Function at 0x1001a051
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp dword [0x100f23c8], 0
je 0x1001a06a
mov eax, dword [0x100f23c8]
jmp 0x1001a3eb
mov dword [ebp - 4], str.DtFrame32.dll
cmp dword [ebp + 8], 0
je 0x1001a07d
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
cmp dword [0x100f23cc], 0
jne 0x1001a095
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x100f23cc], eax
mov edx, dword [0x100f23cc]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
je 0x1001a3e6
push str.SetFlags
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2324], eax
push str.GetFlags
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2328], eax
push str.SetNoCheckCalling
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f234c], eax
push str.RmLoadLibrary
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f232c], eax
push str.RmLoadLibrary21
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2330], eax
push str.AddPassthru
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2334], eax
push str.DelPassthru
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2338], eax
push str.AddLocalPassthru
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f233c], eax
push str.DelLocalPassthru
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2340], eax
push str.GetNextCB
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2344], eax
push str.RegisterUnloadNotify
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2348], eax
push str.DtTransactionBegin
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2350], eax
push str.DtTransactionBeginEx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2354], eax
push str.DtTransactionCommit
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2358], eax
push str.DtInstallOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f235c], eax
push str.DtInstallOne2
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2360], eax
push str.DtInstallOne3
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2364], eax
push str.DtUninstallOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2368], eax
push str.DtSuspendOne
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f236c], eax
push str.DtResumeOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2370], eax
push str.DtGetRealPPointer
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f237c], eax
push str.DtInstallRaw
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2374], eax
push str.DtUninstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2378], eax
push str.DtCheckFuncInc
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2380], eax
push str.DtRecoverFuncInc
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2384], eax
push str.GetRestoredHookAPI
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2388], eax
push str.DelRestoredHookAPI
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f238c], eax
push str.IEATTransactionBegin
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2390], eax
push str.IEATTransactionBeginEx
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2394], eax
push str.IEATTransactionCommit
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f2398], eax
push str.IEATInstallOne
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f239c], eax
push str.IEATUninstallOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23a0], eax
push str.IEATInstallOneDWMsApi
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23a4], eax
push str.IEATUninstallOneDWMsApi
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23a8], eax
push str.IEATSuspendOne
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23ac], eax
push str.IEATResumeOne
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23b0], eax
push str.IEATGetRealPPointer
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23b4], eax
push str.IATInstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23b8], eax
push str.IATUninstallRaw
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23bc], eax
push str.EATInstallRaw
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23c0], eax
push str.EATUninstallRaw
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100f23c4], eax
mov dword [0x100f23c8], 1
mov eax, dword [0x100f23c8]
mov esp, ebp
pop ebp
ret