Function at 0x70e80f10
Capabilities:
Link many functions at runtime

Disassembly:
push esi
push 0x70e90b5c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
jne 0x70e80f29
pop esi
jmp dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.RtlInitAnsiString
push esi
call edi
mov dword [0x70ea1174], eax
test eax, eax
je 0x70e811ea
push str.LdrGetProcedureAddress
mov eax, esi
call fcn.70e73250
add esp, 4
mov dword [0x70ea1170], eax
test eax, eax
jne 0x70e80f72
push str.LdrGetProcedureAddress
push esi
call edi
mov dword [0x70ea1170], eax
test eax, eax
je 0x70e811ea
push str.RtlAnsiStringToUnicodeString
push esi
call edi
mov dword [0x70ea1178], eax
test eax, eax
je 0x70e811ea
push str.RtlUnicodeStringToAnsiString
push esi
call edi
mov dword [0x70ea117c], eax
test eax, eax
je 0x70e811ea
push str.RtlInitUnicodeString
push esi
call edi
mov dword [0x70ea1180], eax
test eax, eax
je 0x70e811ea
push str.RtlFreeUnicodeString
push esi
call edi
mov dword [0x70ea1184], eax
test eax, eax
je 0x70e811ea
push str.NtOpenKey
push esi
call edi
mov dword [0x70ea1188], eax
test eax, eax
je 0x70e811ea
push str.NtCreateKey
push esi
call edi
mov dword [0x70ea118c], eax
test eax, eax
je 0x70e811ea
push str.NtSetValueKey
push esi
call edi
mov dword [0x70ea1190], eax
test eax, eax
je 0x70e811ea
push str.NtQueryValueKey
push esi
call edi
mov dword [0x70ea1194], eax
test eax, eax
je 0x70e811ea
push str.NtDeleteValueKey
push esi
call edi
mov dword [0x70ea1198], eax
test eax, eax
je 0x70e811ea
push str.NtDeleteKey
push esi
call edi
mov dword [0x70ea119c], eax
test eax, eax
je 0x70e811ea
push str.NtNotifyChangeKey
push esi
call edi
mov dword [0x70ea11a0], eax
test eax, eax
je 0x70e811ea
push str.NtClose
push esi
call edi
mov dword [0x70ea11a4], eax
test eax, eax
je 0x70e811ea
push str.LdrQueryProcessModuleInformation
push esi
call edi
mov dword [0x70ea11a8], eax
test eax, eax
je 0x70e811ea
push str.LdrGetDllHandle
push esi
call edi
mov dword [0x70ea11ac], eax
test eax, eax
je 0x70e811ea
push str.NtQueryInformationProcess
push esi
call edi
mov dword [0x70ea11b0], eax
test eax, eax
je 0x70e811ea
push str.NtQueryInformationThread
push esi
call edi
mov dword [0x70ea11b4], eax
test eax, eax
je 0x70e811ea
push str.RtlGetVersion
mov eax, esi
call fcn.70e73250
add esp, 4
mov dword [0x70ea11b8], eax
test eax, eax
je 0x70e811ea
push str.swprintf
push esi
call edi
mov dword [0x70ea11cc], eax
test eax, eax
je 0x70e811ea
push str.RtlAdjustPrivilege
push esi
call edi
mov dword [0x70ea11d0], eax
test eax, eax
je 0x70e811ea
push str.RtlCreateAcl
push esi
call edi
mov dword [0x70ea11d4], eax
test eax, eax
je 0x70e811ea
push str.RtlAddAccessAllowedAceEx
push esi
call edi
mov dword [0x70ea11d8], eax
test eax, eax
je 0x70e811ea
push str.RtlCreateSecurityDescriptor
push esi
call edi
mov dword [0x70ea11dc], eax
test eax, eax
je 0x70e811ea
push str.RtlSetDaclSecurityDescriptor
push esi
call edi
mov dword [0x70ea11e0], eax
test eax, eax
je 0x70e811ea
push str.RtlSetOwnerSecurityDescriptor
push esi
call edi
mov dword [0x70ea11e4], eax
test eax, eax
je 0x70e811ea
push str.RtlSetGroupSecurityDescriptor
push esi
call edi
mov dword [0x70ea11e8], eax
test eax, eax
je 0x70e811ea
push str.RtlAbsoluteToSelfRelativeSD
push esi
call edi
mov dword [0x70ea11ec], eax
test eax, eax
je 0x70e811ea
push str.RtlInitializeSid
push esi
call edi
mov dword [0x70ea11f0], eax
test eax, eax
je 0x70e811ea
push str.RtlNtStatusToDosError
push esi
call edi
mov dword [0x70ea11f4], eax
test eax, eax
je 0x70e811ea
push str.LdrRegisterDllNotification
push esi
call edi
push str.LdrUnregisterDllNotification
push esi
mov dword [0x70ea11bc], eax
call edi
push str.LdrLockLoaderLock
push esi
mov dword [0x70ea11c0], eax
call edi
push str.LdrUnlockLoaderLock
push esi
mov dword [0x70ea11c4], eax
call edi
pop edi
mov dword [0x70ea11c8], eax
xor eax, eax
pop esi
ret
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop edi
mov eax, 0x7f
pop esi
ret