Function at 0x10079cbf
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ecx
push esi
push edi
push 0x1000e0f4
mov edi, ecx
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [edi + 0xe4], eax
test eax, eax
jne 0x10079d2f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x10079cf2
movzx esi, si
or esi, 0x80070000
mov eax, dword [section..data]
cmp eax, section..data
je 0x1007a41d
test byte [eax + 0x1c], 2
je 0x1007a41d
cmp byte [eax + 0x19], 2
jb 0x1007a41d
push esi
push dword [eax + 0x14]
mov edx, 0x1000e734
push dword [eax + 0x10]
push 0xa
pop ecx
call fcn.1000f74e
jmp 0x1007a41d
push 0x1000e108
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e120
push dword [edi + 0xe4]
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e138
push dword [edi + 0xe4]
mov dword [edi + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e14c
push dword [edi + 0xe4]
mov dword [edi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e164
push dword [edi + 0xe4]
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e180
push dword [edi + 0xe4]
mov dword [edi + 8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1a0
push dword [edi + 0xe4]
mov dword [edi + 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1b4
push dword [edi + 0xe4]
mov dword [edi + 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1c8
push dword [edi + 0xe4]
mov dword [edi + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1e0
push dword [edi + 0xe4]
mov dword [edi + 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1ec
push dword [edi + 0xe4]
mov dword [edi + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e1fc
push dword [edi + 0xe4]
mov dword [edi + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e218
push dword [edi + 0xe4]
mov dword [edi + 0x2c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e230
push dword [edi + 0xe4]
mov dword [edi + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e250
push dword [edi + 0xe4]
mov dword [edi + 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e260
push dword [edi + 0xe4]
mov dword [edi + 0x38], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e270
push dword [edi + 0xe4]
mov dword [edi + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e28c
push dword [edi + 0xe4]
mov dword [edi + 0x40], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e2ac
push dword [edi + 0xe4]
mov dword [edi + 0x44], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e2c0
push dword [edi + 0xe4]
mov dword [edi + 0x48], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x4c], eax
push 0x1000e2e0
push dword [edi + 0xe4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e2f0
push dword [edi + 0xe4]
mov dword [edi + 0x50], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e30c
push dword [edi + 0xe4]
mov dword [edi + 0x54], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e334
push dword [edi + 0xe4]
mov dword [edi + 0x8c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e348
push dword [edi + 0xe4]
mov dword [edi + 0x58], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e35c
push dword [edi + 0xe4]
mov dword [edi + 0x5c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e370
push dword [edi + 0xe4]
mov dword [edi + 0x60], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e388
push dword [edi + 0xe4]
mov dword [edi + 0x64], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e3a8
push dword [edi + 0xe4]
mov dword [edi + 0x68], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e3bc
push dword [edi + 0xe4]
mov dword [edi + 0x6c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e3d4
push dword [edi + 0xe4]
mov dword [edi + 0x70], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e3f0
push dword [edi + 0xe4]
mov dword [edi + 0x74], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e40c
push dword [edi + 0xe4]
mov dword [edi + 0x78], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e430
push dword [edi + 0xe4]
mov dword [edi + 0x7c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e454
push dword [edi + 0xe4]
mov dword [edi + 0x80], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e47c
push dword [edi + 0xe4]
mov dword [edi + 0x84], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e4a4
push dword [edi + 0xe4]
mov dword [edi + 0x88], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e4b8
push dword [edi + 0xe4]
mov dword [edi + 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e4d0
push dword [edi + 0xe4]
mov dword [edi + 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e4ec
push dword [edi + 0xe4]
mov dword [edi + 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e508
push dword [edi + 0xe4]
mov dword [edi + 0x9c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e520
push dword [edi + 0xe4]
mov dword [edi + 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e538
push dword [edi + 0xe4]
mov dword [edi + 0xa4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e54c
push dword [edi + 0xe4]
mov dword [edi + 0xa8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e564
push dword [edi + 0xe4]
mov dword [edi + 0xac], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e588
push dword [edi + 0xe4]
mov dword [edi + 0xb0], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e5ac
push dword [edi + 0xe4]
mov dword [edi + 0xb4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e5d0
push dword [edi + 0xe4]
mov dword [edi + 0xb8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e5f4
push dword [edi + 0xe4]
mov dword [edi + 0xbc], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e618
push dword [edi + 0xe4]
mov dword [edi + 0xc0], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e63c
push dword [edi + 0xe4]
mov dword [edi + 0xc4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e660
push dword [edi + 0xe4]
mov dword [edi + 0xc8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e680
push dword [edi + 0xe4]
mov dword [edi + 0xcc], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e6a4
push dword [edi + 0xe4]
mov dword [edi + 0xd0], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e6c4
push dword [edi + 0xe4]
mov dword [edi + 0xd4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e6e8
push dword [edi + 0xe4]
mov dword [edi + 0xd8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1000e70c
push dword [edi + 0xe4]
mov dword [edi + 0xdc], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0xe0], eax
cmp dword [edi], esi
je 0x1007a3eb
cmp dword [edi + 0x10], esi
je 0x1007a3eb
cmp dword [edi + 0x14], esi
je 0x1007a3eb
cmp dword [edi + 4], esi
je 0x1007a3eb
cmp dword [edi + 8], esi
je 0x1007a3eb
cmp dword [edi + 0xc], esi
je 0x1007a3eb
cmp dword [edi + 0x18], esi
je 0x1007a3eb
cmp dword [edi + 0x1c], esi
je 0x1007a3eb
cmp dword [edi + 0x20], esi
je 0x1007a3eb
cmp dword [edi + 0x24], esi
je 0x1007a3eb
cmp dword [edi + 0x28], esi
je 0x1007a3eb
cmp dword [edi + 0x2c], esi
je 0x1007a3eb
cmp dword [edi + 0x30], esi
je 0x1007a3eb
cmp dword [edi + 0x34], esi
je 0x1007a3eb
cmp dword [edi + 0x38], esi
je 0x1007a3eb
cmp dword [edi + 0x3c], esi
je 0x1007a3eb
cmp dword [edi + 0x40], esi
je 0x1007a3eb
cmp dword [edi + 0x44], esi
je 0x1007a3eb
cmp dword [edi + 0x48], esi
je 0x1007a3eb
cmp dword [edi + 0x4c], esi
je 0x1007a3eb
cmp dword [edi + 0x50], esi
je 0x1007a3eb
cmp dword [edi + 0x54], esi
je 0x1007a3eb
cmp dword [edi + 0x58], esi
je 0x1007a3eb
cmp dword [edi + 0x5c], esi
je 0x1007a3eb
cmp dword [edi + 0x60], esi
je 0x1007a3eb
cmp dword [edi + 0x64], esi
je 0x1007a3eb
cmp dword [edi + 0x68], esi
je 0x1007a3eb
cmp dword [edi + 0x6c], esi
je 0x1007a3eb
cmp dword [edi + 0x70], esi
je 0x1007a3eb
cmp dword [edi + 0x74], esi
je 0x1007a3eb
cmp dword [edi + 0x78], esi
je 0x1007a3eb
cmp dword [edi + 0x7c], esi
je 0x1007a3eb
cmp dword [edi + 0x80], esi
je 0x1007a3eb
cmp dword [edi + 0x84], esi
je 0x1007a3eb
cmp dword [edi + 0x88], esi
je 0x1007a3eb
cmp dword [edi + 0x8c], esi
je 0x1007a3eb
cmp dword [edi + 0x90], esi
je 0x1007a3eb
cmp dword [edi + 0x98], esi
je 0x1007a3eb
cmp dword [edi + 0x94], esi
je 0x1007a3eb
cmp dword [edi + 0x9c], esi
je 0x1007a3eb
cmp dword [edi + 0xa0], esi
je 0x1007a3eb
cmp dword [edi + 0xa8], esi
je 0x1007a3eb
cmp dword [edi + 0xac], esi
je 0x1007a3eb
cmp dword [edi + 0xb0], esi
je 0x1007a3eb
cmp dword [edi + 0xb4], esi
je 0x1007a3eb
cmp dword [edi + 0xb8], esi
je 0x1007a3eb
cmp dword [edi + 0xbc], esi
je 0x1007a3eb
cmp dword [edi + 0xc0], esi
je 0x1007a3eb
cmp dword [edi + 0xc4], esi
je 0x1007a3eb
cmp dword [edi + 0xc8], esi
je 0x1007a3eb
cmp dword [edi + 0xcc], esi
je 0x1007a3eb
cmp dword [edi + 0xd0], esi
je 0x1007a3eb
cmp dword [edi + 0xd4], esi
je 0x1007a3eb
cmp dword [edi + 0xd8], esi
je 0x1007a3eb
cmp dword [edi + 0xdc], esi
je 0x1007a3eb
test eax, eax
je 0x1007a3eb
cmp dword [edi + 0xa4], esi
jne 0x1007a41d
mov esi, 0x80004005
mov ecx, dword [section..data]
cmp ecx, section..data
je 0x1007a41d
test byte [ecx + 0x1c], 2
je 0x1007a41d
cmp byte [ecx + 0x19], 2
jb 0x1007a41d
push dword [ecx + 0x14]
mov edx, 0x1000e734
push dword [ecx + 0x10]
push 0xb
pop ecx
call fcn.100122b8
pop edi
mov eax, esi
pop esi
pop ecx
ret