Function at 0x10010c2dc
Capabilities:
Check if file exists
Delete registry value

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x500
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x100176150]
xor rax, rsp
mov qword [rsp + 0x4f0], rax
mov r14d, r9d
mov r15, r8
mov r13, rdx
mov rdi, rcx
mov qword [rsp + 0x60], rcx
xor ebx, ebx
mov ebp, ebx
lea r12d, [rbx + 1]
lea rcx, [0x100040a58]
call fcn.10011c978
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0x2d0], rbx
xor edx, edx
mov r8d, 0x220
lea rcx, [rsp + 0xb0]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x68], ebx
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x78], ebx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x40], rbx
mov word [rsp + 0x2e0], bx
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x2e2]
call sub.msvcrt.dll_memset
cmp rdi, rbx
jne 0x10010c411
mov r12d, ebx
lea ebp, [rbx + 0x57]
lea rbx, [0x100177368]
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cd3d
test byte [rcx + 0x1c], 8
je 0x10010cd38
lea edx, [rbp - 0x46]
lea rax, [0x100040a80]
mov qword [rsp + 0x20], rax
mov r9d, ebp
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
lea rcx, [0x1000445f0]
call fcn.10011c978
mov qword [rsp + 0x38], rbx
lea r8, [rsp + 0x38]
xor edx, edx
lea rcx, [0x1000444f0]
call fcn.100121ff0
mov rsi, qword [rsp + 0x38]
lea rbx, [0x100177368]
xor edi, edi
cmp eax, edi
jne 0x10010c4ab
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x10010c500
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010c500
test byte [rax + 0x1c], 8
je 0x10010c500
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x20
lea rax, [0x10003fae0]
mov qword [rsp + 0x20], rax
lea r8, [0x100002e10]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
jmp 0x10010c500
lea rdx, [0x100044618]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, eax
test eax, eax
je 0x10010c4fe
cmp eax, 2
je 0x10010c4fe
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010c500
test byte [rcx + 0x1c], 8
je 0x10010c500
mov edx, 0x21
lea rax, [0x100044638]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [0x100002e10]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
jmp 0x10010c500
xor edi, edi
test rsi, rsi
je 0x10010c50e
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [0x1000445f0]
call fcn.10011c9b8
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, [0x100040a90]
call fcn.10011ca60
xor ecx, ecx
cmp eax, ecx
jne 0x10010c592
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cd33
test byte [rcx + 0x1c], 8
je 0x10010cd2e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x12
lea rcx, [0x10003ffd8]
mov qword [rsp + 0x20], rcx
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
lea rcx, [rsp + 0x40]
call fcn.10011fd94
xor edx, edx
cmp eax, edx
jne 0x10010c600
mov r12d, edx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010c5f8
test byte [rax + 0x1c], 8
je 0x10010c5f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x13
lea rcx, [0x10003ffd8]
mov qword [rsp + 0x20], rcx
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
xor eax, eax
or rcx, 0xffffffffffffffff
mov r8, qword [rsp + 0x40]
mov rdi, r8
repne scasw ax, word [rdi]
not rcx
lea esi, [rax + 1]
sub rcx, rsi
cmp rcx, 2
ja 0x10010c66b
mov r12d, edx
lea r9d, [rax + 0xb]
mov ebp, r9d
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cd29
test byte [rcx + 0x1c], 8
je 0x10010cd24
lea edx, [rax + 0x14]
lea rax, [0x100040ad0]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
cmp word [r8 + rcx*2 - 2], 0x5c
jne 0x10010c67a
mov word [r8 + rcx*2 - 2], dx
mov eax, 0x3f
mov word [r8 + 2], ax
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010c6b1
test byte [rcx + 0x1c], 2
je 0x10010c6b1
lea edx, [rax - 0x2a]
mov r9, r8
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.10010683c
mov r8, qword [rsp + 0x40]
mov rdx, r8
mov rcx, r13
call fcn.10011d1e4
xor ecx, ecx
cmp eax, ecx
jne 0x10010c720
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cd1f
test byte [rax + 0x1c], 8
je 0x10010cd1a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x16
lea rax, [0x100040af0]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
lea rcx, [rsp + 0x50]
call fcn.10011ff58
xor edx, edx
cmp eax, edx
jne 0x10010c79b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
call fcn.100117680
cmp eax, 2
je 0x10010c8b8
xor eax, eax
mov r12d, eax
mov ebp, 0x80042416
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010c793
test byte [rcx + 0x1c], 8
je 0x10010c793
lea edx, [rax + 0x17]
mov dword [rsp + 0x28], edi
lea rax, [0x100040b38]
mov qword [rsp + 0x20], rax
mov r9d, 0x80042416
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.10010d274
mov rcx, r12
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
xor eax, eax
or rcx, 0xffffffffffffffff
mov r8, qword [rsp + 0x50]
mov rdi, r8
repne scasw ax, word [rdi]
not rcx
sub rcx, rsi
cmp rcx, 2
ja 0x10010c803
mov r12d, edx
lea r9d, [rax + 0xb]
mov ebp, r9d
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cd15
test byte [rcx + 0x1c], 8
je 0x10010cd10
lea edx, [rax + 0x18]
lea rax, [0x100040ad0]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
cmp word [r8 + rcx*2 - 2], 0x5c
jne 0x10010c812
mov word [r8 + rcx*2 - 2], dx
mov eax, 0x3f
mov word [r8 + 2], ax
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010c849
test byte [rcx + 0x1c], 2
je 0x10010c849
lea edx, [rax - 0x26]
mov r9, r8
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.10010683c
mov r8, qword [rsp + 0x50]
mov rdx, r8
mov rcx, r13
call fcn.10011d1e4
xor ecx, ecx
cmp eax, ecx
jne 0x10010c8b8
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cd0b
test byte [rax + 0x1c], 8
je 0x10010cd06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x1a
lea rax, [0x100040b60]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov edx, 0x104
lea rcx, [rsp + 0x2e0]
call fcn.10011eb40
mov edi, eax
xor edx, edx
cmp eax, edx
je 0x10010ca13
cmp word [rsp + 0x2e0], dx
je 0x10010ca13
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x2e0]
repne scasw ax, word [rdi]
not rcx
sub rcx, rsi
cmp ecx, 2
ja 0x10010c94b
mov r12d, edx
lea r9d, [rdx + 0xb]
mov ebp, r9d
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cd01
test byte [rcx + 0x1c], 8
je 0x10010ccfc
lea edx, [rax + 0x1b]
lea rax, [0x100040ad0]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
lea eax, [rcx - 1]
cmp word [rsp + rax*2 + 0x2e0], 0x5c
jne 0x10010c961
mov word [rsp + rax*2 + 0x2e0], dx
mov eax, 0x3f
mov word [rsp + 0x2e2], ax
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010c99b
test byte [rcx + 0x1c], 2
je 0x10010c99b
lea edx, [rax - 0x23]
lea r9, [rsp + 0x2e0]
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.10010683c
lea rdx, [rsp + 0x2e0]
mov rcx, r13
call fcn.10011d1e4
xor ecx, ecx
cmp eax, ecx
jne 0x10010caaa
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010ccf7
test byte [rax + 0x1c], 8
je 0x10010ccf2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x1d
lea rax, [0x100040bb0]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010ca4c
test byte [rax + 0x1c], 2
je 0x10010ca4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x1e
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.10010d308
xor edx, edx
cmp edi, edx
jne 0x10010caaa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, 0xe
cmp eax, r9d
jne 0x10010caaa
xor eax, eax
mov r12d, eax
mov ebp, r9d
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cced
test byte [rcx + 0x1c], 8
je 0x10010cce8
lea edx, [rax + 0x1f]
lea rax, [0x100040bf8]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov dword [rsp + 0x20], r14d
mov r9, r15
mov r8, r13
mov edx, esi
lea rcx, [rsp + 0x90]
call fcn.10011c26c
xor ecx, ecx
cmp eax, ecx
jne 0x10010cb28
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cce3
test byte [rax + 0x1c], 8
je 0x10010ccde
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x20
lea rcx, [0x10003ffd8]
mov qword [rsp + 0x20], rcx
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
lea rcx, [rsp + 0x48]
call fcn.10012ef28
xor ecx, ecx
cmp eax, ecx
jne 0x10010cb96
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cb8e
test byte [rax + 0x1c], 8
je 0x10010cb8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x21
lea rcx, [0x10003ffd8]
mov qword [rsp + 0x20], rcx
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov dword [rsp + 0x20], r14d
mov r9, r15
mov r8, qword [r13]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x68]
call fcn.10010d3f4
xor ecx, ecx
cmp eax, ecx
jne 0x10010cc18
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cc10
test byte [rax + 0x1c], 8
je 0x10010cc10
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x22
lea rax, [0x100040c10]
mov qword [rsp + 0x20], rax
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x90]
call fcn.10010bd9c
xor ecx, ecx
cmp eax, ecx
jne 0x10010cc9c
mov r12d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010cc92
test byte [rax + 0x1c], 8
je 0x10010cc92
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x23
lea rcx, [0x10003ffd8]
mov qword [rsp + 0x20], rcx
lea r8, [0x1000040d0]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
mov rcx, qword [rsp + 0x58]
jmp 0x10010cd40
mov rcx, qword [rsp + 0x58]
jmp 0x10010cd40
call fcn.10011ea08
xor edi, edi
cmp eax, edi
jne 0x10010cccc
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010cccc
test byte [rcx + 0x1c], 4
je 0x10010cccc
lea edx, [rdi + 0x24]
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.100106724
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rax
mov rcx, rdi
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, rax
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
jmp 0x10010cd40
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov esi, eax
lea rcx, [0x100044650]
call fcn.10011c978
xor eax, eax
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x38]
lea r13d, [rax + 1]
mov edx, r13d
lea rcx, [0x1000444f0]
call fcn.100121ff0
mov rdi, qword [rsp + 0x38]
xor ecx, ecx
cmp eax, ecx
jne 0x10010cdee
mov r13d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010ce66
test byte [rcx + 0x1c], 8
je 0x10010ce66
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x22
lea rax, [0x10003fae0]
mov qword [rsp + 0x20], rax
lea r8, [0x100002e10]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
jmp 0x10010ce66
mov dword [rsp + 0x30], ebp
mov eax, 4
mov dword [rsp + 0x20], eax
mov r9d, eax
lea r8, [rsp + 0x30]
lea rdx, [0x100044618]
mov rcx, rdi
call fcn.10012256c
xor ecx, ecx
cmp eax, ecx
jne 0x10010ce66
mov r13d, ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov rax, qword [0x100177368]
cmp rax, rbx
je 0x10010ce66
test byte [rax + 0x1c], 8
je 0x10010ce66
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov edx, 0x23
lea rax, [0x10003fae0]
mov qword [rsp + 0x20], rax
lea r8, [0x100002e10]
mov rcx, qword [0x100177368]
mov rcx, qword [rcx + 0x10]
call fcn.100106904
xor eax, eax
cmp rdi, rax
je 0x10010ce76
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [0x100044650]
call fcn.10011c9b8
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
cmp r13d, esi
jne 0x10010ceb9
mov rcx, qword [0x100177368]
cmp rcx, rbx
je 0x10010ceb9
test byte [rcx + 0x1c], 8
je 0x10010ceb9
lea edx, [rsi + 0x25]
mov r9d, ebp
lea r8, [0x1000040d0]
mov rcx, qword [rcx + 0x10]
call fcn.10010d308
lea rcx, [0x100040a58]
call fcn.10011c9b8
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov ebx, 0x88
mov rcx, qword [rsp + 0x70]
cmp rcx, rsi
je 0x10010cefb
lea rdi, [rcx - 8]
lea r9, [0x10010e200]
mov r8d, dword [rdi]
mov rdx, rbx
call fcn.1001308ac
mov rcx, rdi
call fcn.10013031c
mov rcx, qword [rsp + 0x80]
cmp rcx, rsi
je 0x10010cf27
lea rdi, [rcx - 8]
lea r9, [0x10010e200]
mov r8d, dword [rdi]
mov rdx, rbx
call fcn.1001308ac
mov rcx, rdi
call fcn.10013031c
nop
cmp qword [rsp + 0x48], rsi
je 0x10010cf39
lea rcx, [rsp + 0x48]
call fcn.100109cf8
nop
lea rcx, [rsp + 0xa0]
call fcn.1001160dc
lea rcx, [rsp + 0xa8]
call fcn.1001160dc
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xb0], rsi
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xb8], rsi
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xc0], rsi
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xc8], rsi
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0xd8], rsi
mov rcx, qword [rsp + 0x2d0]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x2d0], rsi
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rsp + 0x90], rsi
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, r12d
mov rcx, qword [rsp + 0x4f0]
xor rcx, rsp
call fcn.100130830
mov rbx, qword [rsp + 0x558]
add rsp, 0x500
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret