Function at 0x140026b15
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push r15
mov rax, 0xc
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140026b33
sub rsp, 0x28
call fcn.14004be80
mov rcx, qword [rsp + 0xc8]
call fcn.14002dc60
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14004bef0
add rsp, 0x10
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x30]
sub rsp, 0x10
call fcn.14004bef0
add rsp, 0x10
mov dword [0x140104001], 0x30001c5
mov dword [0x140104001], 0x30001c6
mov qword [rsp + 0x48], 0x20019
mov dword [0x140104001], 0x30001c9
cmp qword [rsp + 0xb8], 0
je 0x140026bdb
mov dword [0x140104001], 0x30001c9
mov r15, qword [rsp + 0x48]
or r15, 0x200
mov qword [rsp + 0x48], r15
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push 1
push qword [rsp + 0x48]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400493d0
add rsp, 0x28
call fcn.14004bcc0
movabs rcx, 0x1401047a6
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14004bde0
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.14004bc00
or rax, rax
je 0x140026cca
mov dword [0x140104001], 0x30001c9
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x48]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push qword [rsp + 0x48]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140049470
add rsp, 0x28
lea rcx, [rsp + 0x30]
pop rdx
call fcn.14004bb20
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push 1
push qword [rsp + 0x48]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140049470
add rsp, 0x28
call fcn.14004bcc0
movabs rcx, 0x1401047a6
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14004bde0
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.14004bc00
or rax, rax
je 0x140026db9
mov dword [0x140104001], 0x30001c9
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x48]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push qword [rsp + 0x48]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400493d0
add rsp, 0x28
lea rcx, [rsp + 0x30]
pop rdx
call fcn.14004bb20
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x140026e04
mov dword [0x140104001], 0x30001c9
movabs rax, 0x140108b10
push rax
push 0x30
push qword [rsp + 0xd0]
pop rcx
pop rdx
pop r8
call fcn.14004a680
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
sub rsp, 8
lea rax, [rsp + 0x58]
mov rax, rax
push rax
push qword [rsp + 0x58]
push 0
push qword [rsp + 0x48]
push qword [rsp + 0xc8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.DLL_RegOpenKeyExW
add rsp, 0x30
mov qword [rsp + 0x38], rax
mov dword [0x140104001], 0x30001c9
cmp qword [rsp + 0x38], 0
je 0x140026f61
mov dword [0x140104001], 0x30001c9
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x140026ee6
mov dword [0x140104001], 0x30001c9
push qword [rsp + 0x38]
mov rbp, qword [rsp + 0xc8]
pop rax
mov dword [rbp + 8], eax
mov dword [0x140104001], 0x30001c9
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push qword [rsp + 0x48]
pop rcx
sub rsp, 0x20
call fcn.140028148
add rsp, 0x28
mov rbp, qword [rsp + 0xc8]
lea rcx, [rbp + 0xc]
pop rdx
call fcn.14004bb20
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
cmp qword [rsp + 0x50], 0
je 0x140026f16
mov dword [0x140104001], 0x30001c9
push qword [rsp + 0x50]
pop rcx
call sub.ADVAPI32.DLL_RegCloseKey
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001c9
movabs rcx, 0x140104276
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bab0
add rsp, 0x28
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
jmp 0x140028105
mov dword [0x140104001], 0x30001c9
mov dword [0x140104001], 0x30001cb
lea rax, [rsp + 0x68]
mov rax, rax
push rax
push 0
push 0
push 0
push qword [rsp + 0x50]
push qword [rsp + 0x78]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.DLL_RegQueryValueExW
add rsp, 0x30
mov qword [rsp + 0x38], rax
mov dword [0x140104001], 0x30001cc
cmp qword [rsp + 0x38], 0
je 0x1400270a1
mov dword [0x140104001], 0x30001cd
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x140027042
mov dword [0x140104001], 0x30001ce
push qword [rsp + 0x38]
mov rbp, qword [rsp + 0xc8]
pop rax
mov dword [rbp + 8], eax
mov dword [0x140104001], 0x30001cf
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push qword [rsp + 0x48]
pop rcx
sub rsp, 0x20
call fcn.140028148
add rsp, 0x28
mov rbp, qword [rsp + 0xc8]
lea rcx, [rbp + 0xc]
pop rdx
call fcn.14004bb20
mov dword [0x140104001], 0x30001d0
mov dword [0x140104001], 0x30001d2
push qword [rsp + 0x50]
pop rcx
call sub.ADVAPI32.DLL_RegCloseKey
mov dword [0x140104001], 0x30001d3
movabs rcx, 0x140104276
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bab0
add rsp, 0x28
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
jmp 0x140028105
mov dword [0x140104001], 0x30001d4
mov dword [0x140104001], 0x30001d6
cmp dword [rsp + 0x68], 0
je 0x1400271b4
mov dword [0x140104001], 0x30001d7
movsxd rax, dword [rsp + 0x68]
mov rax, rax
push rax
pop rcx
call fcn.14004a3d0
mov qword [rsp + 0x60], rax
mov dword [0x140104001], 0x30001d8
mov r15, qword [rsp + 0x60]
and r15, r15
jne 0x1400271aa
mov dword [0x140104001], 0x30001d9
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x14002714b
mov dword [0x140104001], 0x30001da
mov rbp, qword [rsp + 0xc0]
mov dword [rbp + 8], 0xffffffff
mov dword [0x140104001], 0x30001db
mov rbp, qword [rsp + 0xc0]
movabs rdx, str.Error:_Cant_allocate_memory
lea rcx, [rbp + 0xc]
call fcn.14004bcf0
mov dword [0x140104001], 0x30001dc
mov dword [0x140104001], 0x30001de
push qword [rsp + 0x50]
pop rcx
call sub.ADVAPI32.DLL_RegCloseKey
mov dword [0x140104001], 0x30001df
movabs rcx, 0x140104276
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bab0
add rsp, 0x28
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
jmp 0x140028105
mov dword [0x140104001], 0x30001e0
mov dword [0x140104001], 0x30001e1
mov dword [0x140104001], 0x30001e3
lea rax, [rsp + 0x68]
mov rax, rax
push rax
push qword [rsp + 0x68]
lea rax, [rsp + 0x68]
mov rax, rax
push rax
push 0
push qword [rsp + 0x50]
push qword [rsp + 0x78]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.DLL_RegQueryValueExW
add rsp, 0x30
mov qword [rsp + 0x38], rax
mov dword [0x140104001], 0x30001e4
push qword [rsp + 0x50]
pop rcx
call sub.ADVAPI32.DLL_RegCloseKey
mov dword [0x140104001], 0x30001e5
cmp qword [rsp + 0x38], 0
je 0x14002730b
mov dword [0x140104001], 0x30001e6
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x1400272ac
mov dword [0x140104001], 0x30001e7
push qword [rsp + 0x38]
mov rbp, qword [rsp + 0xc8]
pop rax
mov dword [rbp + 8], eax
mov dword [0x140104001], 0x30001e8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push qword [rsp + 0x48]
pop rcx
sub rsp, 0x20
call fcn.140028148
add rsp, 0x28
mov rbp, qword [rsp + 0xc8]
lea rcx, [rbp + 0xc]
pop rdx
call fcn.14004bb20
mov dword [0x140104001], 0x30001e9
mov dword [0x140104001], 0x30001eb
push qword [rsp + 0x60]
pop rcx
call fcn.14004a5e0
mov dword [0x140104001], 0x30001ec
movabs rcx, 0x140104276
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bab0
add rsp, 0x28
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
jmp 0x140028105
mov dword [0x140104001], 0x30001ed
mov dword [0x140104001], 0x30001ef
mov r15, qword [rsp + 0xc0]
and r15, r15
je 0x140027348
mov dword [0x140104001], 0x30001f0
movsxd rax, dword [rsp + 0x58]
push rax
mov rbp, qword [rsp + 0xc8]
pop rax
mov dword [rbp], eax
mov dword [0x140104001], 0x30001f1
mov dword [0x140104001], 0x30001f3
movsxd rax, dword [rsp + 0x58]
push rax
mov dword [0x140104001], 0x30001f4
mov r15, 3
cmp r15, qword [rsp]
jne 0x1400277c3
mov dword [0x140104001], 0x30001f5
movsxd r15, dword [rsp + 0x70]
cmp r15, 0x830
jg 0x140027514
mov dword [0x140104001], 0x30001f6
mov qword [rsp + 0x88], 0
jmp 0x1400273bb
mov dword [0x140104001], 0x30001f6
movsxd r15, dword [rsp + 0x70]
dec r15
cmp r15, qword [rsp + 0x88]
jl 0x140027505
mov dword [0x140104001], 0x30001f7
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
movabs rcx, 0x140104440
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x14010462c
push rax
push 2
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov r15, qword [rsp + 0xb0]
add r15, qword [rsp + 0xd0]
mov rax, r15
push rax
pop rcx
sub rsp, 0x20
call fcn.14004a690
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140049730
add rsp, 0x20
push rax
call fcn.14004bc90
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140049e50
add rsp, 0x28
pop rax
movabs rcx, 0x14010456c
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x30001f8
inc qword [rsp + 0x88]
jno 0x1400273b1
mov dword [0x140104001], 0x30001f9
jmp 0x140027689
mov dword [0x140104001], 0x30001f9
mov dword [0x140104001], 0x30001fa
mov qword [rsp + 0x88], 0
jmp 0x140027540
mov dword [0x140104001], 0x30001fa
mov rax, 0x82f
cmp rax, qword [rsp + 0x88]
jl 0x140027689
mov dword [0x140104001], 0x30001fb
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
movabs rcx, 0x140104440
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x14010462c
push rax
push 2
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov r15, qword [rsp + 0xb0]
add r15, qword [rsp + 0xd0]
mov rax, r15
push rax
pop rcx
sub rsp, 0x20
call fcn.14004a690
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140049730
add rsp, 0x20
push rax
call fcn.14004bc90
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140049e50
add rsp, 0x28
pop rax
movabs rcx, 0x14010456c
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x30001fc
inc qword [rsp + 0x88]
jno 0x140027536
mov dword [0x140104001], 0x30001fd
mov dword [0x140104001], 0x30001fe
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x60]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400493d0
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x30001ff
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x140027753
mov dword [0x140104001], 0x3000200
push qword [rsp + 0x68]
mov rbp, qword [rsp + 0xd0]
pop rax
mov qword [rbp + 0x20], rax
mov dword [0x140104001], 0x3000201
movsxd rax, dword [rsp + 0x70]
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov dword [rbp + 4], eax
mov dword [0x140104001], 0x3000202
mov dword [0x140104001], 0x3000203
mov rcx, qword [rsp + 0xd0]
push rax
sub rsp, 8
call fcn.14002dc60
add rsp, 8
pop rax
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
add rsp, 8
jmp 0x140028105
mov dword [0x140104001], 0x3000205
mov r15, 4
cmp r15, qword [rsp]
jne 0x1400278c0
mov dword [0x140104001], 0x3000206
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x14002783e
mov dword [0x140104001], 0x3000207
sub rsp, 8
push qword [rsp + 0x70]
pop rcx
sub rsp, 0x20
call fcn.14004a650
add rsp, 0x28
mov rax, rax
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov dword [rbp + 0x14], eax
mov dword [0x140104001], 0x3000208
mov rbp, qword [rsp + 0xc8]
mov dword [rbp + 4], 4
mov dword [0x140104001], 0x3000209
mov dword [0x140104001], 0x300020a
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x80]
pop rcx
sub rsp, 0x20
call fcn.14004a650
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140049100
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x300020c
jmp 0x140028099
mov dword [0x140104001], 0x300020c
mov r15, 2
cmp r15, qword [rsp]
jne 0x140027b02
mov dword [0x140104001], 0x300020d
sub rsp, 8
xor rax, rax
mov rax, rax
push rax
push 0
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call qword [0x140150d0c]
add rsp, 0x28
mov qword [rsp + 0x78], rax
mov dword [0x140104001], 0x300020e
mov r15, qword [rsp + 0x78]
and r15, r15
jle 0x140027adf
mov dword [0x140104001], 0x300020f
sub rsp, 8
push qword [rsp + 0x80]
pop rcx
sub rsp, 0x20
call fcn.14004a3d0
add rsp, 0x28
mov qword [rsp + 0x80], rax
mov dword [0x140104001], 0x3000210
cmp qword [rsp + 0x80], 0
je 0x140027ac9
mov dword [0x140104001], 0x3000211
sub rsp, 8
mov rax, qword [rsp + 0x80]
mov rax, rax
push rax
push qword [rsp + 0x90]
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call qword [0x140150d0c]
add rsp, 0x28
and rax, rax
je 0x140027a9c
mov dword [0x140104001], 0x3000212
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x90]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14004a570
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000213
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x140027a92
mov dword [0x140104001], 0x3000214
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
mov rbp, qword [rsp + 0xd0]
lea rcx, [rbp + 0x28]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000215
sub rsp, 8
push qword [rsp + 0x50]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov rax, rax
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov dword [rbp + 4], eax
mov dword [0x140104001], 0x3000216
mov dword [0x140104001], 0x3000217
mov dword [0x140104001], 0x3000218
sub rsp, 8
push qword [rsp + 0x88]
pop rcx
sub rsp, 0x20
call fcn.14004a5e0
add rsp, 0x28
mov dword [0x140104001], 0x3000219
mov dword [0x140104001], 0x300021a
jmp 0x140027ae9
mov dword [0x140104001], 0x300021a
mov dword [0x140104001], 0x300021c
mov dword [0x140104001], 0x300021e
jmp 0x140028099
mov dword [0x140104001], 0x300021e
mov r15, 7
cmp r15, qword [rsp]
jne 0x140027e99
mov dword [0x140104001], 0x300021f
mov r15, qword [rsp + 0x88]
movsxd rax, dword [rsp + 0x70]
cmp r15, rax
jge 0x140027cfc
mov dword [0x140104001], 0x3000220
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push 1
mov r15, qword [rsp + 0x80]
add r15, qword [rsp + 0xa0]
mov rax, r15
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14004a6a0
add rsp, 0x20
call fcn.14004bcc0
movabs rcx, 0x140104276
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14004bde0
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x28
call fcn.14004bc00
add rsp, 0x28
or rax, rax
je 0x140027c2d
mov dword [0x140104001], 0x3000221
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
movabs rcx, 0x1401042a0
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000222
jmp 0x140027cc5
mov dword [0x140104001], 0x3000222
mov dword [0x140104001], 0x3000223
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push 1
mov r15, qword [rsp + 0x90]
add r15, qword [rsp + 0xb0]
mov rax, r15
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14004a6a0
add rsp, 0x28
pop rax
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000224
mov dword [0x140104001], 0x3000225
mov r15, qword [rsp + 0x88]
add r15, 2
mov qword [rsp + 0x88], r15
mov dword [0x140104001], 0x3000226
jmp 0x140027b1d
mov dword [0x140104001], 0x3000227
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push 1
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140049470
add rsp, 0x20
call fcn.14004bcc0
movabs rcx, 0x1401042a0
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14004bde0
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x28
call fcn.14004bc00
add rsp, 0x28
or rax, rax
je 0x140027de9
mov dword [0x140104001], 0x3000228
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x60]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400493d0
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000229
mov dword [0x140104001], 0x300022a
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x140027e80
mov dword [0x140104001], 0x300022b
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
mov rbp, qword [rsp + 0xd0]
lea rcx, [rbp + 0x28]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x300022c
sub rsp, 8
push qword [rsp + 0x50]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov rax, rax
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov dword [rbp + 4], eax
mov dword [0x140104001], 0x300022d
mov dword [0x140104001], 0x300022f
jmp 0x140028099
mov dword [0x140104001], 0x300022f
mov r15, 0xb
cmp r15, qword [rsp]
jne 0x140027f97
mov dword [0x140104001], 0x3000230
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x140027f15
mov dword [0x140104001], 0x3000231
sub rsp, 8
push qword [rsp + 0x70]
pop rcx
sub rsp, 0x20
call fcn.14004a640
add rsp, 0x28
mov rax, rax
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov qword [rbp + 0x18], rax
mov dword [0x140104001], 0x3000232
mov rbp, qword [rsp + 0xc8]
mov dword [rbp + 4], 8
mov dword [0x140104001], 0x3000233
mov dword [0x140104001], 0x3000234
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x80]
pop rcx
sub rsp, 0x20
call fcn.14004a640
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140049100
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000236
jmp 0x140028099
mov dword [0x140104001], 0x3000236
mov r15, 1
cmp r15, qword [rsp]
jne 0x140028099
mov dword [0x140104001], 0x3000237
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x78]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14004a570
add rsp, 0x20
lea rcx, [rsp + 0x50]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x3000238
mov r15, qword [rsp + 0xc8]
and r15, r15
je 0x14002808f
mov dword [0x140104001], 0x3000239
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x20
call fcn.14004ba60
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14004bab0
add rsp, 0x20
mov rbp, qword [rsp + 0xd0]
lea rcx, [rbp + 0x28]
pop rdx
sub rsp, 0x28
call fcn.14004bb20
add rsp, 0x28
mov dword [0x140104001], 0x300023a
sub rsp, 8
push qword [rsp + 0x50]
pop rcx
sub rsp, 0x20
call fcn.1400493b0
add rsp, 0x28
mov rax, rax
push rax
mov rbp, qword [rsp + 0xd0]
pop rax
mov dword [rbp + 4], eax
mov dword [0x140104001], 0x300023b
mov dword [0x140104001], 0x300023c
pop rax
mov dword [0x140104001], 0x300023e
push qword [rsp + 0x60]
pop rcx
call fcn.14004a5e0
mov dword [0x140104001], 0x3000240
mov rcx, qword [rsp + 0x40]
push rcx
sub rsp, 0x28
call fcn.14004ba60
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bab0
add rsp, 0x28
pop rax
push rax
call fcn.14004bc60
pop rdx
add rax, rdx
jmp 0x140028105
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14004bf60
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14004bf60
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14004bf60
add rsp, 0x28
pop rax
add rsp, 0x88
pop r15
pop rbp
ret