Function at 0x14005a8c0
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rax, qword [0x1401b4a98]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdx, qword [str.NtClose]
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rsi, [0x1401c10e8]
mov rdx, rax
test rax, rax
je 0x14005ab4f
mov cl, 1
xor edi, edi
test cl, cl
mov eax, edi
movzx ecx, cl
cmovne rax, rdx
mov rcx, rbx
mov rdx, qword [str.NtCreateKey]
mov qword [0x1401b5b20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ab6f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtOpenKeyEx]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5aa0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ab8f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5af0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005abaf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5b10], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005abcf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtSetValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5b40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005abef
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5ac0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ac0f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5ad0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ac2f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5ab0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ac4f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5b50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ac6f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtRenameKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5b30], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ac8f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtNotifyChangeMultipleKeys]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1401b5b00], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14005ab32
mov al, 1
test al, al
cmovne rdi, rcx
mov qword [0x1401b5ae0], rdi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400fb890
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x20], eax
xor al, al
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005ab04
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor cl, cl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rdx, qword [rbp - 0x20]
jmp 0x14005a90a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005a93c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005a96a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005a998
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005a9c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005a9f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005aa22
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005aa50
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005aa7e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005aaac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14005aada