Function at 0x140066170
Capabilities:
Query or enumerate registry key

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x460
mov qword [rsp + 0x138], 0xfffffffffffffffe
mov qword [rsp + 0x4b0], rbx
mov rax, qword [0x1401787a0]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov r12, rdx
mov r13, rcx
mov qword [rsp + 0xf8], rcx
mov edx, 0xa
lea rcx, [rsp + 0x100]
call fcn.1400a67e8
nop
mov eax, dword [r13 + 0x68]
xor r15d, r15d
or r14, 0xffffffffffffffff
cmp eax, 2
jne 0x1400663d1
call fcn.140097090
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400661fe
mov ecx, 0x80004005
call fcn.140001a00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x88], rdi
lea rdx, str.SYSTEMCurrentControlSetControlPrintPendingUpgradesVersion_2
test rdx, 0xffffffffffff0000
jne 0x14006624f
movzx ebx, dx
mov ecx, ebx
call fcn.1400a2710
test rax, rax
je 0x140066275
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140002a70
mov rdi, qword [rsp + 0x88]
jmp 0x140066275
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x88]
call fcn.1400017b0
mov rdi, qword [rsp + 0x88]
mov dword [rsp + 0x20], 0xf003f
xor r9d, r9d
mov r8, rdi
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xc8]
call fcn.140085a90
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x14006639f
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x14006639f
mov eax, dword [rsp + 0x78]
lea ebp, [rax + rax + 1]
mov ecx, ebp
call fcn.140096bcc
mov rsi, rax
mov ebx, r15d
cmp dword [rsp + 0x64], ebx
jbe 0x140066396
nop dword [rax]
mov dword [rsp + 0x90], ebp
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x90]
mov r8, rsi
mov edx, ebx
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov rdx, rsi
lea rcx, [rsp + 0x100]
call fcn.1400a6ce4
inc ebx
cmp dword [rsp + 0x64], ebx
ja 0x140066340
mov rcx, rsi
call fcn.140096bc4
nop
lea rcx, [rsp + 0xc8]
call fcn.140085b80
nop
lea rdx, [rdi - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400665c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400665c8
cmp eax, 3
jne 0x1400665c8
call fcn.140097090
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400663fa
mov ecx, 0x80004005
call fcn.140001a00
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x80], rdi
lea rdx, str.SYSTEMCurrentControlSetControlPrintPendingUpgradesVersion_3
test rdx, 0xffffffffffff0000
jne 0x14006644b
movzx ebx, dx
mov ecx, ebx
call fcn.1400a2710
test rax, rax
je 0x140066471
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140002a70
mov rdi, qword [rsp + 0x80]
jmp 0x140066471
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x80]
call fcn.1400017b0
mov rdi, qword [rsp + 0x80]
mov dword [rsp + 0x20], 0xf003f
xor r9d, r9d
mov r8, rdi
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0xe0]
call fcn.140085a90
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x14006659f
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x98]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xa4]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x14006659f
mov eax, dword [rsp + 0x78]
lea ebp, [rax + rax + 1]
mov ecx, ebp
call fcn.140096bcc
mov rsi, rax
mov ebx, r15d
cmp dword [rsp + 0x64], ebx
jbe 0x140066596
nop dword [rax + rax]
mov dword [rsp + 0x9c], ebp
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x9c]
mov r8, rsi
mov edx, ebx
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov rdx, rsi
lea rcx, [rsp + 0x100]
call fcn.1400a6ce4
inc ebx
cmp dword [rsp + 0x64], ebx
ja 0x140066540
mov rcx, rsi
call fcn.140096bc4
nop
lea rcx, [rsp + 0xe0]
call fcn.140085b80
nop
lea rdx, [rdi - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400665c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r12 + 8]
test rax, rax
je 0x140066db3
mov r15, qword [rsp + 0x108]
nop
mov rsi, rax
mov qword [rsp + 0xb8], rax
mov rax, qword [rax]
mov qword [rsp + 0xf0], rax
test r15, r15
je 0x140066c18
xor r12d, r12d
mov rdi, r15
test r15, r15
je 0x140066dad
mov r15, qword [r15]
mov rdi, qword [rdi + 0x10]
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rdi - 8], 0
jl 0x140066639
cmp rax, qword [rdi - 0x18]
jne 0x140066639
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x140066670
mov rax, qword [rax]
mov r8d, 1
mov edx, dword [rdi - 0x10]
call qword [rax]
mov rbx, rax
test rax, rax
je 0x140066da7
mov ecx, dword [rdi - 0x10]
mov dword [rax + 8], ecx
mov ecx, dword [rdi - 0x10]
inc ecx
movsxd rdx, ecx
mov r8, rdi
lea rcx, [rax + 0x18]
mov r9, rdx
call fcn.1400c6478
lea rdi, [rbx + 0x18]
mov qword [rsp + 0xa8], rdi
mov rdx, qword [rsi + 0x18]
mov eax, r12d
test rdx, rdx
setne al
test eax, eax
je 0x140066d9c
mov rcx, rdi
call fcn.1400c772c
test eax, eax
jne 0x140066be4
mov rdx, qword [rsi + 0x18]
mov eax, r12d
test rdx, rdx
setne al
test eax, eax
je 0x140066d91
mov rcx, qword [r13 + 0x18]
call fcn.1400c772c
test eax, eax
je 0x140066d3c
call fcn.140097090
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
je 0x140066d31
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x68], rbx
mov rbp, qword [rsi + 0x28]
call fcn.140097090
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
je 0x140066d26
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x70], rsi
test rbp, rbp
je 0x1400667fa
test rbp, 0xffffffffffff0000
jne 0x14006675a
movzx edi, bp
mov ecx, edi
call fcn.1400a2710
test rax, rax
je 0x14006684e
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140002a70
mov rsi, qword [rsp + 0x70]
jmp 0x14006684e
xor eax, eax
mov rcx, r14
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
je 0x1400667fa
mov r12d, dword [rsi - 0x10]
mov r13, rbp
sub r13, rsi
mov edx, 1
sub edx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, ecx
or eax, edx
jge 0x1400667a1
mov edx, ecx
lea rcx, [rsp + 0x70]
call fcn.1400015a0
mov rsi, qword [rsp + 0x70]
cmp r13, r12
ja 0x1400667bf
movsxd r12, edi
lea r8, [r13 + rsi]
movsxd rdx, dword [rsi - 0xc]
mov r9, r12
mov rcx, rsi
call fcn.1400c6510
jmp 0x1400667d4
movsxd r12, edi
movsxd rdx, dword [rsi - 0xc]
mov r9, r12
mov r8, rbp
mov rcx, rsi
call fcn.1400c6478
test edi, edi
js 0x140066c26
cmp edi, dword [rsi - 0xc]
jg 0x140066c26
mov dword [rsi - 0x10], edi
mov byte [r12 + rsi], 0
mov r13, qword [rsp + 0xf8]
xor r12d, r12d
jmp 0x14006684e
lea rdx, [rsi - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x14006684e
cmp dword [rdx + 0x10], 0
jge 0x140066820
cmp dword [rsi - 0xc], 0
jl 0x140066c31
mov dword [rsi - 0x10], r12d
mov byte [rsi], 0
jmp 0x14006684e
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066837
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsp + 0x68]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor edx, edx
mov word [rsp + 0x60], dx
mov byte [rsp + 0x62], dl
mov r8d, 0x100
lea rcx, [rsp + 0x150]
call fcn.1400c6930
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x250]
call fcn.1400c6930
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x350]
call fcn.1400c6930
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400668f2
cmp dword [rdx + 0x10], 0
jge 0x1400668c4
cmp dword [rbx - 0xc], 0
jl 0x140066c3c
mov dword [rbx - 0x10], r12d
mov byte [rbx], 0
jmp 0x1400668f2
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400668db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x68], rbx
mov rsi, qword [rsp + 0x70]
mov qword [rsp + 0x40], 0x100
lea rax, [rsp + 0x350]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x100
lea rax, [rsp + 0x250]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400c9854
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x60]
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x1400669a0
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x140066a19
cmp dword [rdx + 0x10], eax
jge 0x140066975
cmp dword [rbx - 0xc], eax
jl 0x140066c47
mov dword [rbx - 0x10], r12d
mov byte [rbx], al
jmp 0x140066a19
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14006698c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
jmp 0x140066a19
mov esi, dword [rbx - 0x10]
lea rbp, [rsp + 0x60]
sub rbp, rbx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1400669cd
mov edx, edi
lea rcx, [rsp + 0x68]
call fcn.1400015a0
mov rbx, qword [rsp + 0x68]
cmp rbp, rsi
ja 0x1400669ea
movsxd rsi, edi
lea r8, [rbx + rbp]
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
mov rcx, rbx
call fcn.1400c6510
jmp 0x140066a01
movsxd rsi, edi
movsxd rdx, dword [rbx - 0xc]
mov r9, rsi
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.1400c6478
test edi, edi
js 0x140066d1b
cmp edi, dword [rbx - 0xc]
jg 0x140066d1b
mov dword [rbx - 0x10], edi
mov byte [rsi + rbx], 0
lea rcx, [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x140066a3e
lea rcx, [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea ebx, [rax - 1]
jmp 0x140066a41
mov ebx, r12d
call fcn.140097090
mov rdi, rax
mov ecx, r12d
test rax, rax
setne cl
test ecx, ecx
je 0x140066d10
mov rax, qword [rax]
mov r8d, 1
mov edx, ebx
mov rcx, rdi
call qword [rax]
test rax, rax
je 0x140066d0a
lea rdi, [rax + 0x18]
mov qword [rsp + 0x140], rdi
test ebx, ebx
js 0x140066cff
cmp ebx, dword [rdi - 0xc]
jg 0x140066cff
mov dword [rdi - 0x10], ebx
movsxd rdx, ebx
mov byte [rdx + rdi], 0
mov r9, rdx
lea r8, [rsp + 0x150]
mov rcx, rdi
call fcn.1400c6478
nop
mov r8d, dword [rdi - 0x10]
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140003020
nop
lea rdx, [rdi - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066adb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x250]
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x68]
call fcn.140003020
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x350]
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x68]
call fcn.140003020
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x68]
test eax, eax
je 0x140066b57
mov edx, eax
lea rcx, str.CCommonFunction::kStdAfxGetPathElement___return__2__LastError_u_n
call fcn.140062f80
mov rdx, rdi
lea rcx, str.__pstrElement__s__n
call fcn.140062f80
mov eax, r12d
test rdi, rdi
setne al
test eax, eax
je 0x140066cf4
mov rdx, rdi
mov rcx, qword [r13 + 0x20]
call fcn.1400c784c
test eax, eax
sete al
test al, al
jne 0x140066c52
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066ba2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066bd4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xb8]
jmp 0x140066be4
mov rdi, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xb8]
lea rdx, [rdi - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066bff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r15, r15
jne 0x140066602
mov r15, qword [rsp + 0x108]
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x140066db3
jmp 0x1400665e0
mov ecx, 0x80070057
call fcn.140001a00
int3
mov ecx, 0x80070057
call fcn.140001a00
nop
mov ecx, 0x80070057
call fcn.140001a00
int3
mov ecx, 0x80070057
call fcn.140001a00
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CCommonFunction::kIsExistPendingUpgradesDriver___return_TRUE__2__LastError_u_n
call fcn.140062f80
mov rdx, qword [r13 + 0x20]
lea rcx, str.__pCDE__strDriverFile__s__n
call fcn.140062f80
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066c98
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140066cb9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
dec r14d
test r14d, r14d
jg 0x140066cdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x100]
call fcn.1400a69e0
mov eax, 1
jmp 0x140066de7
mov ecx, 0x80004005
call fcn.140001a00
int3
mov ecx, 0x80070057
call fcn.140001a00
int3
call fcn.140001a30
int3
mov ecx, 0x80004005
call fcn.140001a00
int3
mov ecx, 0x80070057
call fcn.140001a00
nop
mov ecx, 0x80004005
call fcn.140001a00
nop
mov ecx, 0x80004005
call fcn.140001a00
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CCommonFunction::kIsExistPendingUpgradesDriver___return_TRUE__1__LastError_u_n
call fcn.140062f80
mov rdx, qword [r13 + 0x18]
lea rcx, str.__pCDE__strDriverName__s__n
call fcn.140062f80
nop
lea rdx, [rdi - 0x18]
lock xadd dword [rdx + 0x10], r14d
dec r14d
test r14d, r14d
jg 0x140066d7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rsp + 0x100]
call fcn.1400a69e0
mov eax, 1
jmp 0x140066de7
mov ecx, 0x80004005
call fcn.140001a00
int3
mov ecx, 0x80004005
call fcn.140001a00
nop
call fcn.140001a30
int3
call fcn.140096e58
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CCommonFunction::kIsExistPendingUpgradesDriver___return_FALSE__3__LastError_u_n
call fcn.140062f80
mov rdx, qword [r13 + 0x18]
lea rcx, str.__pCDE__strDriverName__s__n
call fcn.140062f80
nop
lea rcx, [rsp + 0x100]
call fcn.1400a69e0
xor eax, eax
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.1400c6ac0
mov rbx, qword [rsp + 0x4b0]
add rsp, 0x460
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret