Function at 0x1000529b
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push str.OpenProcess
push 0x1002237c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026358], eax
cmp dword [0x10026358], 0
jne 0x100052cb
xor eax, eax
jmp 0x10005df9
push str.VirtualAllocEx
push 0x1002239c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026354], eax
cmp dword [0x10026354], 0
jne 0x100052f7
xor eax, eax
jmp 0x10005df9
push str.WriteProcessMemory
push 0x100223c0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026350], eax
cmp dword [0x10026350], 0
jne 0x10005323
xor eax, eax
jmp 0x10005df9
push str.CreateRemoteThread
push 0x100223e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002634c], eax
cmp dword [0x1002634c], 0
jne 0x1000534f
xor eax, eax
jmp 0x10005df9
push str.InitializeCriticalSection
push 0x10022410
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026348], eax
cmp dword [0x10026348], 0
jne 0x1000537b
xor eax, eax
jmp 0x10005df9
push str.DeleteCriticalSection
push 0x10022438
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026344], eax
cmp dword [0x10026344], 0
jne 0x100053a7
xor eax, eax
jmp 0x10005df9
push str.VirtualFree
push 0x10022454
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026340], eax
cmp dword [0x10026340], 0
jne 0x100053d3
xor eax, eax
jmp 0x10005df9
push str.LeaveCriticalSection
push 0x1002247c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002633c], eax
cmp dword [0x1002633c], 0
jne 0x100053ff
xor eax, eax
jmp 0x10005df9
push str.GetLocalTime
push 0x1002249c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026338], eax
cmp dword [0x10026338], 0
jne 0x1000542b
xor eax, eax
jmp 0x10005df9
push 0x100224ac
push 0x100224bc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026334], eax
cmp dword [0x10026334], 0
jne 0x10005457
xor eax, eax
jmp 0x10005df9
push str.EnterCriticalSection
push 0x100224e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026330], eax
cmp dword [0x10026330], 0
jne 0x10005483
xor eax, eax
jmp 0x10005df9
push str.VirtualAlloc
push 0x10022504
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002632c], eax
cmp dword [0x1002632c], 0
jne 0x100054af
xor eax, eax
jmp 0x10005df9
push str.FreeLibrary
push 0x10022520
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026328], eax
cmp dword [0x10026328], 0
jne 0x100054db
xor eax, eax
jmp 0x10005df9
push str.SetEvent
push 0x1002253c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026324], eax
cmp dword [0x10026324], 0
jne 0x10005507
xor eax, eax
jmp 0x10005df9
push str.CreateEventA
push 0x1002255c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026320], eax
cmp dword [0x10026320], 0
jne 0x10005533
xor eax, eax
jmp 0x10005df9
push str.MoveFileExA
push 0x10022578
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002631c], eax
cmp dword [0x1002631c], 0
jne 0x1000555f
xor eax, eax
jmp 0x10005df9
push str.MoveFileA
push 0x10022594
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026318], eax
cmp dword [0x10026318], 0
jne 0x1000558b
xor eax, eax
jmp 0x10005df9
push str.GetTickCount
push 0x100225b4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026314], eax
cmp dword [0x10026314], 0
jne 0x100055b7
xor eax, eax
jmp 0x10005df9
push str.WaitForSingleObject
push 0x100225d8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026310], eax
cmp dword [0x10026310], 0
jne 0x100055e3
xor eax, eax
jmp 0x10005df9
push str.GlobalFree
push 0x100225f4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002630c], eax
cmp dword [0x1002630c], 0
jne 0x1000560f
xor eax, eax
jmp 0x10005df9
push str.GlobalUnlock
push 0x10022614
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026308], eax
cmp dword [0x10026308], 0
jne 0x1000563b
xor eax, eax
jmp 0x10005df9
push str.GlobalLock
push 0x10022630
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026304], eax
cmp dword [0x10026304], 0
jne 0x10005667
xor eax, eax
jmp 0x10005df9
push str.GlobalAlloc
push 0x1002264c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026300], eax
cmp dword [0x10026300], 0
jne 0x10005693
xor eax, eax
jmp 0x10005df9
push str.GlobalSize
push 0x10022668
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262fc], eax
cmp dword [0x100262fc], 0
jne 0x100056bf
xor eax, eax
jmp 0x10005df9
push str.CreateProcessA
push 0x10022688
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262f8], eax
cmp dword [0x100262f8], 0
jne 0x100056eb
xor eax, eax
jmp 0x10005df9
push str.CreatePipe
push 0x100226a4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262f4], eax
cmp dword [0x100262f4], 0
jne 0x10005717
xor eax, eax
jmp 0x10005df9
push str.TerminateProcess
push 0x100226c8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262f0], eax
cmp dword [0x100262f0], 0
jne 0x10005743
xor eax, eax
jmp 0x10005df9
push str.PeekNamedPipe
push 0x100226e8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262ec], eax
cmp dword [0x100262ec], 0
jne 0x1000576f
xor eax, eax
jmp 0x10005df9
push str.OutputDebugStringA
push 0x1002270c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262e8], eax
cmp dword [0x100262e8], 0
jne 0x1000579b
xor eax, eax
jmp 0x10005df9
push str.GlobalMemoryStatusEx
push 0x10022734
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262e4], eax
cmp dword [0x100262e4], 0
jne 0x100057c7
xor eax, eax
jmp 0x10005df9
push str.GetSystemInfo
push 0x10022754
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262e0], eax
cmp dword [0x100262e0], 0
jne 0x100057f3
xor eax, eax
jmp 0x10005df9
push str.InterlockedExchange
push 0x10022778
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262dc], eax
cmp dword [0x100262dc], 0
jne 0x1000581f
xor eax, eax
jmp 0x10005df9
push str.CancelIo
push 0x10022794
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262d8], eax
cmp dword [0x100262d8], 0
jne 0x1000584b
xor eax, eax
jmp 0x10005df9
push str.DeleteFileA
push 0x100227b0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262d4], eax
cmp dword [0x100262d4], 0
jne 0x10005877
xor eax, eax
jmp 0x10005df9
push str.GetLastError
push 0x100227d0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262d0], eax
cmp dword [0x100262d0], 0
jne 0x100058a3
xor eax, eax
jmp 0x10005df9
push 0x100227e0
push 0x100227f0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262cc], eax
cmp dword [0x100262cc], 0
jne 0x100058cf
xor eax, eax
jmp 0x10005df9
push str.FindClose
push 0x1002280c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262c8], eax
cmp dword [0x100262c8], 0
jne 0x100058fb
xor eax, eax
jmp 0x10005df9
push str.LocalFree
push 0x10022828
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262c4], eax
cmp dword [0x100262c4], 0
jne 0x10005927
xor eax, eax
jmp 0x10005df9
push str.FindNextFileA
push 0x10022848
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262c0], eax
cmp dword [0x100262c0], 0
jne 0x10005953
xor eax, eax
jmp 0x10005df9
push str.OpenEventA
push 0x10022864
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262bc], eax
cmp dword [0x100262bc], 0
jne 0x1000597f
xor eax, eax
jmp 0x10005df9
push str.SetErrorMode
push 0x10022884
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262b8], eax
cmp dword [0x100262b8], 0
jne 0x100059ab
xor eax, eax
jmp 0x10005df9
push str.SetUnhandledExceptionFilter
push 0x100228b0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262b4], eax
cmp dword [0x100262b4], 0
jne 0x100059d7
xor eax, eax
jmp 0x10005df9
push str.FreeConsole
push 0x100228cc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262b0], eax
cmp dword [0x100262b0], 0
jne 0x10005a03
xor eax, eax
jmp 0x10005df9
push 0x100228dc
push 0x100228e8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262ac], eax
cmp dword [0x100262ac], 0
jne 0x10005a2f
xor eax, eax
jmp 0x10005df9
push str.lstrcmpiA
push 0x10022904
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262a8], eax
cmp dword [0x100262a8], 0
jne 0x10005a5b
xor eax, eax
jmp 0x10005df9
push str.LocalReAlloc
push 0x10022924
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262a4], eax
cmp dword [0x100262a4], 0
jne 0x10005a87
xor eax, eax
jmp 0x10005df9
push str.FindFirstFileA
push 0x10022944
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100262a0], eax
cmp dword [0x100262a0], 0
jne 0x10005ab3
xor eax, eax
jmp 0x10005df9
push str.LocalAlloc
push 0x10022960
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002629c], eax
cmp dword [0x1002629c], 0
jne 0x10005adf
xor eax, eax
jmp 0x10005df9
push str.RemoveDirectoryA
push 0x10022984
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026298], eax
cmp dword [0x10026298], 0
jne 0x10005b0b
xor eax, eax
jmp 0x10005df9
push str.GetFileSize
push 0x100229a0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026294], eax
cmp dword [0x10026294], 0
jne 0x10005b37
xor eax, eax
jmp 0x10005df9
push str.CreateFileA
push 0x100229bc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026290], eax
cmp dword [0x10026290], 0
jne 0x10005b63
xor eax, eax
jmp 0x10005df9
push str.ReadFile
push 0x100229d8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002628c], eax
cmp dword [0x1002628c], 0
jne 0x10005b8f
xor eax, eax
jmp 0x10005df9
push str.SetFilePointer
push 0x100229f8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026288], eax
cmp dword [0x10026288], 0
jne 0x10005bbb
xor eax, eax
jmp 0x10005df9
push str.WriteFile
push 0x10022a14
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026284], eax
cmp dword [0x10026284], 0
jne 0x10005be7
xor eax, eax
jmp 0x10005df9
push str.GetModuleFileNameA
push 0x10022a38
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026280], eax
cmp dword [0x10026280], 0
jne 0x10005c13
xor eax, eax
jmp 0x10005df9
push 0x10022a48
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
push str.CreateDirectoryA
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026254], eax
cmp dword [0x10026254], 0
jne 0x10005c45
xor eax, eax
jmp 0x10005df9
push str.GetWindowsDirectoryA
push 0x10022a84
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026258], eax
cmp dword [0x10026258], 0
jne 0x10005c71
xor eax, eax
jmp 0x10005df9
push str.GetCurrentThreadId
push 0x10022aa8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002625c], eax
cmp dword [0x1002625c], 0
jne 0x10005c9d
xor eax, eax
jmp 0x10005df9
push str.CreateThread
push 0x10022ac8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026260], eax
cmp dword [0x10026260], 0
jne 0x10005cc9
xor eax, eax
jmp 0x10005df9
push str.DeviceIoControl
push 0x10022ae8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026264], eax
cmp dword [0x10026264], 0
jne 0x10005cf5
xor eax, eax
jmp 0x10005df9
push str.GetVersion
push 0x10022b04
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026268], eax
cmp dword [0x10026268], 0
jne 0x10005d21
xor eax, eax
jmp 0x10005df9
push str.GetCurrentProcess
push 0x10022b28
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002626c], eax
cmp dword [0x1002626c], 0
jne 0x10005d4d
xor eax, eax
jmp 0x10005df9
push str.ExitProcess
push 0x10022b44
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026270], eax
cmp dword [0x10026270], 0
jne 0x10005d79
xor eax, eax
jmp 0x10005df9
push str.GetVersionExA
push 0x10022b64
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026274], eax
cmp dword [0x10026274], 0
jne 0x10005da2
xor eax, eax
jmp 0x10005df9
push str.GetSystemDirectoryA
push 0x10022b88
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x10026278], eax
cmp dword [0x10026278], 0
jne 0x10005dcb
xor eax, eax
jmp 0x10005df9
push str.SetLastError
push 0x10022ba8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1002627c], eax
cmp dword [0x1002627c], 0
jne 0x10005df4
xor eax, eax
jmp 0x10005df9
mov eax, 1
mov esp, ebp
pop ebp
ret