Function at 0x1400073d0
Capabilities:
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x68
cmp byte [0x140023508], 0
jne 0x1400080cc
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r14
lea rbp, str.0:db0:lk0:hs0:ld0:ll0:hb0:pj51.8_.4202:zb0.1:bb
mov qword [rax - 0x38], r15
mov byte [0x140023508], 1
mov rcx, rbp
call fcn.14000988c
lea rcx, [0x140022250]
xor edx, edx
mov r8d, 0x12a0
call fcn.14000b790
lea rdx, [0x14002226e]
lea rcx, [0x14001aa98]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x14002246c]
lea rcx, [0x14001aaa0]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r15, [0x14001aaa8]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
lea r14d, [r9 + 1]
movsxd rsi, eax
test ebx, ebx
jle 0x140007519
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400074cb
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x1400074cb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400074b0
cmp r10d, esi
jne 0x1400074f3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400074f3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007500
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400074e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007490
jmp 0x140007519
mov ecx, dword [0x1400224a8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1400224a8], ecx
lea rdx, [0x1400224ac]
lea rcx, [0x14001aab0]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x1400226aa]
lea rcx, [0x14001aab8]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400075f9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400075ab
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400075ab
inc r8
inc r10d
cmp r8, rsi
jl 0x140007590
cmp r10d, esi
jne 0x1400075d3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400075d3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400075e0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400075c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007574
jmp 0x1400075f9
mov ecx, dword [0x1400226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r14d
mov dword [0x1400226e8], ecx
lea rdx, [0x1400226ec]
lea rcx, [0x14001aac8]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x1400228ea]
lea rcx, [0x14001aad0]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r14, [0x14001aad8]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400076dd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000768b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop dword [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x14000768b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007670
cmp r10d, esi
jne 0x1400076b3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400076b3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400076c0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400076a0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007654
jmp 0x1400076dd
mov ecx, dword [0x140022928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022928], ecx
lea rdx, [0x14002292c]
lea rcx, [0x14001aae0]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x140022968]
lea rcx, [0x14001aae8]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x1400229a4]
lea rcx, [0x14001aaf0]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x140022a08]
lea rcx, [0x14001aaf8]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x140022a6c]
lea rcx, [0x14001ab00]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab08]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000780d
nop word [rax + rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400077bb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400077bb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400077a0
cmp r10d, esi
jne 0x1400077e3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400077e3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400077f0
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400077d0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007780
jmp 0x14000780d
mov ecx, dword [0x140022ad0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab10]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400078cd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000787b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000787b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007860
cmp r10d, esi
jne 0x1400078a3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x1400078a3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x1400078b0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007890
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007840
jmp 0x1400078cd
mov ecx, dword [0x140022ad4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab18]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x14000798d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000793b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x14000793b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007920
cmp r10d, esi
jne 0x140007963
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007963
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007970
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007950
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007900
jmp 0x14000798d
mov ecx, dword [0x140022ad8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ad8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab20]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007a4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x1400079fb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x1400079fb
inc r8
inc r10d
cmp r8, rsi
jl 0x1400079e0
cmp r10d, esi
jne 0x140007a23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007a23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007a30
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007a10
inc rdx
inc r9d
cmp rdx, r11
jl 0x1400079c0
jmp 0x140007a4d
mov ecx, dword [0x140022adc]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022adc], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab28]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007b0d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007abb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007abb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007aa0
cmp r10d, esi
jne 0x140007ae3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007ae3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007af0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ad0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007a80
jmp 0x140007b0d
mov ecx, dword [0x140022ae0]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae0], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab30]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007bcd
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007b7b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007b7b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007b60
cmp r10d, esi
jne 0x140007ba3
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007ba3
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007bb0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007b90
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007b40
jmp 0x140007bcd
mov ecx, dword [0x140022ae4]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae4], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab38]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007c8d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007c3b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007c3b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007c20
cmp r10d, esi
jne 0x140007c63
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007c63
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007c70
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c50
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007c00
jmp 0x140007c8d
mov ecx, dword [0x140022ae8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022ae8], ecx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001ab40]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007d4d
nop dword [rax]
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007cfb
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007cfb
inc r8
inc r10d
cmp r8, rsi
jl 0x140007ce0
cmp r10d, esi
jne 0x140007d23
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007d23
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007d30
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007d10
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007cc0
jmp 0x140007d4d
mov ecx, dword [0x140022aec]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
mov eax, 1
cmove ecx, eax
mov dword [0x140022aec], ecx
lea rax, [rsp + 0x80]
lea rdx, str.Console
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x78], 3
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x70], 0
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007dbb
mov rcx, qword [rsp + 0x80]
lea rax, [rsp + 0x70]
lea r9, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [rsp + 0x70], 0xa
jbe 0x1400080a9
xor edx, edx
mov r8d, 0x7d0
mov rcx, rbp
call fcn.14000b790
mov rcx, qword [rsp + 0x80]
lea r11, [rsp + 0x70]
mov qword [rsp + 0x28], r11
lea r9, [rsp + 0x78]
lea rdx, str.IpDate
xor r8d, r8d
mov qword [rsp + 0x20], rbp
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea rdx, [0x14002226e]
lea rcx, [0x14001aa98]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x14002246c]
lea rcx, [0x14001aaa0]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r15
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007ec2
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007e8b
lea rbx, [rdx + rdx]
sub rbx, r15
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r15 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r15], ax
jne 0x140007e8b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007e70
cmp r10d, esi
jne 0x140007eb7
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007eb7
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007f90
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007ea0
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007e52
mov r15d, 1
lea rdx, [0x1400224ac]
lea rcx, [0x14001aab0]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x1400226aa]
lea rcx, [0x14001aab8]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r12, [0x14001aac0]
mov rcx, r12
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x140007fcd
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x140007f5b
lea rbx, [rdx + rdx]
sub rbx, r12
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r12 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r12], ax
jne 0x140007f5b
inc r8
inc r10d
cmp r8, rsi
jl 0x140007f40
cmp r10d, esi
jne 0x140007f83
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140007f83
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140007fb4
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f70
inc rdx
inc r9d
cmp rdx, r11
jl 0x140007f23
jmp 0x140007fcd
mov ecx, dword [0x1400224a8]
movsxd rax, r9d
mov r15d, 1
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1400224a8], ecx
jmp 0x140007ec8
mov ecx, dword [0x1400226e8]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x1400226e8], ecx
lea rdx, [0x1400226ec]
lea rcx, [0x14001aac8]
xor r8d, r8d
call fcn.1400072a0
lea rdx, [0x1400228ea]
lea rcx, [0x14001aad0]
xor r8d, r8d
call fcn.1400072a0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, r14
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r9d, r9d
xor edx, edx
mov r11, rbx
movsxd rsi, eax
test ebx, ebx
jle 0x1400080a9
xor r10d, r10d
xor r8d, r8d
test esi, esi
jle 0x14000805b
lea rbx, [rdx + rdx]
sub rbx, r14
add rbx, rbp
nop word [rax + rax]
movzx eax, word [r14 + r8*2]
lea rcx, [rbx + r8*2]
cmp word [rcx + r14], ax
jne 0x14000805b
inc r8
inc r10d
cmp r8, rsi
jl 0x140008040
cmp r10d, esi
jne 0x140008083
add rdx, rsi
add r9d, esi
cmp rdx, r11
jge 0x140008083
nop dword [rax + rax]
cmp word [rbp + rdx*2], 0x7c
je 0x140008090
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008070
inc rdx
inc r9d
cmp rdx, r11
jl 0x140008021
jmp 0x1400080a9
mov ecx, dword [0x140022928]
movsxd rax, r9d
cmp word [rbp + rax*2 - 2], 0x31
cmove ecx, r15d
mov dword [0x140022928], ecx
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x30]
add rsp, 0x68
ret