Function at 0x140002a28
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rbx, str.msvcrt.dll
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400422b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscat
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042278], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscmp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsncpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042158], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcslen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042118], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.strlen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042170], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.realloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042290], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.free
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042240], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsstr
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, [0x140025c20]
mov rcx, rbx
mov qword [0x140042218], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025c10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400422a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025c30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042280], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025c40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MoveFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetFileSizeEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetWindowsDirectoryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042190], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetVolumeInformationA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTickCount
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140042120], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x1400420f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualAlloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042188], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025cf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025cfc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042148], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualFree
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025d18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042130], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateDirectoryW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042180], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025d40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042220], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025d50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042160], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.FindClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042268], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CopyFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025d80]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042138], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025d90]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042248], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025da8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042100], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateProcessW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x1400421f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.ShellExecuteW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025de8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetShortPathNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042250], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetEnvironmentVariableW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.wininet.dll
mov rcx, rbx
mov qword [0x140042128], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025e30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042108], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025e50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042288], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025e68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140042208], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025e78]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042198], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpOpenRequestW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpSendRequestA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042178], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025ed8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140042228], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140042258], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140042270], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetKnownFolderPath
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.shlwapi.dll
mov rcx, rbx
mov qword [0x1400422a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathIsURLW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathCombineW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042140], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathFindFileNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.Advapi32.dll
mov rcx, rbx
mov qword [0x140042298], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegDeleteKeyW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegOpenKeyExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegSetValueExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042150], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegCloseKey
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400420f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140025fd0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042200], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTokenInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042260], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026000]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400421b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetUserNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042168], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140026028]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.ole32.dll
mov rcx, rbx
mov qword [0x140042210], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoUninitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400422b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoCreateInstance
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140042110], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoInitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140042230], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MessageBoxA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140042238], rax
xor eax, eax
add rsp, 0x20
pop rbx
ret