Function at 0x34098bb1
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp dword [0x341a57c4], 0
je 0x34098bca
mov eax, dword [0x341a57c4]
jmp 0x34098f4b
mov dword [ebp - 4], str.DtFrame32.dll
cmp dword [ebp + 8], 0
je 0x34098bdd
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
cmp dword [0x341a57c8], 0
jne 0x34098bf5
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x341a57c8], eax
mov edx, dword [0x341a57c8]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x34098f46
push str.SetFlags
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5720], eax
push str.GetFlags
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5724], eax
push str.SetNoCheckCalling
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5748], eax
push str.RmLoadLibrary
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5728], eax
push str.RmLoadLibrary21
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a572c], eax
push str.AddPassthru
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5730], eax
push str.DelPassthru
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5734], eax
push str.AddLocalPassthru
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5738], eax
push str.DelLocalPassthru
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a573c], eax
push str.GetNextCB
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5740], eax
push str.RegisterUnloadNotify
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5744], eax
push str.DtTransactionBegin
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a574c], eax
push str.DtTransactionBeginEx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5750], eax
push str.DtTransactionCommit
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5754], eax
push str.DtInstallOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5758], eax
push str.DtInstallOne2
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a575c], eax
push str.DtInstallOne3
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5760], eax
push str.DtUninstallOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5764], eax
push str.DtSuspendOne
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5768], eax
push str.DtResumeOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a576c], eax
push str.DtGetRealPPointer
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5778], eax
push str.DtInstallRaw
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5770], eax
push str.DtUninstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5774], eax
push str.DtCheckFuncInc
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a577c], eax
push str.DtRecoverFuncInc
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5780], eax
push str.GetRestoredHookAPI
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5784], eax
push str.DelRestoredHookAPI
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5788], eax
push str.IEATTransactionBegin
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a578c], eax
push str.IEATTransactionBeginEx
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5790], eax
push str.IEATTransactionCommit
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5794], eax
push str.IEATInstallOne
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a5798], eax
push str.IEATUninstallOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a579c], eax
push str.IEATInstallOneDWMsApi
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57a0], eax
push str.IEATUninstallOneDWMsApi
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57a4], eax
push str.IEATSuspendOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57a8], eax
push str.IEATResumeOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57ac], eax
push str.IEATGetRealPPointer
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57b0], eax
push str.IATInstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57b4], eax
push str.IATUninstallRaw
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57b8], eax
push str.EATInstallRaw
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57bc], eax
push str.EATUninstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x341a57c0], eax
mov dword [0x341a57c4], 1
mov eax, dword [0x341a57c4]
mov esp, ebp
pop ebp
ret