65
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
push esi
mov dword [ebp - 8], edi
call fcn.10003f33
pop ecx
test edi, edi
je 0x10002854
push ebx
push 2
mov dword [ebp - 0x130], 0x128
call fcn.10001f62
mov ebx, eax
pop ecx
pop ecx
cmp ebx, 0xffffffff
je 0x10002854
lea eax, [ebp - 0x130]
push eax
push ebx
call fcn.10001fcb
pop ecx
pop ecx
cmp eax, 1
jne 0x1000280e
push 0xa
call fcn.10003f2a
mov esi, eax
pop ecx
push esi
mov word [esi + 5], 0x642e
mov dword [esi], 0x6c64746e
mov word [esi + 8], 0x6c
mov byte [esi + 7], 0x6c
mov byte [esi + 4], 0x6c
call dword [0x10018938]
push esi
mov edi, eax
call fcn.10003f33
push 9
call fcn.10003f2a
pop ecx
mov esi, eax
pop ecx
push esi
push edi
mov dword [esi + 2], 0x63697274
mov word [esi + 6], 0x706d
mov word [esi], 0x735f
mov byte [esi + 8], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push esi
mov dword [0x10018958], eax
call fcn.10003f33
mov eax, dword [0x10018958]
pop ecx
test eax, eax
je 0x1000280b
push dword [ebp + 8]
lea ecx, [ebp - 0x10c]
push ecx
call eax
pop ecx
pop ecx
test eax, eax
jne 0x100027ea
push 0xc
call fcn.10003f2a
mov edi, dword [ebp - 8]
mov esi, eax
pop ecx
push esi
push edi
mov word [esi + 1], 0x6570
mov byte [esi], 0x4f
mov word [esi + 9], 0x7373
mov dword [esi + 4], 0x636f7250
mov byte [esi + 3], 0x6e
mov byte [esi + 8], 0x65
mov byte [esi + 0xb], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push esi
mov dword [0x10018954], eax
call fcn.10003f33
mov eax, dword [0x10018954]
pop ecx
test eax, eax
je 0x100027ed
push dword [ebp - 0x128]
push 0
push 0x401
call eax
push 0x11
mov dword [ebp - 4], eax
call fcn.10003f2a
mov esi, eax
pop ecx
push esi
push edi
mov word [esi + 4], 0x6e69
mov dword [esi + 0xb], 0x7365636f
mov word [esi + 0xf], 0x73
mov dword [esi + 7], 0x72506574
mov dword [esi], 0x6d726554
mov byte [esi + 6], 0x61
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push esi
mov dword [0x10018950], eax
call fcn.10003f33
mov eax, dword [0x10018950]
pop ecx
test eax, eax
je 0x1000279a
push 0
push dword [ebp - 4]
call eax
push 0xc
call fcn.10003f2a
mov esi, eax
pop ecx
push esi
push edi
mov dword [esi], 0x736f6c43
mov dword [esi + 5], 0x646e6148
mov word [esi + 9], 0x656c
mov byte [esi + 4], 0x65
mov byte [esi + 0xb], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push esi
mov dword [0x1001894c], eax
call fcn.10003f33
mov eax, dword [0x1001894c]
pop ecx
test eax, eax
je 0x100027e1
push dword [ebp - 4]
call eax
mov dword [ebp - 4], 1
jmp 0x100027ed
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x130]
push eax
push ebx
call fcn.10002019
pop ecx
pop ecx
cmp eax, 1
jne 0x1000280e
mov eax, dword [0x10018958]
jmp 0x100026d0
mov edi, dword [ebp - 8]
push 0xc
call fcn.10003f2a
mov esi, eax
pop ecx
push esi
push edi
mov dword [esi + 1], 0x65736f6c
mov dword [esi + 8], 0x656c64
mov word [esi + 5], 0x6148
mov byte [esi], 0x43
mov byte [esi + 7], 0x6e
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push esi
mov dword [0x1001894c], eax
call fcn.10003f33
pop ecx
mov ecx, dword [0x1001894c]
test ecx, ecx
je 0x10002854
push ebx
call ecx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret