KERNEL32._lread		->	004063e4
KERNEL32._lwrite	->	00406364
KERNEL32.LoadLibraryA	->	0040589E (call 00404F4D first!)
KERNEL32.GetProcAddress	->	004058A2 (call 00404F4D first!)

Entry Point: 10CC
.text cave: 4e9c
.data cave: 584c

.data specs:

@584c: "cryptpadv2.dll",0
@585b: cryptpadv2.dll handle
@585f: "ReadFile_replace",0
@5870: "WriteFile_replace",0
@5882: "LoadLibraryA",0
@588F: "GetProcAddress",0
@589E: LoadLibrary API offset
@58A2: GetProcAddress API offset
@58A6: Image Base
@58AA: NameOrdinals
@58AE: AddressOfNames
@58B2: AddressOfFunctions


00404F4D params: lpApiName - pointer to zero terminated API name
