Function at 0x1400f18c0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x14027aef8]
xor rax, rsp
mov qword [rbp + 0xc0], rax
xor eax, eax
mov r13d, r8d
cmp dword [0x140274810], 4
mov r12d, edx
mov r14, rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov r15d, eax
lea ebx, [rax + 1]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rax
jl 0x1400f192b
test dword [0x14027488c], 0x10000
mov edi, ebx
jne 0x1400f192d
mov edi, eax
mov edx, 4
mov ecx, 0x10000
call fcn.1400e1c40
mov esi, eax
test edi, edi
jne 0x1400f1946
test eax, eax
je 0x1400f199a
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.1400f0fd0
mov qword [rsp + 0x40], rax
mov r9d, 4
lea rax, str.Creating_named_pipe_for_SID___s_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, esi
lea rax, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x12d
mov qword [rsp + 0x28], rax
mov ecx, edi
lea rax, str.named_pipe_create
mov qword [rsp + 0x20], rax
call fcn.1400ba210
cmp qword [r14 + 0x208], 0xffffffffffffffff
je 0x1400f19ac
mov rcx, r14
call fcn.1400f14e0
cmp dword [r14 + 0x218], ebx
jne 0x1400f1a43
cmp qword [r14 + 0x220], r15
je 0x1400f19cb
cmp qword [r14 + 0x248], r15
jne 0x1400f1a43
cmp dword [0x140274810], ebx
jl 0x1400f19e3
test dword [0x140274844], 0x10000
je 0x1400f19e3
mov edi, ebx
jmp 0x1400f19e5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f19fd
test eax, eax
je 0x1400f245f
lea rcx, str.Creation_events_not_present_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x139
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov edx, eax
mov qword [rsp + 0x20], r13
mov ecx, edi
call fcn.1400ba210
mov rsi, r15
jmp 0x1400f2470
cmp dword [r14 + 0x214], r15d
jne 0x1400f22cb
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
lea r8, [rsp + 0x68]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.DLL_OpenProcessToken]
test eax, eax
jne 0x1400f1ad9
cmp dword [0x140274810], ebx
jl 0x1400f1a85
test dword [0x140274844], 0x10000
je 0x1400f1a85
mov edi, ebx
jmp 0x1400f1a87
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1a9b
test eax, eax
je 0x1400f1ad9
lea rcx, str.Failed_to_open_process_token_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x148
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400ba210
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r9 + 6]
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x7a
jne 0x1400f245f
mov edi, dword [rsp + 0x60]
mov ecx, edi
call fcn.140110008
mov qword [rsp + 0x50], rax
mov rsi, rax
test rax, rax
je 0x1400f1b2c
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140102230
test rsi, rsi
jne 0x1400f1ba6
cmp dword [0x140274810], ebx
jl 0x1400f1b49
test dword [0x140274844], 0x10000
je 0x1400f1b49
mov edi, ebx
jmp 0x1400f1b4b
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1b63
test eax, eax
je 0x1400f2462
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x162
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400ba210
jmp 0x1400f2470
mov r9d, dword [rsp + 0x60]
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov r8, rsi
mov edx, 6
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
test eax, eax
jne 0x1400f1c17
cmp dword [0x140274810], ebx
jl 0x1400f1be4
test dword [0x140274844], 0x10000
je 0x1400f1be4
mov edi, ebx
jmp 0x1400f1be6
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1bfe
test eax, eax
je 0x1400f2462
lea rcx, str.Unable_to_get_token_information_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x16f
jmp 0x1400f1b77
mov rcx, qword [rsi]
lea rdx, [rbp - 0x60]
mov r9d, 2
lea r8d, [r9 + 0xa]
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f1c7d
cmp dword [0x140274810], ebx
jl 0x1400f1c4a
test dword [0x140274844], 0x10000
je 0x1400f1c4a
mov edi, ebx
jmp 0x1400f1c4c
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1c64
test eax, eax
je 0x1400f2462
lea rcx, str.Unable_to_DACL_size_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x178
jmp 0x1400f1b77
mov rcx, qword [rsi]
lea rdx, [rbp - 0x68]
mov r9d, ebx
mov r8d, 4
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f1ce2
cmp dword [0x140274810], ebx
jl 0x1400f1caf
test dword [0x140274844], 0x10000
je 0x1400f1caf
mov edi, ebx
jmp 0x1400f1cb1
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1cc9
test eax, eax
je 0x1400f2462
lea rcx, str.Unable_to_DACL_rev_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x17d
jmp 0x1400f1b77
cmp dword [r14 + 0x21c], ebx
jne 0x1400f1cf7
lea rcx, str.S_1_5_32_544
jmp 0x1400f1e65
cmp dword [0x140274810], 4
jl 0x1400f1d10
test dword [0x14027488c], 0x10000
je 0x1400f1d10
mov edi, ebx
jmp 0x1400f1d12
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1d29
test eax, eax
je 0x1400f1d6a
lea rcx, str.Adding_default_account_SID_S_1_5_32_581_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x187
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400ba210
lea rdx, [rsp + 0x78]
lea rcx, str.S_1_5_32_581
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f1deb
cmp dword [0x140274810], ebx
jl 0x1400f1d97
test dword [0x140274844], 0x10000
je 0x1400f1d97
mov edi, ebx
jmp 0x1400f1d99
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1dad
test eax, eax
je 0x1400f1deb
lea rcx, str.Failed_to_convert_SID_string_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18a
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400ba210
cmp dword [0x140274810], 4
jl 0x1400f1e04
test dword [0x14027488c], 0x10000
je 0x1400f1e04
mov edi, ebx
jmp 0x1400f1e06
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1e1d
test eax, eax
je 0x1400f1e5e
lea rcx, str.Adding_local_users_SID_S_1_2_0_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18d
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400ba210
lea rcx, str.S_1_2_0
lea rdx, [rsp + 0x70]
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f1ebe
cmp dword [0x140274810], ebx
jl 0x1400f1e8b
test dword [0x140274844], 0x10000
je 0x1400f1e8b
mov edi, ebx
jmp 0x1400f1e8d
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1ea5
test eax, eax
je 0x1400f2462
lea rcx, str.Failed_to_convert_SID_string_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x191
jmp 0x1400f1b77
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
mov rcx, qword [rsp + 0x78]
lea edi, [rax + 8]
test rcx, rcx
je 0x1400f1ee0
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
lea r15d, [rax + 8]
mov esi, dword [rbp - 0x5c]
add esi, r15d
add esi, edi
mov ecx, esi
mov edi, esi
call fcn.1400f14a0
mov r15, rax
test rax, rax
jne 0x1400f1f73
cmp dword [0x140274810], ebx
jl 0x1400f1f11
test dword [0x140274844], 0x10000
je 0x1400f1f11
mov edi, ebx
jmp 0x1400f1f13
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1f2b
test eax, eax
je 0x1400f2458
lea rcx, str.Allocaiton_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1a7
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400ba210
mov rsi, qword [rsp + 0x50]
jmp 0x1400f2470
mov r8, rdi
xor edx, edx
mov rcx, r15
call fcn.140102230
mov r8d, dword [rbp - 0x68]
mov edx, esi
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_InitializeAcl]
test eax, eax
jne 0x1400f1fde
cmp dword [0x140274810], ebx
jl 0x1400f1fab
test dword [0x140274844], 0x10000
je 0x1400f1fab
mov edi, ebx
jmp 0x1400f1fad
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f1fc5
test eax, eax
je 0x1400f2458
lea rcx, str.Unabled_to_initialize_ACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1ad
jmp 0x1400f1f3f
mov r9, qword [rsp + 0x70]
mov r8d, 0x10000000
mov edx, dword [rbp - 0x68]
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f2044
cmp dword [0x140274810], ebx
jl 0x1400f2011
test dword [0x140274844], 0x10000
je 0x1400f2011
mov edi, ebx
jmp 0x1400f2013
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f202b
test eax, eax
je 0x1400f2458
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1b9
jmp 0x1400f1f3f
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x1400f20af
mov edx, dword [rbp - 0x68]
mov r8d, 0x10000000
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f20af
cmp dword [0x140274810], ebx
jl 0x1400f207c
test dword [0x140274844], 0x10000
je 0x1400f207c
mov edi, ebx
jmp 0x1400f207e
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f2096
test eax, eax
je 0x1400f2458
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1c9
jmp 0x1400f1f3f
mov eax, dword [rbp - 0x5c]
mov r8d, 0xffffffff
mov rsi, qword [rsp + 0x50]
add eax, 0xfffffff8
mov edx, dword [rbp - 0x68]
mov rcx, r15
mov dword [rsp + 0x20], eax
mov r9, qword [rsi]
add r9, 8
call qword [sym.imp.ADVAPI32.DLL_AddAce]
test eax, eax
jne 0x1400f2126
cmp dword [0x140274810], ebx
jl 0x1400f20f3
test dword [0x140274844], 0x10000
je 0x1400f20f3
mov edi, ebx
jmp 0x1400f20f5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f210d
test eax, eax
je 0x1400f2462
lea rcx, str.Unable_to_add_ACE_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1d7
jmp 0x1400f1b77
mov ecx, 0x28
call fcn.1400f14a0
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x1400f2184
cmp dword [0x140274810], ebx
jl 0x1400f2151
test dword [0x140274844], 0x10000
je 0x1400f2151
mov edi, ebx
jmp 0x1400f2153
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f216b
test eax, eax
je 0x1400f2462
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e0
jmp 0x1400f1b77
mov edx, ebx
mov dword [rbp - 0x80], 0x18
mov rcx, rax
mov dword [rbp - 0x70], ebx
call qword [sym.imp.ADVAPI32.DLL_InitializeSecurityDescriptor]
test eax, eax
jne 0x1400f21e8
cmp dword [0x140274810], ebx
jl 0x1400f21b5
test dword [0x140274844], 0x10000
je 0x1400f21b5
mov edi, ebx
jmp 0x1400f21b7
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f21cf
test eax, eax
je 0x1400f2462
lea rcx, str.Unable_to_initialize_security_descriptor_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e7
jmp 0x1400f1b77
mov rcx, qword [rbp - 0x78]
xor r9d, r9d
mov r8, r15
mov edx, ebx
call qword [sym.imp.ADVAPI32.DLL_SetSecurityDescriptorDacl]
cmp dword [r14 + 0x218], 0
mov edx, 0x40080003
mov eax, 0x80003
mov r9d, ebx
cmove edx, eax
mov r8d, 0xe
lea rax, [rbp - 0x80]
mov rcx, r14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.DLL_CreateNamedPipeW]
mov qword [r14 + 0x208], rax
cmp dword [0x140274810], 3
jl 0x1400f225c
test dword [0x140274874], 0x10000
je 0x1400f225c
mov edi, ebx
jmp 0x1400f225e
xor edi, edi
mov edx, 3
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f2279
test eax, eax
je 0x1400f2462
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 3
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x1fd
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400ba210
jmp 0x1400f2470
mov edx, 0x3e8
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_WaitNamedPipeW]
test eax, eax
je 0x1400f245f
mov eax, dword [r14 + 0x218]
mov edx, 0xc0000000
neg eax
mov qword [rsp + 0x30], r15
sbb ecx, ecx
xor r9d, r9d
and ecx, 0x40000000
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, r14
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov qword [r14 + 0x208], rax
cmp dword [0x140274810], 4
jl 0x1400f2337
test dword [0x14027488c], 0x10000
je 0x1400f2337
mov edi, ebx
jmp 0x1400f2339
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f2350
test eax, eax
je 0x1400f239f
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x212
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400ba210
jmp 0x1400f23ad
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea r13, str.named_pipe_create
mov rcx, qword [r14 + 0x208]
cmp rcx, 0xffffffffffffffff
je 0x1400f1a3b
xor r9d, r9d
mov dword [rbp - 0x64], 2
xor r8d, r8d
lea rdx, [rbp - 0x64]
call qword [sym.imp.KERNEL32.DLL_SetNamedPipeHandleState]
test eax, eax
jne 0x1400f1a3b
cmp dword [0x140274810], ebx
jl 0x1400f23f5
test dword [0x140274844], 0x10000
je 0x1400f23f5
mov edi, ebx
jmp 0x1400f23f7
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e1c40
test edi, edi
jne 0x1400f240b
test eax, eax
je 0x1400f243b
lea rcx, str.Unable_to_set_handle_state_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x21b
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400ba210
mov rcx, qword [r14 + 0x208]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov qword [r14 + 0x208], 0xffffffffffffffff
mov rsi, r15
jmp 0x1400f2470
mov rsi, qword [rsp + 0x50]
jmp 0x1400f2462
mov rsi, r15
lea r13, str.named_pipe_create
lea r12, str.C:jenkinsworkspacedptfSrcESIFProductsESIF_UFSourceswin_named_pipe.c
cmp dword [0x140274810], 3
jl 0x1400f2485
test dword [0x140274874], 0x10000
jne 0x1400f2487
xor ebx, ebx
mov edx, 3
mov ecx, 0x10000
call fcn.1400e1c40
mov edi, eax
test ebx, ebx
jne 0x1400f24a0
test eax, eax
je 0x1400f24dd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [rsp + 0x40], eax
mov r9d, 3
lea rax, str.GetLastError___lu_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, edi
mov dword [rsp + 0x30], 0x223
mov ecx, ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
call fcn.1400ba210
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400f24ed
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1400f24fb
call fcn.14010fff4
test r15, r15
je 0x1400f2508
mov rcx, r15
call fcn.14010fff4
test rsi, rsi
je 0x1400f2515
mov rcx, rsi
call fcn.14010fff4
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f2525
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f2535
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rax, qword [r14 + 0x208]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140100920
mov rbx, qword [rsp + 0x228]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret