Function at 0x140058fb0
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x438
mov qword [rsp + 0xd0], 0xfffffffffffffffe
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + Ordinal_1062], rax
mov rsi, r9
mov qword [rsp + 0xa0], r9
mov rdi, r8
mov rbx, rdx
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0x68], rcx
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov word [rsp + 0x1a0], r14w
xor edx, edx
lea r8d, [r14 + 0x7e]
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_418]
call sub.ntdll.dll_memset
mov word [rsp + 0x220], r14w
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x222]
call sub.ntdll.dll_memset
mov r15, r14
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r14
mov dword [rsp + 0x70], r14d
mov eax, r14d
test rbx, rbx
setne al
test eax, eax
jne 0x140059179
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140433ad0]
mov rcx, rbx
call sub.ntdll.dll_memset
lea edx, [r14 + 0x5c]
lea rcx, str...mgrhelp.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400590bf
mov rbx, r14
jmp 0x140059150
mov byte [rsp + 0x190], 0
xor eax, eax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_401], rax
mov word [rsp + 0x199], ax
mov byte [rsp + 0x19b], al
mov r8d, 0x17d
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x190]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x140059110
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x190]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x140059140
call fcn.140049470
mov rdi, qword [rax]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.pBootLst___NULL
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [rdi + 0x10]
jmp 0x140059c13
mov eax, r14d
test rdi, rdi
setne al
test eax, eax
jne 0x1400591c4
mov edx, 0x17e
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.pBootFile___NULL
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov eax, r14d
test rsi, rsi
setne al
test eax, eax
jne 0x14005920f
mov edx, 0x17f
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.pSys___NULL
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
lea rdx, str.amload_d
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rcx, str.SeRestorePrivilege
call fcn.1400562e0
lea rcx, str.SeBackupPrivilege
call fcn.1400562e0
mov r8, rdi
lea rdx, [rsp + 0x1a0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov esi, eax
test eax, eax
je 0x140059292
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x18a
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov r8, rax
mov r9d, esi
lea rdx, str._s:_RegLoadKey:__d
mov rcx, rdi
call qword [rbx + 0x10]
lea r8, [rsp + 0x1a0]
lea rdx, str._sObjects9dea862c_5cdd_4e70_acc1_f32b344d4795Elements24000001
lea rcx, [rsp + 0x220]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x20], rdx
mov r9d, 0x20019
xor r8d, r8d
lea rdx, [rsp + 0x220]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
test eax, eax
je 0x14005930c
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_403
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov r8, rax
mov r9d, esi
lea rdx, str._s:_RegOpenKeyEx:__d
mov rcx, rdi
call qword [rbx + 0x10]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, str.Element
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, r14d
test eax, eax
sete cl
test ecx, ecx
jne 0x14005937f
mov edx, reloc.MFC80U.DLL_Ordinal_403
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._RegQueryValueEx_hKey___T__Element____NULL__dwType__NULL__Length_
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov ecx, dword [rsp + 0x30]
call sub.MFC80U.DLL_Ordinal_265
mov r15, rax
mov r8d, dword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, str.Element
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, r14d
test eax, eax
sete cl
test ecx, ecx
jne 0x14005940d
mov edx, 0x197
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str._RegQueryValueEx_hKey___T__Element____NULL__dwType__pValue__Length_
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov r14, r15
mov byte [rsp + 0x110], 0
xor edx, edx
lea r8d, [rdx + 0x7f]
lea rcx, [rsp + 0x111]
call sub.ntdll.dll_memset
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r13, rcx
test ecx, ecx
jle 0x1400595da
movzx ebx, byte [rsp + 0x60]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
nop
nop
movsxd r8, r13d
add r8, r8
mov rdx, r14
lea rcx, [rsp + 0x110]
call sub.ntdll.dll_memcpy
test rbp, rbp
je 0x1400594cb
mov rcx, rsi
sub rcx, rbp
sar rcx, 7
mov rax, qword [rsp + 0x58]
sub rax, rbp
sar rax, 7
cmp rcx, rax
jae 0x1400594cb
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x110]
lea edx, [rax + 1]
mov rcx, rsi
call fcn.140057b40
sub rsi, 0xffffffffffffff80
mov qword [rsp + 0x50], rsi
mov rbp, qword [rsp + 0x48]
jmp 0x140059594
mov rdi, rsi
cmp rbp, rsi
jbe 0x1400594e3
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rdi
test rbp, rbp
je 0x14005951d
mov rax, rsi
sub rax, rbp
sar rax, 7
je 0x14005951d
cmp rbp, rsi
jbe 0x140059514
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rdi, rbp
sar rdi, 7
jmp 0x14005951f
xor edi, edi
movaps xmm0, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0xc0], xmm0
lea r9, [rsp + 0x110]
mov r8d, 1
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.140058150
mov rbp, qword [rsp + 0x48]
mov r12, rbp
mov rsi, qword [rsp + 0x50]
cmp rbp, rsi
jbe 0x140059572
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
shl rdi, 7
lea rax, [rdi + r12]
cmp rax, rsi
ja 0x140059584
cmp rax, rbp
jae 0x140059594
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
lea eax, [r13 + 1]
movsxd rcx, eax
lea r14, [r14 + rcx*2]
mov byte [rsp + 0x110], 0
xor edx, edx
lea r8d, [rdx + 0x7f]
lea rcx, [rsp + 0x111]
call sub.ntdll.dll_memset
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r13d, ecx
test ecx, ecx
jg 0x140059460
jmp 0x1400595e4
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
test rbp, rbp
jne 0x1400595f1
xor r14d, r14d
mov rcx, r14
jmp 0x1400595fe
mov rcx, rsi
sub rcx, rbp
sar rcx, 7
xor r14d, r14d
mov eax, r14d
test rcx, rcx
setne al
test eax, eax
jne 0x140059649
mov edx, Ordinal_424
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.vBootLst.size_____0
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140059663
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov qword [rsp + 0x38], r14
test r15, r15
je 0x14005967f
mov rcx, r15
call sub.MFC80U.DLL_Ordinal_266
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov r15, r14
mov r12, rbp
cmp rbp, rsi
jbe 0x14005969a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov r13, qword [rsp + 0x68]
nop
mov rdi, rsi
cmp rbp, rsi
jbe 0x1400596b3
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
cmp r12, rdi
je 0x140059b4b
cmp r12, rsi
jb 0x1400596c7
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_512
lea rcx, [rsp + 0x220]
call sub.ntdll.dll_memset
mov r9, r12
lea r8, [rsp + 0x1a0]
lea rdx, str._sObjects_sElements12000002
lea rcx, [rsp + 0x220]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov dword [rsp + 0x30], r14d
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, str.Element
lea rdx, [rsp + 0x220]
mov rcx, r13
call fcn.140056890
test eax, eax
je 0x140059a30
mov ecx, dword [rsp + 0x30]
call sub.MFC80U.DLL_Ordinal_265
mov r15, rax
mov r8d, dword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rdx
mov r9, r15
lea r8, str.Element
lea rdx, [rsp + 0x220]
mov rcx, r13
call fcn.140056890
test eax, eax
je 0x140059a30
mov edi, dword [rsp + 0x30]
cmp edi, 0xb
jb 0x140059a30
mov edx, r14d
test edi, edi
je 0x1400597ae
mov rcx, r15
nop
nop
movzx eax, byte [rcx]
cmp al, 0x41
jb 0x1400597a3
cmp al, 0x5a
ja 0x1400597a3
add al, 0x20
mov byte [rcx], al
mov edi, dword [rsp + 0x30]
add edx, 1
add rcx, 1
cmp edx, edi
jb 0x140059790
lea rdx, str.winload.
mov rcx, r15
call qword [sym.imp.ntdll.dll_wcsstr]
test rax, rax
je 0x140059a30
xor edx, edx
mov r8d, reloc.MFC80U.DLL_Ordinal_512
lea rcx, [rsp + 0x220]
call sub.ntdll.dll_memset
mov r9, r12
lea r8, [rsp + 0x1a0]
lea rdx, str._sObjects_sElements11000001
lea rcx, [rsp + 0x220]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov dword [rsp + 0x30], r14d
test r15, r15
je 0x14005980e
mov rcx, r15
call sub.MFC80U.DLL_Ordinal_266
mov r15, r14
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, str.Element
lea rdx, [rsp + 0x220]
mov rcx, r13
call fcn.140056890
test eax, eax
je 0x140059b0d
mov ecx, dword [rsp + 0x30]
call sub.MFC80U.DLL_Ordinal_265
mov r15, rax
mov r8d, dword [rsp + 0x30]
xor edx, edx
mov rcx, rax
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rdx
mov r9, r15
lea r8, str.Element
lea rdx, [rsp + 0x220]
mov rcx, r13
call fcn.140056890
test eax, eax
je 0x140059acf
mov eax, r14d
cmp dword [rsp + 0x30], 0x50
seta al
test eax, eax
je 0x140059a91
xor eax, eax
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rax
mov rdi, qword [rsp + 0xa0]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0xdc], eax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400599ed
mov dword [rsp + 0xd8], r14d
lea rcx, [rsp + 0xf8]
mov eax, dword [r15 + 0x38]
mov dword [rcx], eax
mov eax, dword [r15 + 0x3c]
mov dword [rcx + 4], eax
mov eax, dword [r15 + 0x40]
mov dword [rcx + 8], eax
mov eax, dword [r15 + 0x44]
mov dword [rcx + 0xc], eax
lea rcx, [rsp + 0xe8]
mov eax, dword [r15 + 0x20]
mov dword [rcx], eax
mov eax, dword [r15 + 0x24]
mov dword [rcx + 4], eax
mov eax, dword [r15 + 0x28]
mov dword [rcx + 8], eax
mov eax, dword [r15 + 0x2c]
mov dword [rcx + 0xc], eax
call fcn.140049550
mov rdi, rax
mov rax, qword [rax]
mov edx, dword [rsp + 0xdc]
mov rcx, rdi
call qword [rax]
test eax, eax
je 0x140059a53
mov ebx, r14d
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x18]
test eax, eax
je 0x1400599d9
mov rax, qword [rdi]
mov edx, ebx
mov rcx, rdi
call qword [rax + 0x10]
mov r11, rax
lea rdx, [rsp + 0xe8]
mov rax, qword [rax + 0x78]
cmp rax, qword [rdx]
jne 0x1400599b2
mov rax, qword [r11 + 0x80]
cmp rax, qword [rdx + 8]
jne 0x1400599b2
mov ecx, r14d
jmp 0x1400599b7
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x1400599cd
add ebx, 1
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
cmp ebx, eax
jb 0x140059981
jmp 0x1400599d9
mov rax, qword [r11 + 8]
mov qword [rsp + 0xe0], rax
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x78]
call fcn.140058e20
jmp 0x140059a30
mov dword [rsp + 0xd8], 1
mov eax, dword [r15 + 0x38]
mov dword [rsp + 0xe8], eax
mov rax, qword [r15 + 0x20]
cqo
and edx, 0x1ff
add rax, rdx
sar rax, 9
mov qword [rsp + 0xe0], rax
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x78]
call fcn.140058e20
mov rsi, qword [rsp + 0x50]
cmp r12, rsi
jb 0x140059a45
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x50]
sub r12, 0xffffffffffffff80
mov rbp, qword [rsp + 0x48]
jmp 0x1400596a0
mov edx, 0x1d8
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.pGpart__Init_BootInfo.DiskIndex_
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov edx, 0x1ce
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.Length___0x50
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov edx, 0x1cd
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.QueryValueXX_tcsKeyPath___T__Element____pValue__Length_
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov edx, 0x1ca
lea rcx, str...mgrhelp.cpp
call fcn.1400561f0
mov rdi, rax
call fcn.140049470
mov r10, qword [rax]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.QueryValueXX_tcsKeyPath___T__Element____NULL__Length_
lea rdx, str._s_return_code:_0x_08X___s.
mov rcx, rax
call qword [r10 + 0x10]
jmp 0x140059c13
mov rdi, qword [rsp + 0x80]
cmp rdi, qword [rsp + 0x88]
jbe 0x140059b63
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rsi, qword [rsp + 0x98]
nop
nop
mov rbx, qword [rsp + 0x88]
cmp qword [rsp + 0x80], rbx
jbe 0x140059b88
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp rdi, rbx
je 0x140059c13
mov qword [rsp + 0x68], r14
cmp rdi, qword [rsp + 0x88]
jb 0x140059ba6
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [rdi]
cmp eax, 1
jne 0x140059bd5
mov r9, qword [rdi + 8]
mov r8d, dword [rdi + 0x10]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.140056bc0
test eax, eax
je 0x140059bfa
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140007330
jmp 0x140059bfa
test eax, eax
jne 0x140059bfa
mov r8, rdi
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.140056e20
test eax, eax
je 0x140059bfa
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140007330
cmp rdi, qword [rsp + 0x88]
jb 0x140059c0a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add rdi, 0x30
jmp 0x140059b70
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140059c23
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x38], r14
test r15, r15
je 0x140059c35
mov rcx, r15
call sub.MFC80U.DLL_Ordinal_266
lea rdx, [rsp + 0x1a0]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
nop
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140059c5d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r14
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140059c8b
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
jmp 0x140059c90
mov eax, 1
mov rcx, qword [rsp + 0x420]
xor rcx, rsp
call fcn.140161080
add rsp, 0x438
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret