Function at 0x140025f60
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x30
mov rdx, qword [str.NtClose]
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, rax
test rax, rax
je 0x1400261c2
mov cl, 1
xor edi, edi
test cl, cl
mov eax, edi
movzx ecx, cl
cmovne rax, rdx
mov rcx, rbx
mov rdx, qword [str.0__v_]
mov qword [0x1400c3070], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x1400261d6
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.___v_]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3060], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x1400261ea
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.P__v_]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3050], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x1400261fe
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtQueryValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3040], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140026212
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.x__v_]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3030], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140026226
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3020], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14002623a
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtDeleteKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3010], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14002624e
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c3000], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140026262
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtEnumerateValueKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c2ff0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140026276
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtRenameKey]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c2fe0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x14002628a
mov dl, 1
test dl, dl
mov rax, rdi
mov rdx, qword [str.NtNotifyChangeMultipleKeys]
cmovne rax, rcx
mov rcx, rbx
mov qword [0x1400c2fd0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x1400261b1
mov al, 1
mov rbx, qword [rsp + 0x48]
test al, al
mov rsi, qword [rsp + 0x50]
cmovne rdi, rcx
mov qword [0x1400c2fc0], rdi
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor al, al
mov rcx, qword [rbp - 0x10]
jmp 0x14002618f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor cl, cl
mov rdx, qword [rbp - 0x10]
jmp 0x140025f95
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140025fc7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140025ff5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140026023
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140026051
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x14002607f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x1400260ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x1400260db
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140026109
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140026137
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x10], eax
xor dl, dl
mov rcx, qword [rbp - 0x10]
jmp 0x140026165