Function at 0x10032260
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
cmp dword [0x10102dd0], 0
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
je 0x10032309
push str.ntdll.dll
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
call ebx
mov esi, eax
test esi, esi
je 0x100322ff
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100322d7
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xc]
push ecx
call eax
movzx eax, word [ebp - 4]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 1
push esi
call edi
cmp dword [ebp - 8], 0
je 0x100322ff
cmp dword [ebp - 0xc], 0xa
jne 0x100322ff
mov eax, dword [0x101090b8]
mov ecx, 1
cmp dword [ebp - 4], 0x55f0
cmovae eax, ecx
mov dword [0x101090b8], eax
mov dword [0x10102dd0], 0
cmp dword [0x101090b8], 0
je 0x1003231e
pop edi
pop esi
mov eax, 0xb
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1010206c], 0
je 0x100323b8
push str.ntdll.dll
mov dword [ebp - 0x10], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
call ebx
mov esi, eax
test esi, esi
je 0x100323ae
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10032380
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp - 8]
push ecx
lea ecx, [ebp - 0x10]
push ecx
call eax
movzx eax, word [ebp - 4]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 1
push esi
call edi
cmp dword [ebp - 0xc], 0
je 0x100323ae
mov eax, dword [ebp - 0x10]
cmp eax, 6
jne 0x10032399
cmp dword [ebp - 8], 4
je 0x100323a4
jmp 0x100323ae
cmp eax, 0xa
jne 0x100323ae
cmp dword [ebp - 8], 0
jne 0x100323ae
mov dword [0x10108700], 1
mov dword [0x1010206c], 0
cmp dword [0x10108700], 0
je 0x100323cd
pop edi
pop esi
mov eax, 0xa
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10102dc8], 0
je 0x1003245e
push str.ntdll.dll
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
call ebx
mov esi, eax
test esi, esi
je 0x10032454
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1003242f
lea ecx, [ebp - 8]
push ecx
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp - 0xc]
push ecx
call eax
movzx eax, word [ebp - 8]
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 1
push esi
call edi
cmp dword [ebp - 0x10], 0
je 0x10032454
cmp dword [ebp - 0xc], 6
jne 0x10032454
mov eax, dword [0x101090b0]
mov ecx, 1
cmp dword [ebp - 4], 2
cmove eax, ecx
mov dword [0x101090b0], eax
mov dword [0x10102dc8], 0
cmp dword [0x101090b0], 0
jne 0x100325ad
cmp dword [0x10102dcc], 0
je 0x100324fc
push str.ntdll.dll
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
call ebx
mov esi, eax
test esi, esi
je 0x100324f2
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100324cd
lea ecx, [ebp - 8]
push ecx
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp - 0xc]
push ecx
call eax
movzx eax, word [ebp - 8]
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 1
push esi
call edi
cmp dword [ebp - 0x10], 0
je 0x100324f2
cmp dword [ebp - 0xc], 6
jne 0x100324f2
mov eax, dword [0x101090b4]
mov ecx, 1
cmp dword [ebp - 4], 3
cmove eax, ecx
mov dword [0x101090b4], eax
mov dword [0x10102dcc], 0
cmp dword [0x101090b4], 0
jne 0x100325ad
cmp dword [0x10102014], 0
je 0x1003259a
push str.ntdll.dll
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
call ebx
mov esi, eax
test esi, esi
je 0x10032590
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1003256b
lea ecx, [ebp - 8]
push ecx
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp - 0xc]
push ecx
call eax
movzx eax, word [ebp - 8]
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 1
push esi
call edi
cmp dword [ebp - 0x10], 0
je 0x10032590
cmp dword [ebp - 0xc], 6
jne 0x10032590
mov eax, dword [0x101082c0]
mov ecx, 1
cmp dword [ebp - 4], 1
cmove eax, ecx
mov dword [0x101082c0], eax
mov dword [0x10102014], 0
mov eax, dword [0x101082c0]
neg eax
pop edi
sbb eax, eax
pop esi
and eax, 7
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 8
pop ebx
mov esp, ebp
pop ebp
ret