Function at 0x10009c20
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0x204
mov eax, dword [0x10050fc0]
xor eax, esp
mov dword [esp + 0x200], eax
call fcn.10002690
push 0x1ff
lea eax, [esp + 5]
push 0
push eax
mov byte [esp + 0xc], 0
call fcn.10027470
mov eax, 0x100fd2c8
add esp, 0xc
mov dword [0x100c30d0], 0
mov dword [0x100c30d4], 0
mov edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10009c70
push ebp
push esi
push edi
lea edi, [esp + 0xc]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10009c81
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push str.11111111111111111111111111111111
rep movsb byte es:[edi], byte [esi]
call fcn.10009a60
lea ecx, [esp + 0x10]
push ecx
call fcn.10009a60
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esp, 8
lea edx, [esp + 0xc]
push edx
call ebp
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x10131dd8], eax
test eax, eax
jne 0x10009d1a
lea eax, [esp + 0xc]
push eax
call fcn.10009a60
push str.set_path_is_error
call fcn.10009a60
add esp, 8
lea ecx, [esp + 0xc]
push ecx
call edi
mov dword [0x10131dd8], eax
test eax, eax
jne 0x10009d1a
push str.LoadLibrary_set_path_is_error
call fcn.10009a60
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.1002742c
add esp, 0x204
ret
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x100442dc
push eax
call esi
mov dword [0x100c3104], eax
test eax, eax
jne 0x10009d38
push str.GetProcAddress_SetPathSecMainInfo_fail
jmp 0x10009cf8
mov edx, dword [0x10131dd8]
push 0x1004429c
push edx
call esi
mov dword [0x100c3100], eax
test eax, eax
jne 0x10009d56
push str.GetProcAddress_SetFileExportMainInfo_fail
jmp 0x10009cf8
mov eax, dword [0x10131dd8]
push 0x10044258
push eax
call esi
mov dword [0x100c30fc], eax
test eax, eax
jne 0x10009d73
push str.GetProcAddress_SetFileProtectMainInfo_fail
jmp 0x10009cf8
mov ecx, dword [0x10131dd8]
push 0x10044218
push ecx
call esi
mov dword [0x100c30f8], eax
test eax, eax
jne 0x10009d94
push str.GetProcAddress_SetRegeditMainInfo_fail
jmp 0x10009cf8
mov edx, dword [0x10131dd8]
push 0x100441d8
push edx
call esi
mov dword [0x100c30f4], eax
test eax, eax
jne 0x10009db5
push str.GetProcAddress_SetSoftInstallMainInfo_fail
jmp 0x10009cf8
mov eax, dword [0x10131dd8]
push 0x10044194
push eax
call esi
mov dword [0x100c30f0], eax
test eax, eax
jne 0x10009dd5
push str.GetProcAddress_SetHttpAccessMainInfo_fail
jmp 0x10009cf8
mov ecx, dword [0x10131dd8]
push 0x1004414c
push ecx
call esi
mov dword [0x100c30e8], eax
test eax, eax
jne 0x10009df6
push str.GetProcAddress_SetHttpVisitedMainInfo_fail
jmp 0x10009cf8
mov edx, dword [0x10131dd8]
push 0x10044108
push edx
call esi
mov dword [0x100c30ec], eax
test eax, eax
jne 0x10009e17
push str.GetProcAddress_LPSetHttpVisitedMainInfo_fail
jmp 0x10009cf8
mov eax, dword [0x10131dd8]
push 0x100440c4
push eax
call esi
mov dword [0x100c30e4], eax
test eax, eax
jne 0x10009e37
push str.GetProcAddress_SetClearHttpHost_fail
jmp 0x10009cf8
mov ecx, dword [0x10131dd8]
push 0x1004408c
push ecx
call esi
mov dword [0x100c30e0], eax
test eax, eax
jne 0x10009e58
push str.GetProcAddress_SetRemoteDrive_fail
jmp 0x10009cf8
mov edx, dword [0x10131dd8]
push 0x10044054
push edx
call esi
mov dword [0x100c30dc], eax
test eax, eax
jne 0x10009e79
push str.GetProcAddress_SetYbsForbidPrinter_fail
jmp 0x10009cf8
mov eax, dword [0x10131dd8]
push 0x10044018
push eax
call esi
mov dword [0x10103864], eax
test eax, eax
je 0x10009d00
mov ecx, dword [0x10131dd8]
push 0x10044000
push ecx
call esi
mov dword [0x10103ab4], eax
test eax, eax
je 0x10009d00
mov edx, dword [0x10131dd8]
push 0x10043fec
push edx
call esi
mov dword [0x1010571c], eax
test eax, eax
je 0x10009d00
mov eax, dword [0x10131dd8]
push 0x10043fd4
push eax
call esi
mov dword [0x10106c74], eax
test eax, eax
je 0x10009d00
mov ecx, dword [0x10131dd8]
push 0x10043fb4
push ecx
call esi
mov dword [0x10131d54], eax
test eax, eax
je 0x10009d00
mov edx, dword [0x10131dd8]
push 0x10043f94
push edx
call esi
mov dword [0x10131da0], eax
test eax, eax
je 0x10009d00
mov eax, dword [0x10131dd8]
push 0x10043f70
push eax
call esi
mov dword [0x10131da4], eax
test eax, eax
je 0x10009d00
mov ecx, dword [0x10131dd8]
push 0x10043f4c
push ecx
call esi
mov edx, dword [0x10131dd8]
push 0x10043f28
push edx
mov dword [0x10131da8], eax
call esi
mov dword [0x10131dac], eax
mov eax, dword [0x10131dd8]
push 0x10043f00
push eax
call esi
mov ecx, dword [0x10131dd8]
push 0x10043ef0
push ecx
mov dword [0x10131db0], eax
call esi
mov dword [0x10131db4], eax
test eax, eax
jne 0x10009f8c
push str.Get_StartStopHook_Function_Address_Error_
jmp 0x10009cf8
mov edx, dword [0x10131dd8]
push 0x10043eb4
push edx
call esi
mov dword [0x10131dc0], eax
test eax, eax
jne 0x10009fad
push str.Get_GetShareData_Function_Address_Error_
jmp 0x10009cf8
mov eax, dword [0x10131dd8]
push 0x10043e74
push eax
call esi
mov dword [0x10131db8], eax
test eax, eax
jne 0x10009fcd
push str.Get_SetThreadSwitchFlag_Function_Address_Error_
jmp 0x10009cf8
mov ecx, dword [0x10131dd8]
push 0x10043e2c
push ecx
call esi
mov dword [0x10131dbc], eax
test eax, eax
jne 0x10009ff1
push str.Get_SetUnhookProcessList_Function_Address_Error_
call fcn.10009a60
add esp, 4
mov edx, dword [0x10131dd8]
push 0x10043de8
push edx
call esi
mov dword [0x100c30d8], eax
test eax, eax
jne 0x1000a012
push str.GetProcAddress_GetHookHandle_fail
jmp 0x10009cf8
cmp dword [esp + 0x214], 0
je 0x1000a080
push 0x10043c28
call edi
mov dword [0x10131ddc], eax
test eax, eax
je 0x1000a04b
push str.GetModuleFileNameExA
push eax
call esi
mov dword [0x100c30d0], eax
mov eax, dword [0x10131ddc]
push str.EnumProcessModules
push eax
call esi
mov dword [0x100c30d4], eax
push 0x100435b4
call ebp
mov dword [0x10131dd4], eax
test eax, eax
jne 0x1000a065
push str.GetModuleHandle_zwquerysysteminfomation_error
jmp 0x10009cf8
push 0x10043d4c
push eax
call esi
mov dword [0x100fd2c4], eax
test eax, eax
jne 0x1000a0e1
push str._GetProcAddress_zwquerysysteminfomation_error
jmp 0x10009cf8
push 0x10043d0c
call edi
push 0x10043cf0
push eax
mov dword [0x10131de0], eax
call esi
mov ecx, dword [0x10131de0]
push 0x10043ce0
push ecx
mov dword [0x100b8ebc], eax
call esi
mov edx, dword [0x10131de0]
push 0x10043cd0
push edx
mov dword [0x100c2ec4], eax
call esi
mov dword [0x100c30c8], eax
test eax, eax
je 0x10009d00
cmp dword [0x100b8ebc], 0
je 0x10009d00
cmp dword [0x100c2ec4], 0
je 0x10009d00
mov ecx, dword [esp + 0x20c]
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 1
call fcn.1002742c
add esp, 0x204
ret