Function at 0x1400b8090
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x1400b80b3
lea rdx, str.McModulePathFromCLSIDW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b80cd
lea rdx, str.McModulePathFromCLSIDA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b80e7
lea rdx, str.McLoadLibraryW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x48], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8101
lea rdx, str.McLoadLibraryA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x50], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b811b
lea rdx, str.McCreateProcessW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x58], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8135
lea rdx, str.McCreateProcessA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x60], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b814f
lea rdx, str.McCreateProcess2W
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x68], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8169
lea rdx, str.McCreateProcess2A
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x70], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8183
lea rdx, str.McIsNTAdmin
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x78], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b81a0
lea rdx, str.McDoesFileExistW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x80], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b81bd
lea rdx, str.McDoesFileExistA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x88], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b81da
lea rdx, str.McGetProgramFilesPathW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x90], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b81f7
lea rdx, str.McGetProgramFilesPathA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x98], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8214
lea rdx, str.McRegDeleteKeyW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xa0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8231
lea rdx, str.McRegDeleteKeyA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xa8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b824e
lea rdx, str.McDeleteFilesDeferedW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xb0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b826b
lea rdx, str.McDeleteFilesDeferedA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xb8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8288
lea rdx, str.McDeleteDirectoryDeferedW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xc0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b82a5
lea rdx, str.McDeleteDirectoryDeferedA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xc8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b82c2
lea rdx, str.McCopyFilesW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xd0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b82df
lea rdx, str.McCopyFilesA
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xd8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b82fc
lea rdx, str.McCreateDirWithPermissions
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xe0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8319
lea rdx, str.McGetApplicationDataDirectory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xe8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8336
lea rdx, str.McGetOSVersion
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xf0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8353
lea rdx, str.McGetOSVersion2
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0xf8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8370
lea rdx, str.McGetMSCVersion
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x110], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b838d
lea rdx, str.McShellExecute
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x118], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b83aa
lea rdx, str.IsPPInstalled
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x120], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b83c7
lea rdx, str.McCreateTask
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x128], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b83e4
lea rdx, str.McDeleteTask
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x130], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8401
lea rdx, str.McEnableTask
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x138], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b841e
lea rdx, str.McDisableTask
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x140], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b843b
lea rdx, str.McIsFullScreen
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x148], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8458
lea rdx, str.McIsMetroMode
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x150], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8475
lea rdx, str.McBeginFSMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x158], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8492
lea rdx, str.McEndFSMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x160], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b84af
lea rdx, str.McBeginMetroMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x168], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b84cc
lea rdx, str.McEndMetroMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x170], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b84e9
lea rdx, str.LaunchUIHost
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x178], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8506
lea rdx, str.IsUIHostRunning
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x180], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8523
lea rdx, str.McGetHardwareID
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x188], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8540
lea rdx, str.McGetWindowsID
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x190], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b855d
lea rdx, str.McGetMachineID
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x198], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b857a
lea rdx, str.McBeginBMMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1a0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8597
lea rdx, str.McEndBMMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1a8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b85b4
lea rdx, str.McIsIdleMode
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1b0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b85d1
lea rdx, str.McIsIdleMode2
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1b8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b85ee
lea rdx, str.McBeginCSMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1c0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b860b
lea rdx, str.McEndCSMonitor
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1c8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8628
lea rdx, str.IsCSModeOn
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1d0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8645
lea rdx, str.IsCSModeOn2
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1d8], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b8662
lea rdx, str.GetPlatformType
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1e0], rax
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400b867f
lea rdx, str.GetCPUVendorID
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x1e8], rax
mov al, 1
add rsp, 0x20
pop rbx
ret