Function at 0x401000
Capabilities:
Link many functions at runtime

Disassembly:
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edi
push str.kernel32.dll
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x401023
push str.CloseHandle
push eax
call edi
jmp 0x401025
xor eax, eax
push str.kernel32.dll
mov dword [0x421e2c], eax
call esi
test eax, eax
je 0x40103f
push str.CreateFileW
push eax
call edi
jmp 0x401041
xor eax, eax
push str.shell32.dll
mov dword [0x421e30], eax
call esi
test eax, eax
je 0x40105b
push str.SHGetKnownFolderPath
push eax
call edi
jmp 0x40105d
xor eax, eax
push str.kernel32.dll
mov dword [0x421e24], eax
call esi
test eax, eax
je 0x401077
push str.FreeLibrary
push eax
call edi
jmp 0x401079
xor eax, eax
push str.kernel32.dll
mov dword [0x421e34], eax
call esi
test eax, eax
je 0x401093
push str.MoveFileW
push eax
call edi
jmp 0x401095
xor eax, eax
push str.kernel32.dll
mov dword [0x421e38], eax
call esi
test eax, eax
je 0x4010af
push str.GetFileSizeEx
push eax
call edi
jmp 0x4010b1
xor eax, eax
push str.kernel32.dll
mov dword [0x421e3c], eax
call esi
test eax, eax
je 0x4010cb
push str.GetWindowsDirectoryA
push eax
call edi
jmp 0x4010cd
xor eax, eax
push str.kernel32.dll
mov dword [0x421e40], eax
call esi
test eax, eax
je 0x4010e7
push str.GetVolumeInformationA
push eax
call edi
jmp 0x4010e9
xor eax, eax
push str.kernel32.dll
mov dword [0x421e44], eax
call esi
test eax, eax
je 0x401103
push 0x41cb74
push eax
call edi
jmp 0x401105
xor eax, eax
push str.user32.dll
mov dword [0x421e48], eax
call esi
test eax, eax
je 0x40111f
push str.wsprintfW
push eax
call edi
jmp 0x401121
xor eax, eax
push str.user32.dll
mov dword [0x421e50], eax
call esi
test eax, eax
je 0x40113b
push str.wsprintfA
push eax
call edi
jmp 0x40113d
xor eax, eax
push str.user32.dll
mov dword [0x421e4c], eax
call esi
test eax, eax
je 0x401157
push str.OpenClipboard
push eax
call edi
jmp 0x401159
xor eax, eax
push str.user32.dll
mov dword [0x421e5c], eax
call esi
test eax, eax
je 0x401173
push str.GetClipboardData
push eax
call edi
jmp 0x401175
xor eax, eax
push str.kernel32.dll
mov dword [0x421e60], eax
call esi
test eax, eax
je 0x40118f
push str.VirtualAlloc
push eax
call edi
jmp 0x401191
xor eax, eax
push str.kernel32.dll
mov dword [0x421e68], eax
call esi
test eax, eax
je 0x4011ab
push str.ReadFile
push eax
call edi
jmp 0x4011ad
xor eax, eax
push str.kernel32.dll
mov dword [0x421e6c], eax
call esi
test eax, eax
je 0x4011c7
push 0x41cbe8
push eax
call edi
jmp 0x4011c9
xor eax, eax
push str.kernel32.dll
mov dword [0x421e70], eax
call esi
test eax, eax
je 0x4011e3
push str.VirtualFree
push eax
call edi
jmp 0x4011e5
xor eax, eax
push str.user32.dll
mov dword [0x421e74], eax
call esi
test eax, eax
je 0x4011ff
push str.SetClipboardData
push eax
call edi
jmp 0x401201
xor eax, eax
push str.kernel32.dll
mov dword [0x421e54], eax
call esi
test eax, eax
je 0x40121b
push str.SetFilePointer
push eax
call edi
jmp 0x40121d
xor eax, eax
push str.kernel32.dll
mov dword [0x421e78], eax
call esi
test eax, eax
je 0x401237
push str.CreateDirectoryW
push eax
call edi
jmp 0x401239
xor eax, eax
push str.kernel32.dll
mov dword [0x421e7c], eax
call esi
test eax, eax
je 0x401253
push str.FindFirstFileW
push eax
call edi
jmp 0x401255
xor eax, eax
push str.kernel32.dll
mov dword [0x421e80], eax
call esi
test eax, eax
je 0x40126f
push str.FindNextFileW
push eax
call edi
jmp 0x401271
xor eax, eax
push str.kernel32.dll
mov dword [0x421e84], eax
call esi
test eax, eax
je 0x40128b
push str.FindClose
push eax
call edi
jmp 0x40128d
xor eax, eax
push str.kernel32.dll
mov dword [0x421e88], eax
call esi
test eax, eax
je 0x4012a7
push str.CopyFileW
push eax
call edi
jmp 0x4012a9
xor eax, eax
push str.kernel32.dll
mov dword [0x421e8c], eax
call esi
test eax, eax
je 0x4012c3
push str.CreateMutexA
push eax
call edi
jmp 0x4012c5
xor eax, eax
push str.kernel32.dll
mov dword [0x421ecc], eax
call esi
test eax, eax
je 0x4012df
push 0x41cc7c
push eax
call edi
jmp 0x4012e1
xor eax, eax
push str.kernel32.dll
mov dword [0x421e20], eax
call esi
test eax, eax
je 0x4012fb
push str.GetSystemDirectoryW
push eax
call edi
jmp 0x4012fd
xor eax, eax
push str.kernel32.dll
mov dword [0x421e94], eax
call esi
test eax, eax
je 0x401317
push 0x41cc9c
push eax
call edi
jmp 0x401319
xor eax, eax
push str.user32.dll
mov dword [0x421e98], eax
call esi
test eax, eax
je 0x401333
push str.CloseClipboard
push eax
call edi
jmp 0x401335
xor eax, eax
push str.shell32.dll
mov dword [0x421e64], eax
call esi
test eax, eax
je 0x40134f
push str.SHGetFolderPathW
push eax
call edi
jmp 0x401351
xor eax, eax
push str.shlwapi.dll
mov dword [0x421e28], eax
call esi
test eax, eax
je 0x40136b
push str.PathFindFileNameW
push eax
call edi
jmp 0x40136d
xor eax, eax
push str.urlmon.dll
mov dword [0x421e9c], eax
call esi
test eax, eax
je 0x401387
push str.URLDownloadToFileW
push eax
call edi
jmp 0x401389
xor eax, eax
push str.kernel32.dll
mov dword [0x421ea0], eax
call esi
test eax, eax
je 0x4013a3
push str.CreateProcessW
push eax
call edi
jmp 0x4013a5
xor eax, eax
push str.kernel32.dll
mov dword [0x421ea4], eax
call esi
test eax, eax
je 0x4013bf
push 0x41cd1c
push eax
call edi
jmp 0x4013c1
xor eax, eax
push str.shell32.dll
mov dword [0x421ed0], eax
call esi
test eax, eax
je 0x4013db
push str.ShellExecuteW
push eax
call edi
jmp 0x4013dd
xor eax, eax
push str.kernel32.dll
mov dword [0x421ea8], eax
call esi
test eax, eax
je 0x4013f7
push 0x41cd40
push eax
call edi
jmp 0x4013f9
xor eax, eax
push str.user32.dll
mov dword [0x421eac], eax
call esi
test eax, eax
je 0x401413
push str.EmptyClipboard
push eax
call edi
jmp 0x401415
xor eax, eax
push str.kernel32.dll
mov dword [0x421e58], eax
call esi
test eax, eax
je 0x40142f
push str.GetShortPathNameW
push eax
call edi
jmp 0x401431
xor eax, eax
push str.Advapi32.dll
mov dword [0x421eb0], eax
call esi
test eax, eax
je 0x40144b
push str.RegCreateKeyExA
push eax
call edi
jmp 0x40144d
xor eax, eax
push str.Advapi32.dll
mov dword [0x421eb4], eax
call esi
test eax, eax
je 0x401467
push str.RegOpenKeyExA
push eax
call edi
jmp 0x401469
xor eax, eax
push str.Advapi32.dll
mov dword [0x421eb8], eax
call esi
test eax, eax
je 0x401483
push str.RegSetValueExA
push eax
call edi
jmp 0x401485
xor eax, eax
push str.Advapi32.dll
mov dword [0x421ebc], eax
call esi
test eax, eax
je 0x40149f
push str.RegSetValueExW
push eax
call edi
jmp 0x4014a1
xor eax, eax
push str.Advapi32.dll
mov dword [0x421ec0], eax
call esi
test eax, eax
je 0x4014bb
push str.RegQueryValueExA
push eax
call edi
jmp 0x4014bd
xor eax, eax
push str.Advapi32.dll
mov dword [0x421ec4], eax
call esi
test eax, eax
je 0x4014d7
push str.RegCloseKey
push eax
call edi
jmp 0x4014d9
xor eax, eax
push str.user32.dll
mov dword [0x421ec8], eax
call esi
test eax, eax
je 0x4014fb
push str.MessageBoxA
push eax
call edi
pop edi
mov dword [0x421e90], eax
xor eax, eax
pop esi
ret
xor eax, eax
pop edi
mov dword [0x421e90], eax
pop esi
ret