Function at 0x140002a28
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rbx, str.msvcrt.dll
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscat
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043298], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscmp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400430e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsncpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043178], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcslen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043138], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.strlen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043190], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.realloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.free
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043260], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsstr
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, [0x140026c20]
mov rcx, rbx
mov qword [0x140043238], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026c10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026c30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026c40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MoveFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400430f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetFileSizeEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043108], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetWindowsDirectoryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetVolumeInformationA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTickCount
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140043140], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140043110], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043200], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualAlloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026cf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026cfc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043168], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualFree
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043208], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026d18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043150], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateDirectoryW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026d40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043240], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026d50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043180], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.FindClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043288], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CopyFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026d80]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043158], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026d90]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043268], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026da8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043120], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateProcessW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140043218], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.ShellExecuteW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400430e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026de8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetShortPathNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043270], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetEnvironmentVariableW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.wininet.dll
mov rcx, rbx
mov qword [0x140043148], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026e30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043128], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026e50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026e68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140043228], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026e78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpOpenRequestW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043100], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpSendRequestA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043198], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026ed8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140043248], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140043278], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140043290], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetKnownFolderPath
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.shlwapi.dll
mov rcx, rbx
mov qword [0x1400432c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathIsURLW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043210], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathCombineW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043160], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathFindFileNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.Advapi32.dll
mov rcx, rbx
mov qword [0x1400432b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegDeleteKeyW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400430f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegOpenKeyExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegSetValueExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043170], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegCloseKey
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043118], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026fd0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043220], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTokenInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043280], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027000]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400431d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetUserNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043188], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027028]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.ole32.dll
mov rcx, rbx
mov qword [0x140043230], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoUninitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400432d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoCreateInstance
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140043130], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoInitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140043250], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MessageBoxA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140043258], rax
xor eax, eax
add rsp, 0x20
pop rbx
ret