Function at 0x140011d20
Capabilities:
Create pipe

Disassembly:
mov r11, rsp
push rbp
push rsi
lea rbp, [r11 - 0x108]
sub rsp, 0x1f8
mov rax, qword [0x14008d558]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov qword [r11 + 0x20], rbx
mov rsi, rcx
mov qword [r11 - 0x18], rdi
xor edi, edi
mov qword [r11 - 0x20], r12
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [r11 - 0x28], r13
xor r13d, r13d
cmp dword [0x14008d0b0], 4
mov qword [r11 - 0x30], r14
lea ebx, [rdi + 1]
mov qword [r11 - 0x38], r15
mov dword [rsp + 0x5c], r8d
mov dword [rsp + 0x58], edx
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x78], rdi
jl 0x140011db8
test dword [0x14008d12c], 0x10000
je 0x140011db8
lea edx, [rdi + 4]
mov ecx, 0x10000
mov r15d, ebx
call fcn.14000b080
mov r14d, eax
jmp 0x140011dd1
mov edx, 4
mov ecx, 0x10000
call fcn.14000b080
xor r15d, r15d
mov r14d, eax
test eax, eax
je 0x140011e20
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.1400113e0
mov qword [rsp + 0x40], rax
mov r9d, 4
lea rax, str.Creating_named_pipe_for_SID___s_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, r14d
mov dword [rsp + 0x30], 0x12d
lea rax, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov ecx, r15d
mov qword [rsp + 0x20], rax
call fcn.14000b530
cmp qword [rsi + 0x208], 0xffffffffffffffff
je 0x140011e32
mov rcx, rsi
call fcn.140011900
cmp dword [rsi + 0x218], ebx
jne 0x140011ecc
cmp qword [rsi + 0x220], rdi
je 0x140011e50
cmp qword [rsi + 0x248], rdi
jne 0x140011ecc
cmp dword [0x14008d0b0], ebx
jl 0x140011e75
test dword [0x14008d0e4], 0x10000
je 0x140011e75
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140011e8c
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298a
lea rcx, str.Creation_events_not_present_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
lea r15, str.named_pipe_create
mov dword [rsp + 0x30], 0x139
mov r8d, 0x10000
mov qword [rsp + 0x28], r12
mov edx, eax
mov ecx, r14d
mov qword [rsp + 0x20], r15
call fcn.14000b530
mov r13, rdi
jmp 0x14001299d
cmp dword [rsi + 0x214], edi
jne 0x1400127f1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x68]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x140011f65
cmp dword [0x14008d0b0], ebx
jl 0x140011f1a
test dword [0x14008d0e4], 0x10000
je 0x140011f1a
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140011f2d
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x140011f65
lea rcx, str.Failed_to_open_process_token_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.named_pipe_create
mov dword [rsp + 0x30], 0x148
mov qword [rsp + 0x28], r12
mov edx, eax
mov qword [rsp + 0x20], rcx
mov ecx, r14d
call fcn.14000b530
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r9 + 6]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14001298a
mov r14d, dword [rsp + 0x60]
mov ecx, r14d
call fcn.140023fac
mov r12, rax
mov rdi, rax
test rax, rax
je 0x140012771
mov r8d, r14d
xor edx, edx
mov rcx, rax
call fcn.1400158a0
mov r9d, dword [rsp + 0x60]
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov r8, rdi
mov edx, 6
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x140012037
cmp dword [0x14008d0b0], ebx
jl 0x140012007
test dword [0x14008d0e4], 0x10000
je 0x140012007
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001201e
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_get_token_information_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x16f
jmp 0x1400127c1
mov rcx, qword [r12]
lea rdx, [rbp - 0x60]
mov r9d, 2
lea r8d, [r9 + 0xa]
call qword [sym.imp.ADVAPI32.dll_GetAclInformation]
test eax, eax
jne 0x1400120a8
cmp dword [0x14008d0b0], ebx
jl 0x140012078
test dword [0x14008d0e4], 0x10000
je 0x140012078
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001208f
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_DACL_size_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x178
jmp 0x1400127c1
mov rcx, qword [r12]
lea rdx, [rbp - 0x68]
mov r9d, ebx
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_GetAclInformation]
test eax, eax
jne 0x140012118
cmp dword [0x14008d0b0], ebx
jl 0x1400120e8
test dword [0x14008d0e4], 0x10000
je 0x1400120e8
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x1400120ff
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_DACL_rev_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x17d
jmp 0x1400127c1
lea r15, str.Failed_to_convert_SID_string_n
cmp dword [rsi + 0x21c], ebx
jne 0x140012133
lea rcx, str.S_1_5_32_544
jmp 0x1400122ca
cmp dword [0x14008d0b0], 4
jl 0x14001215c
test dword [0x14008d12c], 0x10000
je 0x14001215c
mov edx, 4
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140012172
mov edx, 4
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x1400121b6
lea rcx, str.Adding_default_account_SID_S_1_5_32_581_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
lea r15, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea rcx, str.named_pipe_create
mov dword [rsp + 0x30], 0x187
mov qword [rsp + 0x28], r15
mov r8d, 0x10000
mov qword [rsp + 0x20], rcx
mov edx, eax
mov ecx, r14d
call fcn.14000b530
jmp 0x1400121bd
lea r15, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea rdx, [rsp + 0x78]
lea rcx, str.S_1_5_32_581
call sub.ADVAPI32.dll_ConvertStringSidToSidW
test eax, eax
jne 0x140012242
cmp dword [0x14008d0b0], ebx
jl 0x1400121f7
test dword [0x14008d0e4], 0x10000
je 0x1400121f7
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001220a
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x140012242
lea rcx, str.Failed_to_convert_SID_string_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.named_pipe_create
mov dword [rsp + 0x30], 0x18a
mov qword [rsp + 0x28], r15
mov edx, eax
mov qword [rsp + 0x20], rcx
mov ecx, r14d
call fcn.14000b530
cmp dword [0x14008d0b0], 4
jl 0x14001226b
test dword [0x14008d12c], 0x10000
je 0x14001226b
mov edx, 4
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140012281
mov edx, 4
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x1400122bc
lea rcx, str.Adding_local_users_SID_S_1_2_0_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.named_pipe_create
mov dword [rsp + 0x30], 0x18d
mov qword [rsp + 0x28], r15
mov edx, eax
mov qword [rsp + 0x20], rcx
mov ecx, r14d
call fcn.14000b530
lea rcx, str.S_1_2_0
lea r15, str.Failed_to_convert_SID_string_n
lea rdx, [rsp + 0x70]
call sub.ADVAPI32.dll_ConvertStringSidToSidW
test eax, eax
jne 0x140012336
cmp dword [0x14008d0b0], ebx
jl 0x14001230d
test dword [0x14008d0e4], 0x10000
je 0x14001230d
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 0x191
jmp 0x1400127c1
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 0x191
jmp 0x1400127c1
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov rcx, qword [rsp + 0x78]
lea r15d, [rax + 8]
test rcx, rcx
je 0x140012359
call qword [sym.imp.ADVAPI32.dll_GetLengthSid]
lea r13d, [rax + 8]
mov r14d, dword [rbp - 0x5c]
add r14d, r13d
add r14d, r15d
mov ecx, r14d
mov r15d, r14d
call fcn.1400118c0
mov r13, rax
test rax, rax
jne 0x1400123cb
cmp dword [0x14008d0b0], ebx
jl 0x14001239b
test dword [0x14008d0e4], 0x10000
je 0x14001239b
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x1400123b2
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Allocaiton_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1a7
jmp 0x1400127c1
mov r8, r15
xor edx, edx
mov rcx, r13
call fcn.1400158a0
mov r8d, dword [rbp - 0x68]
mov edx, r14d
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x140012441
cmp dword [0x14008d0b0], ebx
jl 0x140012411
test dword [0x14008d0e4], 0x10000
je 0x140012411
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140012428
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unabled_to_initialize_ACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1ad
jmp 0x1400127c1
mov r9, qword [rsp + 0x70]
mov r8d, 0x10000000
mov edx, dword [rbp - 0x68]
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x1400124b1
cmp dword [0x14008d0b0], ebx
jl 0x140012481
test dword [0x14008d0e4], 0x10000
je 0x140012481
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140012498
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1b9
jmp 0x1400127c1
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x140012526
mov edx, dword [rbp - 0x68]
mov r8d, 0x10000000
mov rcx, r13
call qword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x140012526
cmp dword [0x14008d0b0], ebx
jl 0x1400124f6
test dword [0x14008d0e4], 0x10000
je 0x1400124f6
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001250d
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1c9
jmp 0x1400127c1
mov eax, dword [rbp - 0x5c]
mov r8d, 0xffffffff
mov r9, qword [r12]
add eax, 0xfffffff8
mov edx, dword [rbp - 0x68]
add r9, 8
mov rcx, r13
mov dword [rsp + 0x20], eax
call qword [sym.imp.ADVAPI32.dll_AddAce]
test eax, eax
jne 0x1400125a3
cmp dword [0x14008d0b0], ebx
jl 0x140012573
test dword [0x14008d0e4], 0x10000
je 0x140012573
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001258a
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_add_ACE_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1d7
jmp 0x1400127c1
mov ecx, 0x28
call fcn.1400118c0
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x14001260b
cmp dword [0x14008d0b0], ebx
jl 0x1400125db
test dword [0x14008d0e4], 0x10000
je 0x1400125db
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x1400125f2
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e0
jmp 0x1400127c1
mov edx, ebx
mov dword [rbp - 0x80], 0x18
mov rcx, rax
mov dword [rbp - 0x70], ebx
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x140012679
cmp dword [0x14008d0b0], ebx
jl 0x140012649
test dword [0x14008d0e4], 0x10000
je 0x140012649
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x140012660
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Unable_to_initialize_security_descriptor_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e7
jmp 0x1400127c1
mov rcx, qword [rbp - 0x78]
xor r9d, r9d
mov r8, r13
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
cmp dword [rsi + 0x218], 0
mov edx, 0x40080003
mov eax, 0x80003
mov r9d, ebx
cmove edx, eax
mov r8d, 0xe
lea rax, [rbp - 0x80]
mov rcx, rsi
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov qword [rsi + 0x208], rax
cmp dword [0x14008d0b0], 3
jl 0x140012704
test dword [0x14008d114], 0x10000
je 0x140012704
mov edx, 3
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
mov edx, eax
jmp 0x140012720
mov edx, 3
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
mov edx, eax
test eax, eax
je 0x14001298f
mov rax, qword [rsi + 0x208]
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rax
lea r15, str.named_pipe_create
lea rax, str.Pipe_handle___p_n
mov r9d, 3
mov qword [rsp + 0x38], rax
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x1fd
mov ecx, r14d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call fcn.14000b530
jmp 0x14001299d
cmp dword [0x14008d0b0], ebx
jl 0x140012796
test dword [0x14008d0e4], 0x10000
je 0x140012796
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x1400127ad
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001298f
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x162
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r15, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r15
mov edx, eax
mov ecx, r14d
call fcn.14000b530
jmp 0x14001299d
mov edx, 0x3e8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeW]
test eax, eax
je 0x14001298a
mov eax, dword [rsi + 0x218]
mov edx, 0xc0000000
neg eax
mov qword [rsp + 0x30], rdi
sbb ecx, ecx
xor r9d, r9d
and ecx, 0x40000000
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, rsi
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsi + 0x208], rax
cmp dword [0x14008d0b0], 4
jl 0x14001286e
test dword [0x14008d12c], 0x10000
je 0x14001286e
mov edx, 4
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
mov edx, eax
jmp 0x140012886
mov edx, 4
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
mov edx, eax
test eax, eax
je 0x1400128cd
mov rax, qword [rsi + 0x208]
lea r15, str.named_pipe_create
mov qword [rsp + 0x40], rax
mov r9d, 4
lea rax, str.Pipe_handle___p_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov ecx, r14d
mov dword [rsp + 0x30], 0x212
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call fcn.14000b530
jmp 0x1400128d4
lea r15, str.named_pipe_create
mov rcx, qword [rsi + 0x208]
cmp rcx, 0xffffffffffffffff
je 0x140011ec4
xor r9d, r9d
mov dword [rbp - 0x64], 2
xor r8d, r8d
lea rdx, [rbp - 0x64]
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
test eax, eax
jne 0x140011ec4
cmp dword [0x14008d0b0], ebx
jl 0x140012929
test dword [0x14008d0e4], 0x10000
je 0x140012929
mov edx, ebx
mov ecx, 0x10000
mov r14d, ebx
call fcn.14000b080
jmp 0x14001293c
mov edx, ebx
mov ecx, 0x10000
call fcn.14000b080
xor r14d, r14d
test eax, eax
je 0x14001296d
lea rcx, str.Unable_to_set_handle_state_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x21b
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, r14d
mov qword [rsp + 0x20], r15
call fcn.14000b530
mov rcx, qword [rsi + 0x208]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsi + 0x208], 0xffffffffffffffff
mov r13, rdi
jmp 0x14001299d
mov r13, rdi
jmp 0x140012996
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea r15, str.named_pipe_create
cmp dword [0x14008d0b0], 3
jl 0x1400129c6
test dword [0x14008d114], 0x10000
je 0x1400129c6
mov edx, 3
mov ecx, 0x10000
call fcn.14000b080
mov r14d, eax
jmp 0x1400129de
mov edx, 3
mov ecx, 0x10000
call fcn.14000b080
xor ebx, ebx
mov r14d, eax
test eax, eax
je 0x140012a1c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
mov r9d, 3
lea rax, str.GetLastError___lu_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, r14d
mov dword [rsp + 0x30], 0x223
mov ecx, ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
call fcn.14000b530
mov rcx, qword [rsp + 0x68]
mov r15, qword [rsp + 0x1d0]
mov r14, qword [rsp + 0x1d8]
mov r12, qword [rsp + 0x1e8]
mov rbx, qword [rsp + 0x228]
test rcx, rcx
je 0x140012a4c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140012a5a
call fcn.140023f98
test r13, r13
je 0x140012a67
mov rcx, r13
call fcn.140023f98
mov r13, qword [rsp + 0x1e0]
test rdi, rdi
je 0x140012a7c
mov rcx, rdi
call fcn.140023f98
mov rcx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x1f0]
test rcx, rcx
je 0x140012a94
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140012aa4
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsi + 0x208]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140014190
add rsp, 0x1f8
pop rsi
pop rbp
ret