Function at 0x14000df60
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rax, qword [0x1400f63f8]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdx, qword [str.NtClose]
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rsi, [0x1400fe0c8]
mov rdx, rax
test rax, rax
je 0x14000e1ef
mov cl, 1
xor edi, edi
test cl, cl
mov eax, edi
movzx ecx, cl
cmovne rax, rdx
mov rcx, rbx
mov rdx, qword [str.NtCreateKey]
mov qword [0x1400f7160], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e20f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtOpenKeyEx]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f70e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e22f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7130], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e24f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7150], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e26f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtSetValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7180], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e28f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7100], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e2af
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7110], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e2cf
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f70f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e2ef
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7190], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e30f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtRenameKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7170], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e32f
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtNotifyChangeMultipleKeys]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400f7140], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14000e1d2
mov al, 1
test al, al
cmovne rdi, rcx
mov qword [0x1400f7120], rdi
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140085660
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x20], eax
xor al, al
mov qword [rbp - 0x18], rsi
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e1a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor cl, cl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rdx, qword [rbp - 0x20]
jmp 0x14000dfaa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000dfdc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e00a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e038
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e066
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e094
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e0c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e0f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e11e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e14c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbp - 0x18], rsi
xor dl, dl
mov dword [rbp - 0x20], eax
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov rcx, qword [rbp - 0x20]
jmp 0x14000e17a