Function at 0x10001470
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000d348
push 0x1000bd70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x304
push ebx
push esi
push edi
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x28], ebx
cmp dword [0x10010368], ebx
jne 0x10001816
cmp dword [0x1000f0dc], 0xffffffff
jne 0x10001816
mov eax, dword [0x10013f4c]
cmp eax, ebx
jne 0x10001519
mov eax, dword [0x10013f5c]
cmp eax, ebx
jne 0x10001500
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
jne 0x100014f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x100014f1
push 0x1000f104
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov eax, esi
mov dword [0x10013f5c], eax
cmp esi, ebx
jne 0x10001500
xor eax, eax
jmp 0x1000150c
push str.QueryActCtxW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10013f4c], eax
cmp eax, ebx
jne 0x10001519
xor eax, eax
jmp 0x1000152f
push ebx
push 8
lea ecx, [ebp - 0x24]
push ecx
push 1
push ebx
push 0x1000f0dc
push 0x80000010
call eax
cmp eax, ebx
je 0x1000181b
mov eax, dword [ebp - 0x24]
cmp eax, ebx
jne 0x100016d0
mov eax, dword [0x10013f5c]
cmp eax, ebx
jne 0x10001583
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
jne 0x10001574
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x10001574
push 0x1000f104
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov eax, esi
mov dword [0x10013f5c], eax
cmp esi, ebx
jne 0x10001583
xor eax, eax
jmp 0x1000158f
push str.GetModuleHandleExW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x1000181b
lea edx, [ebp - 0x2c]
push edx
push 0x1000f0dc
push 6
call eax
test eax, eax
je 0x1000181b
mov word [ebp - 0x2e], bx
mov word [ebp - 0x30], bx
push 0x106
lea eax, [ebp - 0x238]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, ebx
je 0x1000181b
cmp word [ebp - 0x30], bx
je 0x100015f3
push 0x6f
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x260], 0x20
mov dword [ebp - 0x25c], 0x88
lea edx, [ebp - 0x238]
mov dword [ebp - 0x258], edx
mov dword [ebp - 0x24c], 3
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x244], eax
mov eax, dword [0x10013f50]
cmp eax, ebx
jne 0x1000168a
mov eax, dword [0x10013f5c]
cmp eax, ebx
jne 0x10001670
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
jne 0x10001661
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x10001661
push 0x1000f104
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov eax, esi
mov dword [0x10013f5c], eax
cmp esi, ebx
jne 0x10001670
xor eax, eax
jmp 0x1000167c
push str.CreateActCtxW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10013f50], eax
cmp eax, ebx
jne 0x1000168a
or eax, 0xffffffff
jmp 0x10001693
lea ecx, [ebp - 0x260]
push ecx
call eax
mov dword [ebp - 0x24], eax
cmp eax, 0xffffffff
jne 0x100016c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x714
je 0x100016c1
cmp eax, 0x715
je 0x100016c1
cmp eax, 0x717
je 0x100016c1
cmp eax, 0x716
jne 0x1000181b
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [0x10010364], 1
mov dword [0x1000f0dc], eax
mov edi, eax
mov eax, dword [0x10013f58]
cmp eax, ebx
jne 0x1000173a
mov eax, dword [0x10013f5c]
cmp eax, ebx
jne 0x10001721
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
jne 0x10001712
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x10001712
push 0x1000f104
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov eax, esi
mov dword [0x10013f5c], eax
cmp esi, ebx
jne 0x10001721
xor eax, eax
jmp 0x1000172d
push str.ActivateActCtx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10013f58], eax
cmp eax, ebx
jne 0x1000173a
xor eax, eax
jmp 0x10001741
lea edx, [ebp - 0x28]
push edx
push edi
call eax
cmp eax, ebx
je 0x10001816
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2a4], 0x40
mov dword [ebp - 0x2f0], ebx
mov eax, dword [0x10013f54]
cmp eax, ebx
jne 0x100017dd
mov dword [ebp - 0x2f4], ebx
mov eax, dword [0x10013f5c]
cmp eax, ebx
jne 0x100017b8
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
mov dword [ebp - 0x2f8], esi
cmp esi, ebx
jne 0x100017a9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x100017a9
push 0x1000f104
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov dword [ebp - 0x2f8], esi
mov eax, esi
mov dword [0x10013f5c], eax
cmp esi, ebx
jne 0x100017b8
xor eax, eax
jmp 0x100017ca
push str.FindActCtxSectionStringW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2fc], eax
mov dword [0x10013f54], eax
cmp eax, ebx
jne 0x100017dd
xor eax, eax
jmp 0x100017f5
lea ecx, [ebp - 0x2a4]
push ecx
push 0x1000f130
push 2
push ebx
push ebx
call eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x300], eax
cmp eax, ebx
je 0x1000180a
push 0x1000f130
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], 0xffffffff
call fcn.10001830
mov edi, 1
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret