Function at 0x53c620
Capabilities:
Link many functions at runtime

Disassembly:
push esi
push ebx
sub esp, 0x14
mov eax, dword [0x67c35c]
mov dword [esp], eax
call fcn.004f93b4
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x53c664
mov dword [0x67c530], 0x5e0e00
mov dword [0x67c35c], 0
mov esi, dword [0x5e0e68]
test esi, esi
je 0x53c81c
add esp, 0x14
pop ebx
pop esi
ret
mov dword [0x67c530], 0x5e0ea0
mov dword [esp + 4], 0x61772b
mov dword [esp], 0
call fcn.004fa710
mov dword [0x67c35c], eax
mov eax, dword [0x67c530]
mov esi, dword [eax + 0x68]
test esi, esi
jne 0x53c65c
mov dword [esp], str.kernel32
call sub.KERNEL32.dll_LoadLibraryA
push ebx
mov ebx, eax
test eax, eax
je 0x53c73f
mov esi, dword [0x67c530]
mov dword [esp + 4], str.GetFileAttributesExW
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x68], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.CreateHardLinkW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x6c], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.FindFirstFileExW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x70], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.GetVolumeNameForVolumeMountPointW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x74], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.GetLongPathNameW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x78], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push ecx
mov dword [esp], str.advapi32
call sub.KERNEL32.dll_LoadLibraryA
push edx
mov ebx, eax
test eax, eax
je 0x53c65c
mov esi, dword [0x67c530]
mov dword [esp + 4], str.GetFileSecurityW
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x7c], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.ImpersonateSelf
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x80], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.OpenThreadToken
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x84], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.RevertToSelf
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x88], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.MapGenericMask
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x8c], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.AccessCheck
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x90], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push eax
jmp 0x53c65c
mov dword [esp], str.kernel32
call sub.KERNEL32.dll_LoadLibraryA
push ebx
mov ebx, eax
test eax, eax
je 0x53c65c
mov esi, dword [0x67c530]
mov dword [esp + 4], str.GetFileAttributesExA
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x68], eax
mov esi, dword [0x67c530]
mov dword [esp + 4], str.CreateHardLinkA
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x6c], eax
mov esi, dword [0x67c530]
mov dword [esi + 0x70], 0
mov dword [esi + 0x78], 0
mov dword [esp + 4], str.GetVolumeNameForVolumeMountPointA
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x74], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push ecx
jmp 0x53c65c