.386
.model flat, stdcall
option casemap:none

include windows.inc
include kernel32.inc
includelib kernel32.lib

.data
FileName	DB "C:\windows\explorer.exe",0
LibName		DB "C:\windows\system32\sfc.dll",0
FuncName	DB "SfcIsFileProtected",0

.code
start:
invoke LoadLibrary, addr LibName
invoke GetProcAddress, EAX, addr FuncName
push NULL
push offset FileName
call EAX
invoke FreeLibrary, addr LibName
invoke ExitProcess,0
end start