Function at 0x47cf90
Capabilities:
Link many functions at runtime

Disassembly:
push edi
push esi
push ebx
sub esp, 0x10
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [esp], 0x64748c
call edi
sub esp, 4
test eax, eax
je 0x47d1cb
mov esi, eax
mov dword [esp + 4], str.RtlNtStatusToDosError
mov dword [esp], eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac798], eax
je 0x47d1b5
mov dword [esp + 4], str.NtDeviceIoControlFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac79c], eax
je 0x47d1b5
mov dword [esp + 4], str.NtQueryInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac7ac], eax
je 0x47d1b5
mov dword [esp + 4], str.NtSetInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac774], eax
je 0x47d1b5
mov dword [esp + 4], str.NtQueryVolumeInformationFile
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac7a0], eax
je 0x47d1b5
mov dword [esp + 4], str.NtQueryDirectoryFile
mov dword [esp], esi
call ebx
mov dword [0x6ac784], eax
mov eax, dword [0x6ac7a0]
sub esp, 8
test eax, eax
je 0x47d1b5
mov dword [esp + 4], str.NtQuerySystemInformation
mov dword [esp], esi
call ebx
sub esp, 8
test eax, eax
mov dword [0x6ac780], eax
je 0x47d1b5
mov dword [esp], str.kernel32.dll
call edi
sub esp, 4
test eax, eax
mov esi, eax
je 0x47d1cb
mov dword [esp + 4], str.GetQueuedCompletionStatusEx
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [0x6ac78c], eax
mov dword [esp + 4], str.SetFileCompletionNotificationModes
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac788], eax
mov dword [esp + 4], str.CreateSymbolicLinkW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac768], eax
mov dword [esp + 4], str.CancelIoEx
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac794], eax
mov dword [esp + 4], str.InitializeConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac77c], eax
mov dword [esp + 4], str.SleepConditionVariableCS
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac76c], eax
mov dword [esp + 4], str.SleepConditionVariableSRW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac778], eax
mov dword [esp + 4], str.WakeAllConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac7a4], eax
mov dword [esp + 4], str.WakeConditionVariable
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac764], eax
mov dword [esp + 4], str.CancelSynchronousIo
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac770], eax
mov dword [esp + 4], str.GetFinalPathNameByHandleW
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [0x6ac790], eax
mov dword [esp], str.powrprof.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
test eax, eax
je 0x47d1ae
mov dword [esp + 4], str.PowerRegisterSuspendResumeNotification
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [0x6ac7a8], eax
add esp, 0x10
pop ebx
pop esi
pop edi
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.GetProcAddress
mov dword [esp], eax
call fcn.0045b880
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.GetModuleHandleA
mov dword [esp], eax
call fcn.0045b880
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop