Function at 0x4ede40
Capabilities:
Link many functions at runtime

Disassembly:
push edi
push esi
push ebx
sub esp, 0x10
mov edi, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [esp], 0x75434c
call edi
sub esp, 4
test eax, eax
je 0x4ee07b
mov esi, eax
mov dword [esp + 4], str.RtlNtStatusToDosError
mov dword [esp], eax
mov ebx, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630d8], eax
je 0x4ee065
mov dword [esp + 4], str.NtDeviceIoControlFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630dc], eax
je 0x4ee065
mov dword [esp + 4], str.NtQueryInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630ec], eax
je 0x4ee065
mov dword [esp + 4], str.NtSetInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630b4], eax
je 0x4ee065
mov dword [esp + 4], str.NtQueryVolumeInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630e0], eax
je 0x4ee065
mov dword [esp + 4], str.NtQueryDirectoryFile
mov dword [esp], esi
call ebx
mov dword [0x8630c4], eax
mov eax, dword [0x8630e0]
sub esp, 8
test eax, eax
je 0x4ee065
mov dword [esp + 4], str.NtQuerySystemInformation
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x8630c0], eax
je 0x4ee065
mov dword [esp], 0x754419
call edi
sub esp, 4
test eax, eax
mov esi, eax
je 0x4ee07b
mov dword [esp + 4], str.GetQueuedCompletionStatusEx
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [0x8630cc], eax
mov dword [esp + 4], str.SetFileCompletionNotificationModes
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630c8], eax
mov dword [esp + 4], str.CreateSymbolicLinkW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630a8], eax
mov dword [esp + 4], str.CancelIoEx
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630d4], eax
mov dword [esp + 4], str.InitializeConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630bc], eax
mov dword [esp + 4], str.SleepConditionVariableCS
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630ac], eax
mov dword [esp + 4], str.SleepConditionVariableSRW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630b8], eax
mov dword [esp + 4], str.WakeAllConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630e4], eax
mov dword [esp + 4], str.WakeConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630a4], eax
mov dword [esp + 4], str.CancelSynchronousIo
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630b0], eax
mov dword [esp + 4], str.GetFinalPathNameByHandleW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x8630d0], eax
mov dword [esp], str.powrprof.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
sub esp, 4
test eax, eax
je 0x4ee05e
mov dword [esp + 4], str.PowerRegisterSuspendResumeNotification
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [0x8630e8], eax
add esp, 0x10
pop ebx
pop esi
pop edi
ret
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [esp + 4], str.GetProcAddress
mov dword [esp], eax
call fcn.004cc730
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [esp + 4], str.GetModuleHandleA
mov dword [esp], eax
call fcn.004cc730
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop