Function at 0x140062c30
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rax, qword [0x1400ed1f8]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdx, qword [str.__v_r_]
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rsi, [0x1400f4118]
mov rdx, rax
test rax, rax
je 0x140062ebf
mov cl, 1
xor edi, edi
test cl, cl
mov eax, edi
movzx ecx, cl
cmovne rax, rdx
mov rcx, rbx
mov rdx, qword [str.NtCreateKey]
mov qword [0x1400ee5e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062edf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtOpenKeyEx]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee560], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062eff
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee5b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062f1f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee5d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062f3f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtSetValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee600], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062f5f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee580], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062f7f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee590], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062f9f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee570], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062fbf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee610], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062fdf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtRenameKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee5f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062fff
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtNotifyChangeMultipleKeys]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400ee5c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140062ea2
mov al, 1
test al, al
cmovne rdi, rcx
mov qword [0x1400ee5a0], rdi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140068e00
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x20], eax
xor al, al
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062e74
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor cl, cl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rdx, qword [rbp - 0x20]
jmp 0x140062c7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062cac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062cda
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062d08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062d36
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062d64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062d92
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062dc0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062dee
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062e1c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x140062e4a