Function at 0x40d05c
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push 0x43ccc0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
push 0x43ccd0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442da0], eax
cmp dword [0x442da0], 0
jne 0x40d092
xor al, al
jmp 0x40d46a
push 0x43cce0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d38], eax
cmp dword [0x442d38], 0
jne 0x40d0b5
xor al, al
jmp 0x40d46a
push 0x43ccf0
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d78], eax
cmp dword [0x442d78], 0
jne 0x40d0d8
xor al, al
jmp 0x40d46a
push str.GetModuleHandleA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d98], eax
cmp dword [0x442d98], 0
jne 0x40d0fb
xor al, al
jmp 0x40d46a
push 0x43cd18
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d48], eax
cmp dword [0x442d48], 0
jne 0x40d11e
xor al, al
jmp 0x40d46a
push 0x43cd28
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d28], eax
cmp dword [0x442d28], 0
jne 0x40d141
xor al, al
jmp 0x40d46a
push 0x43cd34
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d24], eax
cmp dword [0x442d24], 0
jne 0x40d164
xor al, al
jmp 0x40d46a
push 0x43cd40
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d50], eax
cmp dword [0x442d50], 0
jne 0x40d187
xor al, al
jmp 0x40d46a
push str.CompareStringW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d5c], eax
cmp dword [0x442d5c], 0
jne 0x40d1aa
xor al, al
jmp 0x40d46a
push str.LockResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d74], eax
cmp dword [0x442d74], 0
jne 0x40d1cd
xor al, al
jmp 0x40d46a
push str.LoadResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d84], eax
cmp dword [0x442d84], 0
jne 0x40d1f0
xor al, al
jmp 0x40d46a
push str.FindResourceW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d94], eax
cmp dword [0x442d94], 0
jne 0x40d213
xor al, al
jmp 0x40d46a
push str.FreeResource
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d6c], eax
cmp dword [0x442d6c], 0
jne 0x40d236
xor al, al
jmp 0x40d46a
push 0x43cda4
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d30], eax
cmp dword [0x442d30], 0
jne 0x40d259
xor al, al
jmp 0x40d46a
push 0x43cdb8
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d60], eax
cmp dword [0x442d60], 0
jne 0x40d27c
xor al, al
jmp 0x40d46a
push str.SetDllDirectoryW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d68], eax
cmp dword [0x442d68], 0
jne 0x40d29f
xor al, al
jmp 0x40d46a
push str.GetVersionExA
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442da8], eax
cmp dword [0x442da8], 0
jne 0x40d2c2
xor al, al
jmp 0x40d46a
push str.SetDefaultDllDirectories
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d34], eax
push str.IsWow64Process
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d40], eax
cmp dword [0x442d40], 0
jne 0x40d2f8
xor al, al
jmp 0x40d46a
push 0x43ce1c
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d54], eax
cmp dword [0x442d54], 0
jne 0x40d31b
xor al, al
jmp 0x40d46a
push str.DebugBreak
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d64], eax
cmp dword [0x442d64], 0
jne 0x40d33e
xor al, al
jmp 0x40d46a
push str.GetEnvironmentVariableW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d90], eax
cmp dword [0x442d90], 0
jne 0x40d361
xor al, al
jmp 0x40d46a
push str.SetEnvironmentVariableW
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d3c], eax
cmp dword [0x442d3c], 0
jne 0x40d384
xor al, al
jmp 0x40d46a
push 0x43ce6c
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d4c], eax
cmp dword [0x442d4c], 0
jne 0x40d3a7
xor al, al
jmp 0x40d46a
push 2
push 0x43ce88
call fcn.0040ef37
pop ecx
pop ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x40d3c5
xor al, al
jmp 0x40d46a
push str.NtOpenKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d88], eax
cmp dword [0x442d88], 0
jne 0x40d3e8
xor al, al
jmp 0x40d46a
push str.NtEnumerateKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d7c], eax
cmp dword [0x442d7c], 0
jne 0x40d408
xor al, al
jmp 0x40d46a
push str.NtQueryValueKey
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d58], eax
cmp dword [0x442d58], 0
jne 0x40d428
xor al, al
jmp 0x40d46a
push str.NtClose
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d2c], eax
cmp dword [0x442d2c], 0
jne 0x40d448
xor al, al
jmp 0x40d46a
push str.RtlInitUnicodeString
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x442d9c], eax
cmp dword [0x442d9c], 0
jne 0x40d468
xor al, al
jmp 0x40d46a
mov al, 1
leave
ret