Function at 0x40b4d3
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
push 0x4283b4
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d708], eax
cmp dword [0x42d708], 0
jne 0x40b509
xor al, al
jmp 0x40b8e1
push 0x4283c4
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6a0], eax
cmp dword [0x42d6a0], 0
jne 0x40b52c
xor al, al
jmp 0x40b8e1
push 0x4283d4
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6e0], eax
cmp dword [0x42d6e0], 0
jne 0x40b54f
xor al, al
jmp 0x40b8e1
push str.GetModuleHandleA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d700], eax
cmp dword [0x42d700], 0
jne 0x40b572
xor al, al
jmp 0x40b8e1
push 0x4283fc
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6b0], eax
cmp dword [0x42d6b0], 0
jne 0x40b595
xor al, al
jmp 0x40b8e1
push 0x42840c
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d690], eax
cmp dword [0x42d690], 0
jne 0x40b5b8
xor al, al
jmp 0x40b8e1
push 0x428418
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d68c], eax
cmp dword [0x42d68c], 0
jne 0x40b5db
xor al, al
jmp 0x40b8e1
push str.GetSystemDirectoryW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6b8], eax
cmp dword [0x42d6b8], 0
jne 0x40b5fe
xor al, al
jmp 0x40b8e1
push str.CompareStringW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6c4], eax
cmp dword [0x42d6c4], 0
jne 0x40b621
xor al, al
jmp 0x40b8e1
push str.LockResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6dc], eax
cmp dword [0x42d6dc], 0
jne 0x40b644
xor al, al
jmp 0x40b8e1
push str.LoadResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6ec], eax
cmp dword [0x42d6ec], 0
jne 0x40b667
xor al, al
jmp 0x40b8e1
push str.FindResourceW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6fc], eax
cmp dword [0x42d6fc], 0
jne 0x40b68a
xor al, al
jmp 0x40b8e1
push str.FreeResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6d4], eax
cmp dword [0x42d6d4], 0
jne 0x40b6ad
xor al, al
jmp 0x40b8e1
push 0x428488
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d698], eax
cmp dword [0x42d698], 0
jne 0x40b6d0
xor al, al
jmp 0x40b8e1
push 0x42849c
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6c8], eax
cmp dword [0x42d6c8], 0
jne 0x40b6f3
xor al, al
jmp 0x40b8e1
push 0x4284b0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6d0], eax
cmp dword [0x42d6d0], 0
jne 0x40b716
xor al, al
jmp 0x40b8e1
push str.GetVersionExA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d710], eax
cmp dword [0x42d710], 0
jne 0x40b739
xor al, al
jmp 0x40b8e1
push str.SetDefaultDllDirectories
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d69c], eax
push str.IsWow64Process
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6a8], eax
cmp dword [0x42d6a8], 0
jne 0x40b76f
xor al, al
jmp 0x40b8e1
push 0x4284e4
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6bc], eax
cmp dword [0x42d6bc], 0
jne 0x40b792
xor al, al
jmp 0x40b8e1
push str.DebugBreak
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6cc], eax
cmp dword [0x42d6cc], 0
jne 0x40b7b5
xor al, al
jmp 0x40b8e1
push str.GetEnvironmentVariableW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6f8], eax
cmp dword [0x42d6f8], 0
jne 0x40b7d8
xor al, al
jmp 0x40b8e1
push 0x42851c
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6a4], eax
cmp dword [0x42d6a4], 0
jne 0x40b7fb
xor al, al
jmp 0x40b8e1
push str.ExpandEnvironmentStringsW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6b4], eax
cmp dword [0x42d6b4], 0
jne 0x40b81e
xor al, al
jmp 0x40b8e1
push 2
push str.ntdll.dll
call fcn.0040cf65
pop ecx
pop ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x40b83c
xor al, al
jmp 0x40b8e1
push str.NtOpenKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6f0], eax
cmp dword [0x42d6f0], 0
jne 0x40b85f
xor al, al
jmp 0x40b8e1
push str.NtEnumerateKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6e4], eax
cmp dword [0x42d6e4], 0
jne 0x40b87f
xor al, al
jmp 0x40b8e1
push str.NtQueryValueKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d6c0], eax
cmp dword [0x42d6c0], 0
jne 0x40b89f
xor al, al
jmp 0x40b8e1
push str.NtClose
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d694], eax
cmp dword [0x42d694], 0
jne 0x40b8bf
xor al, al
jmp 0x40b8e1
push str.RtlInitUnicodeString
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42d704], eax
cmp dword [0x42d704], 0
jne 0x40b8df
xor al, al
jmp 0x40b8e1
mov al, 1
leave
ret