Function at 0x415e8e
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x416009
push str.SetErrorMode
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35d0], eax
push str.CreateToolhelp32Snapshot
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3548], eax
push str.Process32First
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e352c], eax
push str.Process32Next
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e345c], eax
push str.Module32First
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3414], eax
push str.GetDiskFreeSpaceExA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3438], eax
push str.GetLogicalDriveStringsA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34a0], eax
push str.GetDriveTypeA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3584], eax
push str.SearchPathA
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35e0], eax
push str.QueryPerformanceCounter
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3468], eax
push str.QueryPerformanceFrequency
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e344c], eax
cmp dword [0x4e35d0], 0
je 0x415fd7
cmp dword [0x4e3548], 0
je 0x415fd7
cmp dword [0x4e352c], 0
je 0x415fd7
cmp dword [0x4e345c], 0
je 0x415fd7
cmp dword [0x4e3438], 0
je 0x415fd7
cmp dword [0x4e34a0], 0
je 0x415fd7
cmp dword [0x4e3584], 0
je 0x415fd7
cmp dword [0x4e35e0], 0
je 0x415fd7
cmp dword [0x4e3468], 0
je 0x415fd7
cmp dword [0x4e344c], 0
jne 0x415fe1
mov dword [0x4e35e8], 1
push str.RegisterServiceProcess
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e355c], eax
cmp dword [0x4e355c], 0
je 0x416007
push 1
push 0
call dword [0x4e355c]
jmp 0x41601e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e35ec], eax
mov dword [0x4e35e8], 1
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x41619c
push str.SendMessageA
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3580], eax
push str.FindWindowA
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3534], eax
push str.IsWindow
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34d0], eax
push str.DestroyWindow
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35d4], eax
push str.OpenClipboard
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34fc], eax
push str.GetClipboardData
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e351c], eax
push str.CloseClipboard
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3578], eax
push str.ExitWindowsEx
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3484], eax
cmp dword [0x4e3580], 0
je 0x416116
cmp dword [0x4e3534], 0
je 0x416116
cmp dword [0x4e34d0], 0
je 0x416116
cmp dword [0x4e35d4], 0
je 0x416116
cmp dword [0x4e34fc], 0
je 0x416116
cmp dword [0x4e351c], 0
je 0x416116
cmp dword [0x4e3578], 0
je 0x416116
cmp dword [0x4e3484], 0
jne 0x416120
mov dword [0x4e35f0], 1
push str.GetAsyncKeyState
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34f8], eax
push str.GetKeyState
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3428], eax
push str.GetWindowTextA
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34cc], eax
push str.GetForegroundWindow
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34b8], eax
cmp dword [0x4e34f8], 0
je 0x416190
cmp dword [0x4e3428], 0
je 0x416190
cmp dword [0x4e34cc], 0
je 0x416190
cmp dword [0x4e34b8], 0
jne 0x41619a
mov dword [0x4e35f0], 1
jmp 0x4161b1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e35f4], eax
mov dword [0x4e35f0], 1
push str.userenv.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4161ed
push str.GetUserProfileDirectoryA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35e4], eax
cmp dword [0x4e35e4], 0
jne 0x4161eb
mov dword [0x4e3658], 1
jmp 0x416202
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e365c], eax
mov dword [0x4e3658], 1
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x41636e
push str.RegOpenKeyExA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3594], eax
push str.RegCreateKeyExA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34e4], eax
push str.RegSetValueExA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e354c], eax
push str.RegQueryValueExA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3444], eax
push str.RegDeleteValueA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e349c], eax
push str.RegCloseKey
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3508], eax
push str.RegEnumValueA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3454], eax
cmp dword [0x4e3594], 0
je 0x4162de
cmp dword [0x4e34e4], 0
je 0x4162de
cmp dword [0x4e354c], 0
je 0x4162de
cmp dword [0x4e3444], 0
je 0x4162de
cmp dword [0x4e349c], 0
je 0x4162de
cmp dword [0x4e3508], 0
je 0x4162de
cmp dword [0x4e3454], 0
jne 0x4162e8
mov dword [0x4e35f8], 1
push str.OpenProcessToken
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3510], eax
push str.LookupPrivilegeValueA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34ec], eax
push str.AdjustTokenPrivileges
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3590], eax
cmp dword [0x4e3510], 0
je 0x41633c
cmp dword [0x4e34ec], 0
je 0x41633c
cmp dword [0x4e3590], 0
jne 0x416346
mov dword [0x4e35f8], 1
push str.GetUserNameA
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3430], eax
cmp dword [0x4e3430], 0
jne 0x41636c
mov dword [0x4e35f8], 1
jmp 0x416383
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e35fc], eax
mov dword [0x4e35f8], 1
push str.gdi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x4164a3
push str.CreateDCA
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3518], eax
push str.CreateDIBSection
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3568], eax
push str.CreateCompatibleDC
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3570], eax
push str.GetDeviceCaps
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3530], eax
push str.GetDIBColorTable
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e346c], eax
push str.SelectObject
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3424], eax
push str.BitBlt
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e356c], eax
push str.DeleteDC
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3410], eax
push str.DeleteObject
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3494], eax
cmp dword [0x4e3518], 0
je 0x416497
cmp dword [0x4e3568], 0
je 0x416497
cmp dword [0x4e3570], 0
je 0x416497
cmp dword [0x4e3530], 0
je 0x416497
cmp dword [0x4e346c], 0
je 0x416497
cmp dword [0x4e3424], 0
je 0x416497
cmp dword [0x4e356c], 0
je 0x416497
cmp dword [0x4e3410], 0
je 0x416497
cmp dword [0x4e3494], 0
jne 0x4164a1
mov dword [0x4e3600], 1
jmp 0x4164b8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e3604], eax
mov dword [0x4e3600], 1
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x416859
push str.WSAStartup
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34a8], eax
push str.WSASocketA
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35c8], eax
push str.WSAAsyncSelect
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3458], eax
push str.__WSAFDIsSet
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3434], eax
push str.WSAIoctl
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34dc], eax
push str.WSAGetLastError
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34c4], eax
push str.WSACleanup
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3490], eax
push str.socket
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35a4], eax
push str.ioctlsocket
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35c0], eax
push str.connect
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34d8], eax
push str.inet_ntoa
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35b0], eax
push str.inet_addr
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3564], eax
push str.htons
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3528], eax
push str.htonl
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3524], eax
push str.ntohs
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3478], eax
push str.ntohl
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3470], eax
push str.send
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3574], eax
push str.sendto
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3588], eax
push str.recv
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3540], eax
push str.recvfrom
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3504], eax
push str.bind
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3554], eax
push str.select
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3514], eax
push str.listen
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3550], eax
push str.accept
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35b8], eax
push str.setsockopt
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e350c], eax
push str.getsockname
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34d4], eax
push str.gethostname
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e353c], eax
push str.gethostbyname
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35a8], eax
push str.gethostbyaddr
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34e8], eax
push str.getpeername
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e348c], eax
push str.closesocket
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35bc], eax
cmp dword [0x4e34a8], 0
je 0x41684d
cmp dword [0x4e35c8], 0
je 0x41684d
cmp dword [0x4e3458], 0
je 0x41684d
cmp dword [0x4e34dc], 0
je 0x41684d
cmp dword [0x4e34c4], 0
je 0x41684d
cmp dword [0x4e3490], 0
je 0x41684d
cmp dword [0x4e35a4], 0
je 0x41684d
cmp dword [0x4e35c0], 0
je 0x41684d
cmp dword [0x4e34d8], 0
je 0x41684d
cmp dword [0x4e35b0], 0
je 0x41684d
cmp dword [0x4e3564], 0
je 0x41684d
cmp dword [0x4e3528], 0
je 0x41684d
cmp dword [0x4e3524], 0
je 0x41684d
cmp dword [0x4e3478], 0
je 0x41684d
cmp dword [0x4e3574], 0
je 0x41684d
cmp dword [0x4e3588], 0
je 0x41684d
cmp dword [0x4e3540], 0
je 0x41684d
cmp dword [0x4e3504], 0
je 0x41684d
cmp dword [0x4e3554], 0
je 0x41684d
cmp dword [0x4e3514], 0
je 0x41684d
cmp dword [0x4e3550], 0
je 0x41684d
cmp dword [0x4e35b8], 0
je 0x41684d
cmp dword [0x4e350c], 0
je 0x41684d
cmp dword [0x4e34d4], 0
je 0x41684d
cmp dword [0x4e353c], 0
je 0x41684d
cmp dword [0x4e35a8], 0
je 0x41684d
cmp dword [0x4e34e8], 0
je 0x41684d
cmp dword [0x4e35bc], 0
jne 0x416857
mov dword [0x4e3608], 1
jmp 0x41686e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e360c], eax
mov dword [0x4e3608], 1
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4169db
push str.InternetGetConnectedState
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3480], eax
push str.InternetGetConnectedStateEx
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3418], eax
push str.HttpOpenRequestA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34f4], eax
push str.HttpSendRequestA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34ac], eax
push str.InternetConnectA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3500], eax
push str.InternetOpenA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34c8], eax
push str.InternetOpenUrlA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3448], eax
push str.InternetCrackUrlA
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3440], eax
push str.InternetReadFile
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3450], eax
push str.InternetCloseHandle
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3558], eax
cmp dword [0x4e3480], 0
je 0x41699e
cmp dword [0x4e3418], 0
je 0x41699e
cmp dword [0x4e34f4], 0
je 0x41699e
cmp dword [0x4e34ac], 0
je 0x41699e
cmp dword [0x4e3500], 0
je 0x41699e
cmp dword [0x4e34c8], 0
je 0x41699e
cmp dword [0x4e3448], 0
je 0x41699e
cmp dword [0x4e3440], 0
je 0x41699e
cmp dword [0x4e3450], 0
je 0x41699e
cmp dword [0x4e3558], 0
jne 0x4169a8
mov dword [0x4e3610], 1
cmp dword [0x4e34c8], 0
je 0x4169d9
push 0
push 0
push 0
push 0
push str.Mozilla_4.0__compatible_
call dword [0x4e34c8]
mov dword [0x4e34e0], eax
cmp dword [0x4e34e0], 0
jne 0x4169d9
and dword [0x4e34e0], 0
jmp 0x4169f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e3614], eax
mov dword [0x4e3610], 1
and dword [0x4e34e0], 0
push str.icmp.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x416a6b
push str.IcmpCreateFile
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34bc], eax
push str.IcmpCloseHandle
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35dc], eax
push str.IcmpSendEcho
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3460], eax
cmp dword [0x4e34bc], 0
je 0x416a5f
cmp dword [0x4e35dc], 0
je 0x416a5f
cmp dword [0x4e3460], 0
jne 0x416a69
mov dword [0x4e3618], 1
jmp 0x416a80
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e361c], eax
mov dword [0x4e3618], 1
push str.netapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x416bd8
push str.NetShareAdd
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e343c], eax
push str.NetShareDel
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3420], eax
push str.NetShareEnum
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3488], eax
push str.NetScheduleJobAdd
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34b0], eax
push str.NetApiBufferFree
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35b4], eax
push str.NetRemoteTOD
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3474], eax
push str.NetUserAdd
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e342c], eax
push str.NetUserDel
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e341c], eax
push str.NetUserEnum
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3498], eax
push str.NetUserGetInfo
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e357c], eax
push str.NetMessageBufferSend
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3538], eax
cmp dword [0x4e343c], 0
je 0x416bcc
cmp dword [0x4e3420], 0
je 0x416bcc
cmp dword [0x4e3488], 0
je 0x416bcc
cmp dword [0x4e34b0], 0
je 0x416bcc
cmp dword [0x4e35b4], 0
je 0x416bcc
cmp dword [0x4e3474], 0
je 0x416bcc
cmp dword [0x4e342c], 0
je 0x416bcc
cmp dword [0x4e341c], 0
je 0x416bcc
cmp dword [0x4e3498], 0
je 0x416bcc
cmp dword [0x4e357c], 0
je 0x416bcc
cmp dword [0x4e3538], 0
jne 0x416bd6
mov dword [0x4e3620], 1
jmp 0x416bed
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e3624], eax
mov dword [0x4e3620], 1
push str.dnsapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x416c45
push str.DnsFlushResolverCache
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3464], eax
push str.DnsFlushResolverCacheEntry_A
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3520], eax
cmp dword [0x4e3464], 0
je 0x416c39
cmp dword [0x4e3520], 0
jne 0x416c43
mov dword [0x4e3628], 1
jmp 0x416c5a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e362c], eax
mov dword [0x4e3628], 1
push str.iphlpapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x416cb2
push str.GetIpNetTable
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35a0], eax
push str.DeleteIpNetEntry
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e359c], eax
cmp dword [0x4e35a0], 0
je 0x416ca6
cmp dword [0x4e359c], 0
jne 0x416cb0
mov dword [0x4e3630], 1
jmp 0x416cc7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e3634], eax
mov dword [0x4e3630], 1
push str.mpr.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x416d57
push str.WNetAddConnection2A
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35cc], eax
push str.WNetAddConnection2W
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35c4], eax
push str.WNetCancelConnection2A
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e358c], eax
push str.WNetCancelConnection2W
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e347c], eax
cmp dword [0x4e35cc], 0
je 0x416d4b
cmp dword [0x4e35c4], 0
je 0x416d4b
cmp dword [0x4e358c], 0
je 0x416d4b
cmp dword [0x4e347c], 0
jne 0x416d55
mov dword [0x4e3638], 1
jmp 0x416d6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e363c], eax
mov dword [0x4e3638], 1
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x416dc4
push str.ShellExecuteA
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34a4], eax
push str.SHChangeNotify
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3598], eax
cmp dword [0x4e34a4], 0
je 0x416db8
cmp dword [0x4e3598], 0
jne 0x416dc2
mov dword [0x4e3640], 1
jmp 0x416dd9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e3644], eax
mov dword [0x4e3640], 1
push str.odbc32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x416ea5
push str.SQLDriverConnect
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3560], eax
push str.SQLSetEnvAttr
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e35ac], eax
push str.SQLExecDirect
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34f0], eax
push str.SQLAllocHandle
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34b4], eax
push str.SQLFreeHandle
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e3544], eax
push str.SQLDisconnect
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4e34c0], eax
cmp dword [0x4e3560], 0
je 0x416e99
cmp dword [0x4e35ac], 0
je 0x416e99
cmp dword [0x4e34f0], 0
je 0x416e99
cmp dword [0x4e34b4], 0
je 0x416e99
cmp dword [0x4e3544], 0
je 0x416e99
cmp dword [0x4e34c0], 0
jne 0x416ea3
mov dword [0x4e3648], 1
jmp 0x416eba
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4e364c], eax
mov dword [0x4e3648], 1
push 1
pop eax
leave
ret