Function at 0x1000194a
Capabilities:
Link many functions at runtime

Disassembly:
cmp dword [0x1000575c], 0
jne 0x10001c0b
mov eax, dword [0x100056d4]
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, str.kernel32.dll
test eax, eax
jne 0x10001976
push ebx
call edi
mov dword [0x100056d4], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.OpenFile
push eax
call esi
mov dword [0x100056d0], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x1000199a
push ebx
call edi
mov dword [0x100056d4], eax
push ebp
mov ebp, str.WriteFile
push ebp
push eax
call esi
mov dword [0x100056cc], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x100019ba
push ebx
call edi
mov dword [0x100056d4], eax
push str.CloseHandle
push eax
call esi
mov dword [0x100056c8], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x100019d8
push ebx
call edi
mov dword [0x100056d4], eax
push str.OpenFile
push eax
call esi
mov dword [0x100056d0], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x100019f6
push ebx
call edi
mov dword [0x100056d4], eax
push ebp
push eax
call esi
mov dword [0x100056cc], eax
mov eax, dword [0x100056d4]
test eax, eax
pop ebp
jne 0x10001a11
push ebx
call edi
mov dword [0x100056d4], eax
push str.SetFilePointer
push eax
call esi
mov dword [0x100056bc], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001a2f
push ebx
call edi
mov dword [0x100056d4], eax
push str.GetFileSize
push eax
call esi
mov dword [0x100056b8], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001a4d
push ebx
call edi
mov dword [0x100056d4], eax
push str.ReadFile
push eax
call esi
mov dword [0x100056b4], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001a6b
push ebx
call edi
mov dword [0x100056d4], eax
push str.HeapAlloc
push eax
call esi
mov dword [0x100056b0], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001a89
push ebx
call edi
mov dword [0x100056d4], eax
push str.HeapFree
push eax
call esi
mov dword [0x100056ac], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001aa7
push ebx
call edi
mov dword [0x100056d4], eax
push str.GetProcessHeap
push eax
call esi
mov dword [0x100056a8], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001ac5
push ebx
call edi
mov dword [0x100056d4], eax
push str.GetModuleFileNameA
push eax
call esi
mov dword [0x100056c4], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001ae3
push ebx
call edi
mov dword [0x100056d4], eax
push str.GetWindowsDirectoryA
push eax
call esi
mov dword [0x100056a0], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b01
push ebx
call edi
mov dword [0x100056d4], eax
push str.VirtualProtect
push eax
call esi
mov dword [0x1000569c], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b1f
push ebx
call edi
mov dword [0x100056d4], eax
push str.CreateFileA
push eax
call esi
mov dword [0x10005698], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b3d
push ebx
call edi
mov dword [0x100056d4], eax
push str.CreateFileMappingA
push eax
call esi
mov dword [0x10005694], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b5b
push ebx
call edi
mov dword [0x100056d4], eax
push str.IsBadReadPtr
push eax
call esi
mov dword [0x10005690], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b79
push ebx
call edi
mov dword [0x100056d4], eax
push str.MapViewOfFile
push eax
call esi
mov dword [0x1000568c], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001b97
push ebx
call edi
mov dword [0x100056d4], eax
push str.CreateProcessA
push eax
call esi
mov dword [0x10005688], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001bb5
push ebx
call edi
mov dword [0x100056d4], eax
push str.FreeLibrary
push eax
call esi
mov dword [0x100056a4], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001bd3
push ebx
call edi
mov dword [0x100056d4], eax
push str.SetFileAttributes
push eax
call esi
mov dword [0x10005684], eax
mov eax, dword [0x100056d4]
test eax, eax
jne 0x10001bf1
push ebx
call edi
mov dword [0x100056d4], eax
push str.CreateDirectoryA
push eax
call esi
pop edi
pop esi
mov dword [0x10005680], eax
mov dword [0x1000575c], 1
pop ebx
ret