Function at 0x140001000
Capabilities:
Link many functions at runtime

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
lea rcx, str.Urlmon.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140001054
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_load_library_Urlmondll__n
mov r8d, 0x21
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov eax, 0xffffffff
add rsp, 0x30
pop rbp
ret
lea rdx, str.URLDownloadToFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d420], rax
test rax, rax
jne 0x1400010a9
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pURLDownloadToFile__n
mov r8d, 0x32
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov eax, 0xffffffff
add rsp, 0x30
pop rbp
ret
lea rcx, str.Kernel32.dll
mov qword [rsp + 0x50], rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
jne 0x1400010f9
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], rdi
mov rcx, rax
lea r8d, [rdi + 0x23]
lea rdx, str.Faild_to_load_library_kernel32Dll__n
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
lea eax, [rdi - 1]
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.HeapAlloc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d488], rax
test rax, rax
jne 0x140001153
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHeapAlloc__n
mov r8d, 0x2a
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rdi, qword [rsp + 0x50]
mov eax, 0xffffffff
add rsp, 0x30
pop rbp
ret
lea rdx, [0x14000a2f8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d458], rax
test rax, rax
jne 0x1400011ad
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHeapFree__n
mov r8d, 0x29
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rdi, qword [rsp + 0x50]
mov eax, 0xffffffff
add rsp, 0x30
pop rbp
ret
lea rdx, str.HeapReAlloc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d010], rax
test rax, rax
jne 0x140001207
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_HeapReAlloc__n
mov r8d, 0x2b
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rdi, qword [rsp + 0x50]
mov eax, 0xffffffff
add rsp, 0x30
pop rbp
ret
lea rcx, str.Wininet.dll
mov qword [rsp + 0x48], rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
jne 0x14000125c
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8d, [rbx + 0x22]
lea rdx, str.Faild_to_load_library_WinInetDll__n
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rdi, qword [rsp + 0x50]
lea eax, [rbx - 1]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rbp
ret
lea rdx, str.InternetOpenW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d008], rax
test rax, rax
jne 0x1400012bb
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pInternetOpenW__n
mov r8d, 0x2e
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.InternetConnectW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d480], rax
test rax, rax
jne 0x14000131a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pInternetConnectW__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.HttpOpenRequestW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d4b0], rax
test rax, rax
jne 0x140001379
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHttpOpenRequestW__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.HttpSendRequestW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d430], rax
test rax, rax
jne 0x1400013d8
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHttpSendRequestW__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.InternetReadFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d478], rax
test rax, rax
jne 0x140001437
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pInternetReadFile__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.InternetOpenUrlW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d498], rax
test rax, rax
jne 0x140001496
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pInternetOpenUrlW__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.HttpQueryInfoW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d4a0], rax
test rax, rax
jne 0x1400014f5
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHttpQueryInfoW__n
mov r8d, 0x2f
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.HttpAddRequestHeadersW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d468], rax
test rax, rax
jne 0x140001554
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pHttpAddRequestHeadersW__n
mov r8d, 0x37
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rcx, str.Advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
jne 0x1400015a4
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8d, [rbx + 0x23]
lea rdx, str.Faild_to_get_Load_lib_Advapi32dll__n
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rdi, qword [rsp + 0x50]
lea eax, [rbx - 1]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rbp
ret
lea rdx, str.RegOpenKeyW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d428], rax
test rax, rax
jne 0x140001603
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pRegOpenKeyW__n
mov r8d, 0x2c
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.RegCloseKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d490], rax
test rax, rax
jne 0x140001662
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pRegCloseKey__n
mov r8d, 0x2c
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.RegQueryValueExW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d440], rax
test rax, rax
jne 0x1400016c1
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_pRegQueryValueExW__n
mov r8d, 0x31
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.RegCreateKeyW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d470], rax
test rax, rax
jne 0x14000171d
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov r8d, 0x2e
lea rdx, str.Faild_to_get_function_address_pRegCreateKeyW__n
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
xor eax, eax
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.RegSetKeyValueA
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d450], rax
test rax, rax
jne 0x140001760
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov r8d, 0x30
lea rdx, str.Faild_to_get_function_address_pRegSetKeyValueA__n
jmp 0x140001702
lea rcx, str.Crypt32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x1400017b5
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_load_library_Crypt32dll__n
mov r8d, 0x22
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.CryptUnprotectData
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d4a8], rax
test rax, rax
jne 0x1400017fb
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov r8d, 0x33
lea rdx, str.Faild_to_get_function_address_pCryptUnprotectData__n
jmp 0x140001702
lea rdx, str.FindFirstFileW
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d460], rax
test rax, rax
jne 0x14000185a
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_FindFirstFileW__n
mov r8d, 0x2e
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
lea rdx, str.FindNextFileW
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000d448], rax
test rax, rax
jne 0x14000170b
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r9, [rbp + 0x10]
mov qword [rsp + 0x20], 0
mov rcx, rax
lea rdx, str.Faild_to_get_function_address_FindNextFileW__n
mov r8d, 0x2d
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov rbx, qword [rsp + 0x48]
mov eax, 0xffffffff
mov rdi, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret