Function at 0x1800073d0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x1800233f8], 0
jne 0x1800080cc
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.0:db0:lk0:hs0:ld0:ll0:hb1:pj:zb0.1:bb
mov qword [rax - 0x38], r15
mov byte [0x1800233f8], 1
mov rcx, rbp
call fcn.1800097dc
lea rcx, [0x180022140]
xor edx, edx
mov r8d, 0x12a0
call fcn.18000b8a0
lea rdx, [0x18002215e]
lea rcx, [0x18001aa78]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x18002235c]
lea rcx, [0x18001aa80]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x18001aa88]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x180007519
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800074cb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1800074cb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800074b0
cmp r10d, esi
jne 0x1800074f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800074f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007500
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800074e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007490
jmp 0x180007519
mov ecx, dword [0x180022398]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x180022398], ecx
lea rdx, [0x18002239c]
lea rcx, [0x18001aa90]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x18002259a]
lea rcx, [0x18001aa98]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001aaa0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800075f9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800075ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800075ab
inc r8
inc r10d
cmp r8, rsi
jl 0x180007590
cmp r10d, esi
jne 0x1800075d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800075d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800075e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800075c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007574
jmp 0x1800075f9
mov ecx, dword [0x1800225d8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1800225d8], ecx
lea rdx, [0x1800225dc]
lea rcx, [0x18001aaa8]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x1800227da]
lea rcx, [0x18001aab0]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x18001aab8]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800076dd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000768b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x18000768b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007670
cmp r10d, esi
jne 0x1800076b3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800076b3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800076c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800076a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007654
jmp 0x1800076dd
mov ecx, dword [0x180022818]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x180022818], ecx
lea rdx, [0x18002281c]
lea rcx, [0x18001aac0]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x180022858]
lea rcx, [0x18001aac8]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x180022894]
lea rcx, [0x18001aad0]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x1800228f8]
lea rcx, [0x18001aad8]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x18002295c]
lea rcx, [0x18001aae0]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001aae8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000780d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800077bb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800077bb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800077a0
cmp r10d, esi
jne 0x1800077e3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800077e3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800077f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800077d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007780
jmp 0x18000780d
mov ecx, dword [0x1800229c0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229c0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001aaf0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800078cd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000787b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000787b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007860
cmp r10d, esi
jne 0x1800078a3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1800078a3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1800078b0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007890
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007840
jmp 0x1800078cd
mov ecx, dword [0x1800229c4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229c4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001aaf8]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x18000798d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000793b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x18000793b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007920
cmp r10d, esi
jne 0x180007963
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007963
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007970
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007950
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007900
jmp 0x18000798d
mov ecx, dword [0x1800229c8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229c8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001ab00]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007a4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1800079fb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1800079fb
inc r8
inc r10d
cmp r8, rsi
jl 0x1800079e0
cmp r10d, esi
jne 0x180007a23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007a23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007a30
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007a10
inc rdx
inc r9d
cmp rdx, r11
jl 0x1800079c0
jmp 0x180007a4d
mov ecx, dword [0x1800229cc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229cc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001ab08]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007b0d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007abb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180007abb
inc r8
inc r10d
cmp r8, rsi
jl 0x180007aa0
cmp r10d, esi
jne 0x180007ae3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007ae3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007af0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007ad0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007a80
jmp 0x180007b0d
mov ecx, dword [0x1800229d0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229d0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001ab10]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007bcd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007b7b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180007b7b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007b60
cmp r10d, esi
jne 0x180007ba3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007ba3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007bb0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007b90
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007b40
jmp 0x180007bcd
mov ecx, dword [0x1800229d4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229d4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001ab18]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007c8d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007c3b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180007c3b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007c20
cmp r10d, esi
jne 0x180007c63
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007c63
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007c70
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007c50
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007c00
jmp 0x180007c8d
mov ecx, dword [0x1800229d8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229d8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001ab20]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007d4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007cfb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180007cfb
inc r8
inc r10d
cmp r8, rsi
jl 0x180007ce0
cmp r10d, esi
jne 0x180007d23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007d23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007d30
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007d10
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007cc0
jmp 0x180007d4d
mov ecx, dword [0x1800229dc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x1800229dc], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x180007dbb
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x1800080a9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.18000b8a0
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x18002215e]
lea rcx, [0x18001aa78]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x18002235c]
lea rcx, [0x18001aa80]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007ec2
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007e8b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x180007e8b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007e70
cmp r10d, esi
jne 0x180007eb7
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007eb7
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007f90
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007ea0
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007e52
mov r15d, 1
lea rdx, [0x18002239c]
lea rcx, [0x18001aa90]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x18002259a]
lea rcx, [0x18001aa98]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x18001aaa0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x180007fcd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x180007f5b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x180007f5b
inc r8
inc r10d
cmp r8, rsi
jl 0x180007f40
cmp r10d, esi
jne 0x180007f83
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180007f83
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180007fb4
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007f70
inc rdx
inc r9d
cmp rdx, r11
jl 0x180007f23
jmp 0x180007fcd
mov ecx, dword [0x180022398]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x180022398], ecx
jmp 0x180007ec8
mov ecx, dword [0x1800225d8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1800225d8], ecx
lea rdx, [0x1800225dc]
lea rcx, [0x18001aaa8]
xor r8d, r8d
call fcn.1800072a0
lea rdx, [0x1800227da]
lea rcx, [0x18001aab0]
xor r8d, r8d
call fcn.1800072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1800080a9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x18000805b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x18000805b
inc r8
inc r10d
cmp r8, rsi
jl 0x180008040
cmp r10d, esi
jne 0x180008083
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x180008083
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x180008090
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008070
inc rdx
inc r9d
cmp rdx, r11
jl 0x180008021
jmp 0x1800080a9
mov ecx, dword [0x180022818]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x180022818], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret