Function at 0x1006ef00
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0xc], ecx
push 9
mov dword [ebp - 4], edi
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
mov dword [esi], 0x6e72656b
mov dword [esi + 5], 0x32336c
mov byte [esi + 4], 0x65
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push esi
mov ebx, eax
call fcn.10028875
add esp, 4
test ebx, ebx
je 0x1006f28f
push 0x19
mov dword [ebp - 0x138], pe_nt_image_headers32
call fcn.10028f3b
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
add esp, 4
mov dword [esi + 0x14], 0x746f6873
push esi
push ebx
mov dword [esi + 6], 0x6c6f6f54
mov dword [esi + 0xb], 0x33706c65
mov byte [esi + 0x18], 0
mov dword [esi + 0x10], 0x70616e53
mov word [esi + 1], 0x6572
mov word [esi + 4], 0x6574
mov byte [esi + 0xf], 0x32
mov byte [esi], 0x43
mov byte [esi + 0xa], 0x68
mov byte [esi + 3], 0x61
call edi
push esi
mov dword [0x10097828], eax
call fcn.10028875
mov eax, dword [0x10097828]
add esp, 4
test eax, eax
je 0x1006f286
push 0
push 2
call eax
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
je 0x1006f286
push 0xf
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov dword [esi + 9], 0x73726946
mov word [esi + 4], 0x7365
mov word [esi + 0xd], 0x74
mov word [esi + 7], 0x3233
mov byte [esi + 6], 0x73
mov dword [esi], 0x636f7250
call edi
push esi
mov dword [0x10096ff8], eax
call fcn.10028875
mov eax, dword [0x10096ff8]
add esp, 4
test eax, eax
je 0x1006f235
lea ecx, [ebp - 0x138]
push ecx
push dword [ebp - 8]
call eax
cmp eax, 1
jne 0x1006f235
push 0xe
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov dword [esi + 0xa], 0x747865
mov dword [esi + 6], 0x4e323373
mov dword [esi + 1], 0x65636f72
mov byte [esi], 0x50
mov byte [esi + 5], 0x73
call edi
push esi
mov dword [0x1009700c], eax
call fcn.10028875
add esp, 4
cmp dword [0x1009700c], 0
je 0x1006f235
push 0xa
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
mov word [esi + 5], 0x642e
mov dword [esi], 0x6c64746e
mov word [esi + 8], 0x6c
mov byte [esi + 7], 0x6c
mov byte [esi + 4], 0x6c
call dword [0x10097000]
push esi
mov edi, eax
call fcn.10028875
push 9
call fcn.10028f3b
add esp, 8
mov esi, eax
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 2], 0x63697274
mov word [esi + 6], 0x706d
mov word [esi], 0x735f
mov byte [esi + 8], 0
call edi
push esi
mov dword [0x10097418], eax
call fcn.10028875
mov eax, dword [0x10097418]
add esp, 4
test eax, eax
je 0x1006f235
nop dword [eax]
push dword [ebp - 0xc]
lea ecx, [ebp - 0x114]
push ecx
call eax
add esp, 8
test eax, eax
jne 0x1006f216
push 0xc
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov word [esi + 1], 0x6570
mov byte [esi], 0x4f
mov word [esi + 9], 0x7373
mov dword [esi + 4], 0x636f7250
mov byte [esi + 3], 0x6e
mov byte [esi + 8], 0x65
mov byte [esi + 0xb], 0
call edi
push esi
mov dword [0x10097004], eax
call fcn.10028875
mov eax, dword [0x10097004]
add esp, 4
test eax, eax
je 0x1006f216
push dword [ebp - 0x130]
push 0
push 0x401
call eax
push 0x11
mov dword [ebp - 4], eax
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov word [esi + 4], 0x6e69
mov dword [esi + 0xb], 0x7365636f
mov word [esi + 0xf], 0x73
mov dword [esi + 7], 0x72506574
mov dword [esi], 0x6d726554
mov byte [esi + 6], 0x61
call edi
push esi
mov dword [0x10097014], eax
call fcn.10028875
mov eax, dword [0x10097014]
add esp, 4
test eax, eax
je 0x1006f1c8
push 0
push dword [ebp - 4]
call eax
push 0xc
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov dword [esi], 0x736f6c43
mov dword [esi + 5], 0x646e6148
mov word [esi + 9], 0x656c
mov byte [esi + 4], 0x65
mov byte [esi + 0xb], 0
call edi
push esi
mov dword [0x1009782c], eax
call fcn.10028875
mov eax, dword [0x1009782c]
add esp, 4
test eax, eax
je 0x1006f20f
push dword [ebp - 4]
call eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 8]
call dword [0x1009700c]
cmp eax, 1
jne 0x1006f235
mov eax, dword [0x10097418]
jmp 0x1006f100
push 0xc
call fcn.10028f3b
mov esi, eax
add esp, 4
push esi
push ebx
mov dword [esi + 1], 0x65736f6c
mov dword [esi + 8], 0x656c64
mov word [esi + 5], 0x6148
mov byte [esi], 0x43
mov byte [esi + 7], 0x6e
call edi
push esi
mov dword [0x1009782c], eax
call fcn.10028875
mov eax, dword [0x1009782c]
add esp, 4
test eax, eax
je 0x1006f27c
push dword [ebp - 8]
call eax
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret