Function at 0x140045890
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rdi, rdx
mov rbx, rcx
xor r15d, r15d
cmp qword [rdx + 0x10], r15
jne 0x14004591c
call fcn.14002c3f0
mov r10, qword [rax]
lea rcx, str.Invalid_path
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
lea r9d, [r15 + 0x23]
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call qword [r10 + 0x18]
mov eax, 0xe0001002
jmp 0x1400464a8
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
lea r8, [rbp + 0x20]
mov edx, dword [rcx + 8]
call fcn.140029130
test al, al
jne 0x14004599b
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov ecx, dword [rbx + 8]
mov dword [rsp + 0x38], ecx
lea rcx, str.Invalid_ID__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x2b
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov ebx, 0xe0001005
jmp 0x14004646a
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov rcx, rbx
call fcn.140029240
mov rsi, rax
lea r12, vtable.mb::common::system::ScopedAny_void____ptr64__int____cdecl___void____ptr64___int___cdecl_CloseHandle_void____ptr64___2__0__0_.0
mov qword [rbp + 0xb0], r12
mov qword [rbp + 0xb8], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140045a2c
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Failed__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x33
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004007
jmp 0x140046456
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov rcx, qword [rdi + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x1400464d9
cmp qword [rdi + 0x18], 7
jbe 0x140045a5b
mov rdi, qword [rdi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], 1
lea r9, [0x1404df774]
lea rcx, [rbp - 0x28]
call fcn.14001d800
nop
mov rcx, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x140045abb
lea rax, [rcx + 2]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x28]
cmp rdx, 7
cmova rax, qword [rbp - 0x28]
mov dword [rax + rcx*2], 0x200022
mov word [rax + rcx*2 + 4], r15w
lea rax, [rbp - 0x28]
jmp 0x140045adf
mov qword [rsp + 0x20], 2
lea r9, [0x1404df778]
movzx r8d, byte [rsp + 0x50]
mov edx, 2
lea rcx, [rbp - 0x28]
call fcn.14001da20
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rbp]
call fcn.14001dc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
call qword [sym.imp.SHLWAPI.dll_StrDupW]
mov r14, rax
lea rax, vtable.mb::common::system::ScopedAny_wchar_t____ptr64__void____ptr64____cdecl___void____ptr64___void____ptr64___cdecl_LocalFree_void____ptr64___0__0__4_.0
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r14
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140045bcb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045bc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464df
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x140045c1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045c1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464e5
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r15w
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x140045c71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045c6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464eb
call fcn.14014f510
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r15
xorps xmm1, xmm1
movups xmmword [rbp + 0xd0], xmm1
movups xmmword [rbp + 0xe0], xmm1
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm1
movups xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x130], xmm1
mov dword [rbp + 0xd0], 0x70
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov eax, 0xc
cmp dword [rbx + 0x10], 0
je 0x140045dd2
lea rcx, [rbp + 0x160]
call fcn.140094050
nop
lea rcx, [rbp + 0x160]
call fcn.140094a10
cmp eax, 0xc
jb 0x140045e6f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.140099050
test al, al
jne 0x140045e6f
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
xor edx, edx
call fcn.140092260
test al, al
je 0x140045e6f
mov dword [rbp - 0x30], 3
mov qword [rbp - 0x28], 4
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x2000b
lea rax, [rbp - 0x28]
mov qword [rbp], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 8], rax
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140029a40
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xd0]
call fcn.140029900
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140045dcd
mov rax, qword [rsp + 0x68]
sub rax, rcx
sar rax, 3
movabs rdx, 0xaaaaaaaaaaaaaaab
imul rax, rdx
lea rdx, [rax + rax*2]
shl rdx, 3
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045dc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464f1
call fcn.14014f510
mov eax, 0xc000c
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0xd0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140045ec0
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.CreateProcess_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x51
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0003001
jmp 0x14004641b
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x18]
lea rcx, str.Protection_unsupported
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x43
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
nop
mov ebx, 0xe0001001
jmp 0x14004641b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
lea r8d, [rax + 6]
lea rdx, str.Local_
lea rcx, [rsp + 0x58]
call fcn.14001fb40
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
xor r8d, r8d
lea rdx, [0x1404e3f68]
lea rcx, [rsp + 0x78]
call fcn.14001fb40
nop
mov edi, dword [rbp - 0x38]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r15
lea rax, vtable.mb::common::system::ScopedAny_struct_IPC_TERMINATEPROCESS____ptr64__int____cdecl___void_const____ptr64___int___cdecl_UnmapViewOfFile_void_const____ptr64___0__0__4_.0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], r15
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqa xmmword [rbp + 0x70], xmm1
mov word [rbp + 0x60], r15w
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x80]
call fcn.1400223f0
nop
mov qword [rbp + 0xa0], r15
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp + 0x10], xmm1
mov word [rbp], r15w
cmp qword [rsp + 0x68], 0
je 0x140046094
lea r8, [rbp]
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.140044cc0
test al, al
je 0x140046094
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 0x28], r15w
lea r8, [rbp - 0x28]
lea rdx, [rbp]
lea rcx, [rsp + 0x58]
call fcn.140089510
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400223f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x140046034
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004602f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464f7
call fcn.14014f510
movdqa xmm0, xmmword [0x140516800]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.14001f2e0
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x140046094
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004608e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464f7
call fcn.14014f510
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x1400460d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400460cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464fd
call fcn.14014f510
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140046117
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046111
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046503
call fcn.14014f510
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140046159
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046154
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046509
call fcn.14014f510
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
mov dl, 1
lea rcx, [rbp + 0x40]
call fcn.140045670
test al, al
je 0x1400463ab
mov rax, qword [rbp + 0x58]
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rax + 0x20], xmm0
movsd xmm1, qword [rbx + 0x30]
movsd qword [rax + 0x30], xmm1
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x14004621e
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Resume_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x61
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003002
jmp 0x140046411
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
test eax, eax
je 0x140046296
call fcn.14002c3f0
mov rcx, qword [rax]
mov r10, qword [rcx + 0x20]
mov dword [rsp + 0x38], edi
lea rcx, str.Wait_failed:__u
mov qword [rsp + 0x30], rcx
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x6a
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rax
call r10
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0003003
jmp 0x140046411
mov rcx, rsi
call fcn.14002ad30
mov rax, qword [rbp + 0x58]
test rax, rax
jne 0x140046361
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140046305
mov rax, qword [rcx]
mov r10, qword [rax + 0x18]
lea rax, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rax, qword [rbp + 0x80]
lea rdx, str.Not_initialized
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesmbcommon_vs2022.4.2.0.62_build_nativeincludeIPCMapping.h
lea rdx, str.mb::common::ipc::IPCMapping_struct_IPC_TERMINATEPROCESS_::GetStruct
call r10
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Read_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x75
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov ebx, 0xe0004001
jmp 0x140046411
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbx + 0x20], xmm0
movsd xmm1, qword [rax + 0x30]
movsd qword [rbx + 0x30], xmm1
cmp dword [rbx + 0xc], 0xffffffff
jne 0x1400463a6
mov dword [rbp - 0x30], 0xffffffff
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x1400463a6
mov eax, dword [rbp - 0x30]
mov dword [rbx + 0xc], eax
mov ebx, dword [rbx + 0xc]
jmp 0x140046411
call fcn.14002c3f0
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x38], eax
lea rax, str.Create_failed:__u
mov qword [rsp + 0x30], rax
lea rcx, str.Sledgehammer
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
mov r9d, 0x59
lea r8, str.D:JenkinsworkspaceN_MB5_InstallerService_srcPackagesSledgehammer.5.1.0.91_build_nativeincludeChildInstance.h
lea rdx, [0x1404e3f68]
mov rcx, rdi
call rbx
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xe0004000
lea rcx, [rbp + 0x40]
call fcn.140045600
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14004642a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14004643a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0xd0]
call fcn.140029580
nop
test r14, r14
je 0x140046456
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
lea rax, [rsi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14004646a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x1400464a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400464a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400464d3
call fcn.14014f510
mov eax, ebx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.14014f4f0
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14001cc60
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3