Function at 0x53eb8c
Capabilities:
Link many functions at runtime

Disassembly:
push esi
push ebx
sub esp, 0x14
mov eax, dword [0x68c624]
mov dword [esp], eax
call fcn.004fa0c0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x53ebd0
mov dword [0x68cbb4], 0x5f1b60
mov dword [0x68c624], 0
mov esi, dword [0x5f1bc8]
test esi, esi
je 0x53ed88
add esp, 0x14
pop ebx
pop esi
ret
mov dword [0x68cbb4], 0x5f1c00
mov dword [esp + 4], 0x6292cb
mov dword [esp], 0
call fcn.004fb470
mov dword [0x68c624], eax
mov eax, dword [0x68cbb4]
mov esi, dword [eax + 0x68]
test esi, esi
jne 0x53ebc8
mov dword [esp], str.kernel32
call sub.KERNEL32.dll_LoadLibraryA
push ebx
mov ebx, eax
test eax, eax
je 0x53ecab
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.GetFileAttributesExW
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x68], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.CreateHardLinkW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x6c], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.FindFirstFileExW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x70], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.GetVolumeNameForVolumeMountPointW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x74], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.GetLongPathNameW
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x78], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push ecx
mov dword [esp], str.advapi32
call sub.KERNEL32.dll_LoadLibraryA
push edx
mov ebx, eax
test eax, eax
je 0x53ebc8
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.GetFileSecurityW
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x7c], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.ImpersonateSelf
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x80], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.OpenThreadToken
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x84], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.RevertToSelf
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x88], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.MapGenericMask
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x8c], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.AccessCheck
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x90], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push eax
jmp 0x53ebc8
mov dword [esp], str.kernel32
call sub.KERNEL32.dll_LoadLibraryA
push ebx
mov ebx, eax
test eax, eax
je 0x53ebc8
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.GetFileAttributesExA
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x68], eax
mov esi, dword [0x68cbb4]
mov dword [esp + 4], str.CreateHardLinkA
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x6c], eax
mov esi, dword [0x68cbb4]
mov dword [esi + 0x70], 0
mov dword [esi + 0x78], 0
mov dword [esp + 4], str.GetVolumeNameForVolumeMountPointA
mov dword [esp], ebx
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esi + 0x74], eax
mov dword [esp], ebx
call sub.KERNEL32.dll_FreeLibrary
push ecx
jmp 0x53ebc8