Function at 0x7de07711
Capabilities:
Link many functions at runtime

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2bc
mov eax, dword [0x7de403ac]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x228], 0xffffffff
push ebx
push esi
mov dword [ebp - 0x23c], ecx
mov ecx, 0x38ee
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov word [ebp - 0x10], cx
mov ecx, 0x11d1
xor esi, esi
mov dword [ebp - 0x24c], edi
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x14], 0xf750e6c3
mov word [ebp - 0xe], cx
mov byte [ebp - 0xc], 0x85
mov byte [ebp - 0xb], 0xe5
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], 0xc0
mov byte [ebp - 8], 0x4f
mov byte [ebp - 7], 0xc2
mov byte [ebp - 6], 0x95
mov byte [ebp - 5], 0xee
cmp edi, ebx
je 0x7de07a89
cmp eax, ebx
je 0x7de07a89
push 0x7ddb38ac
push edi
call fcn.7dd7122f
push 0x7ddb3888
push edi
mov dword [ebp - 0x244], eax
call fcn.7dd7122f
push 0x7ddb3868
push edi
mov dword [ebp - 0x238], eax
call fcn.7dd7122f
push 0x7ddb3834
push edi
mov dword [ebp - 0x248], eax
call fcn.7dd7122f
push 0x7ddb3844
push edi
mov dword [ebp - 0x230], eax
call fcn.7dd7122f
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x244], ebx
je 0x7de07838
cmp dword [ebp - 0x238], ebx
je 0x7de07838
cmp dword [ebp - 0x248], ebx
je 0x7de07838
cmp dword [ebp - 0x230], ebx
je 0x7de07838
cmp eax, ebx
je 0x7de07838
push ebx
push 0x80
push 3
pop esi
push esi
push ebx
push 1
push 0x80000000
push dword [ebp - 0x23c]
call sub.API_MS_Win_Core_File_L1_1_0.dll_CreateFileW
mov dword [ebp - 0x228], eax
cmp eax, 0xffffffff
jne 0x7de07848
call fcn.7dd711c7
mov dword [ebp - 0x224], eax
jmp 0x7de07ab1
push 0x34
pop edi
push edi
lea eax, [ebp - 0x294]
push ebx
push eax
call sub.ntdll.dll_memset
add esp, 0xc
push 2
mov dword [ebp - 0x294], edi
pop edi
lea eax, [ebp - 0x2bc]
push 0x64
mov dword [ebp - 0x27c], eax
pop eax
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x26c], 0x10
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x22c], eax
push eax
jmp 0x7de078dc
push ebx
push esi
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x228]
call dword [ebp - 0x244]
test eax, eax
jne 0x7de078ee
call fcn.7dd711c7
push esi
mov dword [ebp - 0x224], eax
call fcn.7dd72823
cmp dword [ebp - 0x224], 0x7a
jne 0x7de07a08
push dword [ebp - 0x22c]
push ebx
call fcn.7dd71669
mov esi, eax
cmp esi, ebx
je 0x7de07a0a
jmp 0x7de0789f
push 0xa
pop ecx
mov dword [ebp - 0x280], edi
xor eax, eax
lea edi, [ebp - 0x2bc]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x2b0], ecx
lea ecx, [ebp - 0x234]
push ecx
push ebx
mov dword [ebp - 0x2bc], 0x28
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x234], ebx
push eax
jmp 0x7de079dd
push ebx
lea eax, [ebp - 0x220]
push eax
push edi
mov dword [ebp - 0x220], 0x20c
call dword [ebp - 0x248]
test eax, eax
je 0x7de079c9
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
mov dword [ebp - 0x278], 4
call dword [ebp - 0x230]
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
mov dword [ebp - 0x278], ebx
call dword [ebp - 0x230]
mov dword [ebp - 0x224], eax
cmp eax, ebx
jne 0x7de079c9
push dword [ebp + 0x14]
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x24c]
call fcn.7de07522
test eax, eax
jne 0x7de079f5
lea eax, [ebp - 0x234]
push eax
push ebx
push dword [ebp - 0x22c]
mov dword [ebp - 0x234], edi
push esi
push dword [ebp - 0x240]
call dword [ebp - 0x238]
mov edi, eax
cmp edi, ebx
je 0x7de07a0a
jmp 0x7de0793d
push ebx
push edi
push dword [ebp - 0x240]
call dword [ebp - 0x250]
jmp 0x7de07a93
xor esi, esi
lea eax, [ebp - 0x260]
mov dword [ebp - 0x27c], eax
xor eax, eax
lea edi, [ebp - 0x260]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x228]
mov edi, dword [ebp - 0x23c]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x14]
push eax
push ebx
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x260], 0x10
mov dword [ebp - 0x25c], edi
call dword [ebp - 0x230]
mov dword [ebp - 0x224], eax
cmp eax, ebx
jne 0x7de07a93
push dword [ebp + 0x14]
push edi
push dword [ebp - 0x24c]
call fcn.7de07522
test eax, eax
jne 0x7de07a93
mov dword [ebp - 0x224], 0x1f
jmp 0x7de07a93
mov dword [ebp - 0x224], 0x57
cmp esi, ebx
je 0x7de07a9d
push esi
call fcn.7dd72823
cmp dword [ebp - 0x228], 0xffffffff
je 0x7de07ab1
push dword [ebp - 0x228]
call sub.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle
mov ecx, dword [ebp - 4]
xor eax, eax
cmp dword [ebp - 0x224], ebx
pop edi
sete al
pop esi
xor ecx, ebp
pop ebx
call fcn.7dd71442
leave
ret 0x10