Function at 0x14000b060
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x28
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
call fcn.14000e830
mov rax, qword [rsp + 0x30]
lea rcx, vtable.CKernelManager.0
mov qword [rax], rcx
mov rax, qword [rsp + 0x30]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x230], ecx
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x230], 0
je 0x14000b0fb
cmp qword [rsp + 0x40], 0
je 0x14000b0cc
mov rdx, qword [rsp + 0x40]
lea rcx, [0x1400b4380]
call fcn.14000e2c0
cmp qword [rsp + 0x58], 0
je 0x14000b0e5
mov rdx, qword [rsp + 0x58]
lea rcx, [0x1400b4790]
call fcn.14000e2c0
mov eax, dword [rsp + 0x48]
mov dword [0x1400af65c], eax
mov eax, dword [rsp + 0x50]
mov dword [0x1400af660], eax
jmp 0x14000b141
cmp qword [rsp + 0x40], 0
je 0x14000b114
mov rdx, qword [rsp + 0x40]
lea rcx, [0x1400b3b60]
call fcn.14000e2c0
cmp qword [rsp + 0x58], 0
je 0x14000b12d
mov rdx, qword [rsp + 0x58]
lea rcx, [0x1400b3f70]
call fcn.14000e2c0
mov eax, dword [rsp + 0x48]
mov dword [0x1400af658], eax
mov eax, dword [rsp + 0x50]
mov dword [0x1400af660], eax
mov eax, dword [rsp + 0x50]
mov dword [0x1400af660], eax
mov rax, qword [rsp + 0x30]
mov dword [rax + 0x238], 0
mov rax, qword [rsp + 0x30]
mov dword [rax + 0x234], 0
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x228], rcx
mov rax, qword [rsp + 0x30]
mov qword [0x1400b3330], rax
lea rcx, [0x14008ba60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x240], rax
lea rdx, str.RegCreateKeyExW
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x248], rax
lea rdx, [0x14008ba90]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x288], rax
lea rdx, str.RegDeleteKeyW
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x258], rax
lea rdx, [0x14008bab0]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x260], rax
lea rdx, [0x14008bac0]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x250], rax
lea rdx, [0x14008bad8]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x268], rax
lea rdx, str.RegEnumValueW
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x270], rax
lea rdx, str.RegEnumKeyExW
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x278], rax
lea rdx, [0x14008bb08]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0x240]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x280], rax
mov rax, qword [rsp + 0x30]
add rsp, 0x28
ret