Function at 0x13f443880
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
je 0x13f443ab4
lea rdx, str.RtlNtStatusToDosError
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc9a0], rax
test rax, rax
je 0x13f443ac9
lea rdx, str.NtDeviceIoControlFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc928], rax
test rax, rax
je 0x13f443ade
lea rdx, str.NtQueryInformationFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc970], rax
test rax, rax
je 0x13f443af3
lea rdx, str.NtSetInformationFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc990], rax
test rax, rax
je 0x13f443b08
lea rdx, str.NtQueryVolumeInformationFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc980], rax
test rax, rax
je 0x13f443b1d
lea rdx, str.NtQueryDirectoryFile
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x13f4cc980], 0
mov qword [0x13f4cc998], rax
je 0x13f443b32
lea rdx, str.NtQuerySystemInformation
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc968], rax
test rax, rax
je 0x13f443b47
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
je 0x13f443b5c
lea rdx, str.GetQueuedCompletionStatusEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetFileCompletionNotificationModes
mov rcx, rbx
mov qword [0x13f4cc958], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CreateSymbolicLinkW
mov rcx, rbx
mov qword [0x13f4cc960], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CancelIoEx
mov rcx, rbx
mov qword [0x13f4cc978], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x13f4a6a20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x13f4a6a70]
mov rcx, rbx
mov qword [reloc.KERNEL32.dll_InitializeSRWLock], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x13f4a6a50]
mov rcx, rbx
mov qword [reloc.KERNEL32.dll_SleepConditionVariableCS], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x13f4a6aa8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x13f4a6a90]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CancelSynchronousIo
mov rcx, rbx
mov qword [reloc.KERNEL32.dll_WakeConditionVariable], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetFinalPathNameByHandleW
mov rcx, rbx
mov qword [0x13f4cc950], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.powrprof.dll
mov qword [0x13f4cc988], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x13f443aae
lea rdx, str.PowerRegisterSuspendResumeNotification
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x13f4cc930], rax
add rsp, 0x20
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a68f0]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a6918]
call fcn.13f4432a0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea rdx, [0x13f4a68f0]
call fcn.13f4432a0
int3