Function at 0x1400f75a0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x1402854d8]
xor rax, rsp
mov qword [rbp + 0xc0], rax
xor eax, eax
mov r13d, r8d
cmp dword [0x14027edf0], 4
mov r12d, edx
mov r14, rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov r15d, eax
lea ebx, [rax + 1]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rax
jl 0x1400f760b
test dword [0x14027ee6c], 0x10000
mov edi, ebx
jne 0x1400f760d
mov edi, eax
mov edx, 4
mov ecx, 0x10000
call fcn.1400e8cc0
mov esi, eax
test edi, edi
jne 0x1400f7626
test eax, eax
je 0x1400f767a
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.1400f6cb0
mov qword [rsp + 0x40], rax
mov r9d, 4
lea rax, str.Creating_named_pipe_for_SID___s_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, esi
lea rax, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x12d
mov qword [rsp + 0x28], rax
mov ecx, edi
lea rax, str.named_pipe_create
mov qword [rsp + 0x20], rax
call fcn.1400bfc30
cmp qword [r14 + 0x208], 0xffffffffffffffff
je 0x1400f768c
mov rcx, r14
call fcn.1400f71c0
cmp dword [r14 + 0x218], ebx
jne 0x1400f7723
cmp qword [r14 + 0x220], r15
je 0x1400f76ab
cmp qword [r14 + 0x248], r15
jne 0x1400f7723
cmp dword [0x14027edf0], ebx
jl 0x1400f76c3
test dword [0x14027ee24], 0x10000
je 0x1400f76c3
mov edi, ebx
jmp 0x1400f76c5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f76dd
test eax, eax
je 0x1400f813f
lea rcx, str.Creation_events_not_present_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x139
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov edx, eax
mov qword [rsp + 0x20], r13
mov ecx, edi
call fcn.1400bfc30
mov rsi, r15
jmp 0x1400f8150
cmp dword [r14 + 0x214], r15d
jne 0x1400f7fab
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
lea r8, [rsp + 0x68]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.DLL_OpenProcessToken]
test eax, eax
jne 0x1400f77b9
cmp dword [0x14027edf0], ebx
jl 0x1400f7765
test dword [0x14027ee24], 0x10000
je 0x1400f7765
mov edi, ebx
jmp 0x1400f7767
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f777b
test eax, eax
je 0x1400f77b9
lea rcx, str.Failed_to_open_process_token_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x148
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bfc30
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r9 + 6]
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x7a
jne 0x1400f813f
mov edi, dword [rsp + 0x60]
mov ecx, edi
call fcn.140115d38
mov qword [rsp + 0x50], rax
mov rsi, rax
test rax, rax
je 0x1400f780c
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140107f60
test rsi, rsi
jne 0x1400f7886
cmp dword [0x14027edf0], ebx
jl 0x1400f7829
test dword [0x14027ee24], 0x10000
je 0x1400f7829
mov edi, ebx
jmp 0x1400f782b
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7843
test eax, eax
je 0x1400f8142
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x162
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400bfc30
jmp 0x1400f8150
mov r9d, dword [rsp + 0x60]
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov r8, rsi
mov edx, 6
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
test eax, eax
jne 0x1400f78f7
cmp dword [0x14027edf0], ebx
jl 0x1400f78c4
test dword [0x14027ee24], 0x10000
je 0x1400f78c4
mov edi, ebx
jmp 0x1400f78c6
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f78de
test eax, eax
je 0x1400f8142
lea rcx, str.Unable_to_get_token_information_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x16f
jmp 0x1400f7857
mov rcx, qword [rsi]
lea rdx, [rbp - 0x60]
mov r9d, 2
lea r8d, [r9 + 0xa]
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f795d
cmp dword [0x14027edf0], ebx
jl 0x1400f792a
test dword [0x14027ee24], 0x10000
je 0x1400f792a
mov edi, ebx
jmp 0x1400f792c
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7944
test eax, eax
je 0x1400f8142
lea rcx, str.Unable_to_DACL_size_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x178
jmp 0x1400f7857
mov rcx, qword [rsi]
lea rdx, [rbp - 0x68]
mov r9d, ebx
mov r8d, 4
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f79c2
cmp dword [0x14027edf0], ebx
jl 0x1400f798f
test dword [0x14027ee24], 0x10000
je 0x1400f798f
mov edi, ebx
jmp 0x1400f7991
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f79a9
test eax, eax
je 0x1400f8142
lea rcx, str.Unable_to_DACL_rev_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x17d
jmp 0x1400f7857
cmp dword [r14 + 0x21c], ebx
jne 0x1400f79d7
lea rcx, str.S_1_5_32_544
jmp 0x1400f7b45
cmp dword [0x14027edf0], 4
jl 0x1400f79f0
test dword [0x14027ee6c], 0x10000
je 0x1400f79f0
mov edi, ebx
jmp 0x1400f79f2
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7a09
test eax, eax
je 0x1400f7a4a
lea rcx, str.Adding_default_account_SID_S_1_5_32_581_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x187
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bfc30
lea rdx, [rsp + 0x78]
lea rcx, str.S_1_5_32_581
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f7acb
cmp dword [0x14027edf0], ebx
jl 0x1400f7a77
test dword [0x14027ee24], 0x10000
je 0x1400f7a77
mov edi, ebx
jmp 0x1400f7a79
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7a8d
test eax, eax
je 0x1400f7acb
lea rcx, str.Failed_to_convert_SID_string_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18a
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bfc30
cmp dword [0x14027edf0], 4
jl 0x1400f7ae4
test dword [0x14027ee6c], 0x10000
je 0x1400f7ae4
mov edi, ebx
jmp 0x1400f7ae6
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7afd
test eax, eax
je 0x1400f7b3e
lea rcx, str.Adding_local_users_SID_S_1_2_0_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18d
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bfc30
lea rcx, str.S_1_2_0
lea rdx, [rsp + 0x70]
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f7b9e
cmp dword [0x14027edf0], ebx
jl 0x1400f7b6b
test dword [0x14027ee24], 0x10000
je 0x1400f7b6b
mov edi, ebx
jmp 0x1400f7b6d
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7b85
test eax, eax
je 0x1400f8142
lea rcx, str.Failed_to_convert_SID_string_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x191
jmp 0x1400f7857
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
mov rcx, qword [rsp + 0x78]
lea edi, [rax + 8]
test rcx, rcx
je 0x1400f7bc0
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
lea r15d, [rax + 8]
mov esi, dword [rbp - 0x5c]
add esi, r15d
add esi, edi
mov ecx, esi
mov edi, esi
call fcn.1400f7180
mov r15, rax
test rax, rax
jne 0x1400f7c53
cmp dword [0x14027edf0], ebx
jl 0x1400f7bf1
test dword [0x14027ee24], 0x10000
je 0x1400f7bf1
mov edi, ebx
jmp 0x1400f7bf3
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7c0b
test eax, eax
je 0x1400f8138
lea rcx, str.Allocaiton_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1a7
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400bfc30
mov rsi, qword [rsp + 0x50]
jmp 0x1400f8150
mov r8, rdi
xor edx, edx
mov rcx, r15
call fcn.140107f60
mov r8d, dword [rbp - 0x68]
mov edx, esi
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_InitializeAcl]
test eax, eax
jne 0x1400f7cbe
cmp dword [0x14027edf0], ebx
jl 0x1400f7c8b
test dword [0x14027ee24], 0x10000
je 0x1400f7c8b
mov edi, ebx
jmp 0x1400f7c8d
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7ca5
test eax, eax
je 0x1400f8138
lea rcx, str.Unabled_to_initialize_ACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1ad
jmp 0x1400f7c1f
mov r9, qword [rsp + 0x70]
mov r8d, 0x10000000
mov edx, dword [rbp - 0x68]
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f7d24
cmp dword [0x14027edf0], ebx
jl 0x1400f7cf1
test dword [0x14027ee24], 0x10000
je 0x1400f7cf1
mov edi, ebx
jmp 0x1400f7cf3
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7d0b
test eax, eax
je 0x1400f8138
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1b9
jmp 0x1400f7c1f
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x1400f7d8f
mov edx, dword [rbp - 0x68]
mov r8d, 0x10000000
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f7d8f
cmp dword [0x14027edf0], ebx
jl 0x1400f7d5c
test dword [0x14027ee24], 0x10000
je 0x1400f7d5c
mov edi, ebx
jmp 0x1400f7d5e
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7d76
test eax, eax
je 0x1400f8138
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1c9
jmp 0x1400f7c1f
mov eax, dword [rbp - 0x5c]
mov r8d, 0xffffffff
mov rsi, qword [rsp + 0x50]
add eax, 0xfffffff8
mov edx, dword [rbp - 0x68]
mov rcx, r15
mov dword [rsp + 0x20], eax
mov r9, qword [rsi]
add r9, 8
call qword [sym.imp.ADVAPI32.DLL_AddAce]
test eax, eax
jne 0x1400f7e06
cmp dword [0x14027edf0], ebx
jl 0x1400f7dd3
test dword [0x14027ee24], 0x10000
je 0x1400f7dd3
mov edi, ebx
jmp 0x1400f7dd5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7ded
test eax, eax
je 0x1400f8142
lea rcx, str.Unable_to_add_ACE_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1d7
jmp 0x1400f7857
mov ecx, 0x28
call fcn.1400f7180
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x1400f7e64
cmp dword [0x14027edf0], ebx
jl 0x1400f7e31
test dword [0x14027ee24], 0x10000
je 0x1400f7e31
mov edi, ebx
jmp 0x1400f7e33
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7e4b
test eax, eax
je 0x1400f8142
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e0
jmp 0x1400f7857
mov edx, ebx
mov dword [rbp - 0x80], 0x18
mov rcx, rax
mov dword [rbp - 0x70], ebx
call qword [sym.imp.ADVAPI32.DLL_InitializeSecurityDescriptor]
test eax, eax
jne 0x1400f7ec8
cmp dword [0x14027edf0], ebx
jl 0x1400f7e95
test dword [0x14027ee24], 0x10000
je 0x1400f7e95
mov edi, ebx
jmp 0x1400f7e97
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7eaf
test eax, eax
je 0x1400f8142
lea rcx, str.Unable_to_initialize_security_descriptor_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e7
jmp 0x1400f7857
mov rcx, qword [rbp - 0x78]
xor r9d, r9d
mov r8, r15
mov edx, ebx
call qword [sym.imp.ADVAPI32.DLL_SetSecurityDescriptorDacl]
cmp dword [r14 + 0x218], 0
mov edx, 0x40080003
mov eax, 0x80003
mov r9d, ebx
cmove edx, eax
mov r8d, 0xe
lea rax, [rbp - 0x80]
mov rcx, r14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.DLL_CreateNamedPipeW]
mov qword [r14 + 0x208], rax
cmp dword [0x14027edf0], 3
jl 0x1400f7f3c
test dword [0x14027ee54], 0x10000
je 0x1400f7f3c
mov edi, ebx
jmp 0x1400f7f3e
xor edi, edi
mov edx, 3
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f7f59
test eax, eax
je 0x1400f8142
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 3
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x1fd
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bfc30
jmp 0x1400f8150
mov edx, 0x3e8
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_WaitNamedPipeW]
test eax, eax
je 0x1400f813f
mov eax, dword [r14 + 0x218]
mov edx, 0xc0000000
neg eax
mov qword [rsp + 0x30], r15
sbb ecx, ecx
xor r9d, r9d
and ecx, 0x40000000
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, r14
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov qword [r14 + 0x208], rax
cmp dword [0x14027edf0], 4
jl 0x1400f8017
test dword [0x14027ee6c], 0x10000
je 0x1400f8017
mov edi, ebx
jmp 0x1400f8019
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f8030
test eax, eax
je 0x1400f807f
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x212
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bfc30
jmp 0x1400f808d
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea r13, str.named_pipe_create
mov rcx, qword [r14 + 0x208]
cmp rcx, 0xffffffffffffffff
je 0x1400f771b
xor r9d, r9d
mov dword [rbp - 0x64], 2
xor r8d, r8d
lea rdx, [rbp - 0x64]
call qword [sym.imp.KERNEL32.DLL_SetNamedPipeHandleState]
test eax, eax
jne 0x1400f771b
cmp dword [0x14027edf0], ebx
jl 0x1400f80d5
test dword [0x14027ee24], 0x10000
je 0x1400f80d5
mov edi, ebx
jmp 0x1400f80d7
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e8cc0
test edi, edi
jne 0x1400f80eb
test eax, eax
je 0x1400f811b
lea rcx, str.Unable_to_set_handle_state_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x21b
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bfc30
mov rcx, qword [r14 + 0x208]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov qword [r14 + 0x208], 0xffffffffffffffff
mov rsi, r15
jmp 0x1400f8150
mov rsi, qword [rsp + 0x50]
jmp 0x1400f8142
mov rsi, r15
lea r13, str.named_pipe_create
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
cmp dword [0x14027edf0], 3
jl 0x1400f8165
test dword [0x14027ee54], 0x10000
jne 0x1400f8167
xor ebx, ebx
mov edx, 3
mov ecx, 0x10000
call fcn.1400e8cc0
mov edi, eax
test ebx, ebx
jne 0x1400f8180
test eax, eax
je 0x1400f81bd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [rsp + 0x40], eax
mov r9d, 3
lea rax, str.GetLastError___lu_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, edi
mov dword [rsp + 0x30], 0x223
mov ecx, ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
call fcn.1400bfc30
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400f81cd
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1400f81db
call fcn.140115d24
test r15, r15
je 0x1400f81e8
mov rcx, r15
call fcn.140115d24
test rsi, rsi
je 0x1400f81f5
mov rcx, rsi
call fcn.140115d24
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f8205
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f8215
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rax, qword [r14 + 0x208]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140106650
mov rbx, qword [rsp + 0x228]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret