Function at 0x1400029ec
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rbx, str.msvcrt.dll
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400452c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscat
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045288], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcscmp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsncpy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045168], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcslen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045128], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.strlen
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045180], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.realloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400452a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.free
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045250], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wcsstr
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, [0x140027818]
mov rcx, rbx
mov qword [0x140045228], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027808]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400452b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027828]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045290], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027838]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MoveFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450e8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetFileSizeEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetWindowsDirectoryA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetVolumeInformationA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTickCount
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140045130], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140045100], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.wsprintfA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualAlloc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045198], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x1400278e8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x1400278f4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045158], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.VirtualFree
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451f8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027910]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045140], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateDirectoryW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045190], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027938]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045230], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027948]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045170], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.FindClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045278], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CopyFileW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027978]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045148], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027988]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045258], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x1400279a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045110], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CreateProcessW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140045208], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.ShellExecuteW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450d0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x1400279e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451d8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetShortPathNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045260], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetEnvironmentVariableW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.wininet.dll
mov rcx, rbx
mov qword [0x140045138], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027a28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045118], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027a48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045298], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027a60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140045218], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027a70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpOpenRequestW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450f0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.HttpSendRequestA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045188], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027ad0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140045238], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140045268], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetFolderPathA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.shell32.dll
mov qword [0x140045280], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.SHGetKnownFolderPath
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.shlwapi.dll
mov rcx, rbx
mov qword [0x1400452b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathIsURLW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045200], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathCombineW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045150], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.PathFindFileNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.Advapi32.dll
mov rcx, rbx
mov qword [0x1400452a8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegDeleteKeyW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400450e0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegOpenKeyExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451b8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegSetValueExA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045160], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.RegCloseKey
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045108], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027bc8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045210], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetTokenInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045270], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027bf8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400451c8], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.GetUserNameW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045178], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, [0x140027c20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rbx, str.ole32.dll
mov rcx, rbx
mov qword [0x140045220], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoUninitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x1400452c0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoCreateInstance
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
mov qword [0x140045120], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.CoInitialize
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140045240], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rdx, str.MessageBoxA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140045248], rax
xor eax, eax
add rsp, 0x20
pop rbx
ret