Function at 0x1400073e0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x140023508], 0
jne 0x1400080dc
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj62.9_.4202:zb0.1:bb
mov qword [rax - 0x38], r15
mov byte [0x140023508], 1
mov rcx, rbp
call fcn.1400098cc
lea rcx, [0x140022250]
xor edx, edx
mov r8d, 0x12a0
call fcn.14000b870
lea rdx, [0x14002226e]
lea rcx, [0x14001aa98]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x14002246c]
lea rcx, [0x14001aaa0]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x14001aaa8]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x140007529
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400074db
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1400074db
inc r8
inc r10d
cmp r8, rsi
jl 0x1400074c0
cmp r10d, esi
jne 0x140007503
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007503
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007510
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400074f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400074a0
jmp 0x140007529
mov ecx, dword [0x1400224a8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1400224a8], ecx
lea rdx, [0x1400224ac]
lea rcx, [0x14001aab0]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x1400226aa]
lea rcx, [0x14001aab8]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007609
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400075bb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400075bb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400075a0
cmp r10d, esi
jne 0x1400075e3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400075e3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400075f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400075d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007584
jmp 0x140007609
mov ecx, dword [0x1400226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1400226e8], ecx
lea rdx, [0x1400226ec]
lea rcx, [0x14001aac8]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x1400228ea]
lea rcx, [0x14001aad0]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x14001aad8]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400076ed
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000769b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x14000769b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007680
cmp r10d, esi
jne 0x1400076c3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400076c3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400076d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400076b0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007664
jmp 0x1400076ed
mov ecx, dword [0x140022928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022928], ecx
lea rdx, [0x14002292c]
lea rcx, [0x14001aae0]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x140022968]
lea rcx, [0x14001aae8]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x1400229a4]
lea rcx, [0x14001aaf0]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x140022a08]
lea rcx, [0x14001aaf8]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x140022a6c]
lea rcx, [0x14001ab00]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab08]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000781d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400077cb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400077cb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400077b0
cmp r10d, esi
jne 0x1400077f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400077f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007800
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400077e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007790
jmp 0x14000781d
mov ecx, dword [0x140022ad0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab10]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400078dd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000788b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000788b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007870
cmp r10d, esi
jne 0x1400078b3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400078b3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400078c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400078a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007850
jmp 0x1400078dd
mov ecx, dword [0x140022ad4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab18]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000799d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000794b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000794b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007930
cmp r10d, esi
jne 0x140007973
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007973
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007980
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007960
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007910
jmp 0x14000799d
mov ecx, dword [0x140022ad8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab20]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007a5d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007a0b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007a0b
inc r8
inc r10d
cmp r8, rsi
jl 0x1400079f0
cmp r10d, esi
jne 0x140007a33
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007a33
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007a40
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007a20
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400079d0
jmp 0x140007a5d
mov ecx, dword [0x140022adc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022adc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab28]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007b1d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007acb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007acb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007ab0
cmp r10d, esi
jne 0x140007af3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007af3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007b00
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ae0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007a90
jmp 0x140007b1d
mov ecx, dword [0x140022ae0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab30]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007bdd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007b8b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007b8b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007b70
cmp r10d, esi
jne 0x140007bb3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007bb3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007bc0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ba0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007b50
jmp 0x140007bdd
mov ecx, dword [0x140022ae4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab38]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007c9d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007c4b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007c4b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007c30
cmp r10d, esi
jne 0x140007c73
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007c73
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007c80
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c60
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c10
jmp 0x140007c9d
mov ecx, dword [0x140022ae8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab40]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007d5d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007d0b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007d0b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007cf0
cmp r10d, esi
jne 0x140007d33
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007d33
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007d40
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007d20
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007cd0
jmp 0x140007d5d
mov ecx, dword [0x140022aec]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022aec], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007dcb
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x1400080b9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.14000b870
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x14002226e]
lea rcx, [0x14001aa98]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x14002246c]
lea rcx, [0x14001aaa0]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007ed2
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007e9b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x140007e9b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007e80
cmp r10d, esi
jne 0x140007ec7
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007ec7
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007fa0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007eb0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007e62
mov r15d, 1
lea rdx, [0x1400224ac]
lea rcx, [0x14001aab0]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x1400226aa]
lea rcx, [0x14001aab8]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007fdd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007f6b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007f6b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007f50
cmp r10d, esi
jne 0x140007f93
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007f93
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007fc4
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f80
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f33
jmp 0x140007fdd
mov ecx, dword [0x1400224a8]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1400224a8], ecx
jmp 0x140007ed8
mov ecx, dword [0x1400226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1400226e8], ecx
lea rdx, [0x1400226ec]
lea rcx, [0x14001aac8]
xor r8d, r8d
call fcn.1400072b0
lea rdx, [0x1400228ea]
lea rcx, [0x14001aad0]
xor r8d, r8d
call fcn.1400072b0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400080b9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000806b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x14000806b
inc r8
inc r10d
cmp r8, rsi
jl 0x140008050
cmp r10d, esi
jne 0x140008093
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140008093
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400080a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008080
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008031
jmp 0x1400080b9
mov ecx, dword [0x140022928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x140022928], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret