Function at 0x12874a50
Capabilities:
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rdi, rcx
xor esi, esi
mov qword [rcx], rsi
lea rax, [rcx + 0x20]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0x48]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0x70]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0x98]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0xc0]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0xe8]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0x110]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rcx + 0x138]
mov qword [r11 + 0x10], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
mov qword [rcx + 0x160], rsi
mov dword [rcx + 0x168], esi
add rcx, 0x170
call fcn.12828a00
nop
lea rcx, [rdi + 0x178]
call fcn.12874410
nop
lea rcx, [rdi + 0x1b8]
mov qword [rsp + 0x68], rcx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
call fcn.1286d7a0
nop
lea rcx, [rdi + 0x248]
call fcn.12874280
nop
lea rcx, [rdi + 0x418]
mov qword [rsp + 0x58], rcx
mov qword [rcx], rsi
and dword [rcx + 8], 0xfffffffe
mov qword [rcx + 0x10], rsi
add rcx, 0x18
call fcn.12859c10
nop
lea rcx, [rdi + 0x470]
call fcn.128728a0
nop
mov dword [rdi + 0x4b0], esi
mov byte [rdi + 0x4b4], sil
mov byte [rdi + 0x4b5], sil
mov byte [rdi + 0x4b6], sil
lea rax, [rdi + 0x4c0]
mov qword [rsp + 0x58], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rax, [rdi + 0x4e8]
mov qword [rsp + 0x58], rax
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], rsi
mov word [rax + 8], si
lea rcx, [rdi + 0x510]
call fcn.12864e40
nop
lea rax, [sym.hdHook.dll_int___cdecl_LTest_int____ptr64_]
mov qword [rdi + 0x550], rax
lea rbx, [rdi + 0x558]
mov qword [rsp + 0x58], rbx
mov qword [rbx], rsi
and dword [rbx + 8], 0xfffffffe
lea rcx, [rbx + 0x10]
xor edx, edx
mov r8d, 0x98
call fcn.12959590
lea rcx, [rbx + 0xa8]
call fcn.12860ae0
nop
mov qword [rdi + 0x640], rsi
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x12874e36
cmp qword [0x129ae7e0], rsi
jne 0x12874c9b
lea rdx, str.NtOpenKey
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae7e0], rax
cmp qword [0x129ae808], 0
jne 0x12874cbc
lea rdx, str.NtOpenKeyEx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae808], rax
cmp qword [0x129ae810], 0
jne 0x12874cdd
lea rdx, str.NtOpenKeyTransacted
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae810], rax
cmp qword [0x129ae818], 0
jne 0x12874cfe
lea rdx, str.NtOpenKeyTransactedEx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae818], rax
cmp qword [0x129ae820], 0
jne 0x12874d1f
lea rdx, str.NtCreateKeyTransacted
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae820], rax
cmp qword [0x129ae7e8], 0
jne 0x12874d40
lea rdx, str.NtCreateKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae7e8], rax
cmp qword [0x129ae7f0], 0
jne 0x12874d61
lea rdx, str.NtClose
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae7f0], rax
cmp qword [0x129ae7f8], 0
jne 0x12874d82
lea rdx, str.NtSetValueKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae7f8], rax
cmp qword [0x129ae800], 0
jne 0x12874da3
lea rdx, str.NtQueryValueKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae800], rax
cmp qword [0x129ae828], 0
jne 0x12874dc4
lea rdx, str.NtDeleteKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae828], rax
cmp qword [0x129ae830], 0
jne 0x12874de5
lea rdx, str.NtDeleteValueKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae830], rax
cmp qword [0x129ae838], 0
jne 0x12874e06
lea rdx, str.NtQueryKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae838], rax
cmp qword [0x129ae840], 0
jne 0x12874e27
lea rdx, str.NtSetInformationKey
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x129ae840], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rax, rdi
jmp 0x12874e39
mov rax, rdi
add rsp, 0x30
pop rdi
pop rsi
pop rbx
ret