Function at 0x1400f39a0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rax, qword [0x14027df48]
xor rax, rsp
mov qword [rbp + 0xc0], rax
xor eax, eax
mov r13d, r8d
cmp dword [0x140277860], 4
mov r12d, edx
mov r14, rcx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov r15d, eax
lea ebx, [rax + 1]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rax
jl 0x1400f3a0b
test dword [0x1402778dc], 0x10000
mov edi, ebx
jne 0x1400f3a0d
mov edi, eax
mov edx, 4
mov ecx, 0x10000
call fcn.1400e3b80
mov esi, eax
test edi, edi
jne 0x1400f3a26
test eax, eax
je 0x1400f3a7a
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.1400f30b0
mov qword [rsp + 0x40], rax
mov r9d, 4
lea rax, str.Creating_named_pipe_for_SID___s_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, esi
lea rax, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x12d
mov qword [rsp + 0x28], rax
mov ecx, edi
lea rax, str.named_pipe_create
mov qword [rsp + 0x20], rax
call fcn.1400bb960
cmp qword [r14 + 0x208], 0xffffffffffffffff
je 0x1400f3a8c
mov rcx, r14
call fcn.1400f35c0
cmp dword [r14 + 0x218], ebx
jne 0x1400f3b23
cmp qword [r14 + 0x220], r15
je 0x1400f3aab
cmp qword [r14 + 0x248], r15
jne 0x1400f3b23
cmp dword [0x140277860], ebx
jl 0x1400f3ac3
test dword [0x140277894], 0x10000
je 0x1400f3ac3
mov edi, ebx
jmp 0x1400f3ac5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3add
test eax, eax
je 0x1400f453f
lea rcx, str.Creation_events_not_present_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x139
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov edx, eax
mov qword [rsp + 0x20], r13
mov ecx, edi
call fcn.1400bb960
mov rsi, r15
jmp 0x1400f4550
cmp dword [r14 + 0x214], r15d
jne 0x1400f43ab
call qword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
lea r8, [rsp + 0x68]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.DLL_OpenProcessToken]
test eax, eax
jne 0x1400f3bb9
cmp dword [0x140277860], ebx
jl 0x1400f3b65
test dword [0x140277894], 0x10000
je 0x1400f3b65
mov edi, ebx
jmp 0x1400f3b67
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3b7b
test eax, eax
je 0x1400f3bb9
lea rcx, str.Failed_to_open_process_token_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x148
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bb960
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r9 + 6]
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x7a
jne 0x1400f453f
mov edi, dword [rsp + 0x60]
mov ecx, edi
call fcn.1401120e8
mov qword [rsp + 0x50], rax
mov rsi, rax
test rax, rax
je 0x1400f3c0c
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140104310
test rsi, rsi
jne 0x1400f3c86
cmp dword [0x140277860], ebx
jl 0x1400f3c29
test dword [0x140277894], 0x10000
je 0x1400f3c29
mov edi, ebx
jmp 0x1400f3c2b
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3c43
test eax, eax
je 0x1400f4542
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x162
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400bb960
jmp 0x1400f4550
mov r9d, dword [rsp + 0x60]
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov r8, rsi
mov edx, 6
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.DLL_GetTokenInformation]
test eax, eax
jne 0x1400f3cf7
cmp dword [0x140277860], ebx
jl 0x1400f3cc4
test dword [0x140277894], 0x10000
je 0x1400f3cc4
mov edi, ebx
jmp 0x1400f3cc6
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3cde
test eax, eax
je 0x1400f4542
lea rcx, str.Unable_to_get_token_information_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x16f
jmp 0x1400f3c57
mov rcx, qword [rsi]
lea rdx, [rbp - 0x60]
mov r9d, 2
lea r8d, [r9 + 0xa]
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f3d5d
cmp dword [0x140277860], ebx
jl 0x1400f3d2a
test dword [0x140277894], 0x10000
je 0x1400f3d2a
mov edi, ebx
jmp 0x1400f3d2c
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3d44
test eax, eax
je 0x1400f4542
lea rcx, str.Unable_to_DACL_size_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x178
jmp 0x1400f3c57
mov rcx, qword [rsi]
lea rdx, [rbp - 0x68]
mov r9d, ebx
mov r8d, 4
call qword [sym.imp.ADVAPI32.DLL_GetAclInformation]
test eax, eax
jne 0x1400f3dc2
cmp dword [0x140277860], ebx
jl 0x1400f3d8f
test dword [0x140277894], 0x10000
je 0x1400f3d8f
mov edi, ebx
jmp 0x1400f3d91
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3da9
test eax, eax
je 0x1400f4542
lea rcx, str.Unable_to_DACL_rev_info_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x17d
jmp 0x1400f3c57
cmp dword [r14 + 0x21c], ebx
jne 0x1400f3dd7
lea rcx, str.S_1_5_32_544
jmp 0x1400f3f45
cmp dword [0x140277860], 4
jl 0x1400f3df0
test dword [0x1402778dc], 0x10000
je 0x1400f3df0
mov edi, ebx
jmp 0x1400f3df2
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3e09
test eax, eax
je 0x1400f3e4a
lea rcx, str.Adding_default_account_SID_S_1_5_32_581_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x187
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bb960
lea rdx, [rsp + 0x78]
lea rcx, str.S_1_5_32_581
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f3ecb
cmp dword [0x140277860], ebx
jl 0x1400f3e77
test dword [0x140277894], 0x10000
je 0x1400f3e77
mov edi, ebx
jmp 0x1400f3e79
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3e8d
test eax, eax
je 0x1400f3ecb
lea rcx, str.Failed_to_convert_SID_string_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18a
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bb960
cmp dword [0x140277860], 4
jl 0x1400f3ee4
test dword [0x1402778dc], 0x10000
je 0x1400f3ee4
mov edi, ebx
jmp 0x1400f3ee6
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3efd
test eax, eax
je 0x1400f3f3e
lea rcx, str.Adding_local_users_SID_S_1_2_0_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
lea rcx, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov dword [rsp + 0x30], 0x18d
mov qword [rsp + 0x28], rcx
mov edx, eax
lea rcx, str.named_pipe_create
mov qword [rsp + 0x20], rcx
mov ecx, edi
call fcn.1400bb960
lea rcx, str.S_1_2_0
lea rdx, [rsp + 0x70]
call sub.ADVAPI32.DLL_ConvertStringSidToSidW
test eax, eax
jne 0x1400f3f9e
cmp dword [0x140277860], ebx
jl 0x1400f3f6b
test dword [0x140277894], 0x10000
je 0x1400f3f6b
mov edi, ebx
jmp 0x1400f3f6d
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f3f85
test eax, eax
je 0x1400f4542
lea rcx, str.Failed_to_convert_SID_string_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x191
jmp 0x1400f3c57
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
mov rcx, qword [rsp + 0x78]
lea edi, [rax + 8]
test rcx, rcx
je 0x1400f3fc0
call qword [sym.imp.ADVAPI32.DLL_GetLengthSid]
lea r15d, [rax + 8]
mov esi, dword [rbp - 0x5c]
add esi, r15d
add esi, edi
mov ecx, esi
mov edi, esi
call fcn.1400f3580
mov r15, rax
test rax, rax
jne 0x1400f4053
cmp dword [0x140277860], ebx
jl 0x1400f3ff1
test dword [0x140277894], 0x10000
je 0x1400f3ff1
mov edi, ebx
jmp 0x1400f3ff3
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f400b
test eax, eax
je 0x1400f4538
lea rcx, str.Allocaiton_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1a7
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov r9d, ebx
lea r13, str.named_pipe_create
mov qword [rsp + 0x28], r12
mov r8d, 0x10000
mov qword [rsp + 0x20], r13
mov edx, eax
mov ecx, edi
call fcn.1400bb960
mov rsi, qword [rsp + 0x50]
jmp 0x1400f4550
mov r8, rdi
xor edx, edx
mov rcx, r15
call fcn.140104310
mov r8d, dword [rbp - 0x68]
mov edx, esi
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_InitializeAcl]
test eax, eax
jne 0x1400f40be
cmp dword [0x140277860], ebx
jl 0x1400f408b
test dword [0x140277894], 0x10000
je 0x1400f408b
mov edi, ebx
jmp 0x1400f408d
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f40a5
test eax, eax
je 0x1400f4538
lea rcx, str.Unabled_to_initialize_ACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1ad
jmp 0x1400f401f
mov r9, qword [rsp + 0x70]
mov r8d, 0x10000000
mov edx, dword [rbp - 0x68]
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f4124
cmp dword [0x140277860], ebx
jl 0x1400f40f1
test dword [0x140277894], 0x10000
je 0x1400f40f1
mov edi, ebx
jmp 0x1400f40f3
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f410b
test eax, eax
je 0x1400f4538
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1b9
jmp 0x1400f401f
mov r9, qword [rsp + 0x78]
test r9, r9
je 0x1400f418f
mov edx, dword [rbp - 0x68]
mov r8d, 0x10000000
mov rcx, r15
call qword [sym.imp.ADVAPI32.DLL_AddAccessAllowedAce]
test eax, eax
jne 0x1400f418f
cmp dword [0x140277860], ebx
jl 0x1400f415c
test dword [0x140277894], 0x10000
je 0x1400f415c
mov edi, ebx
jmp 0x1400f415e
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f4176
test eax, eax
je 0x1400f4538
lea rcx, str.Unable_to_add_ACE_to_DACL_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1c9
jmp 0x1400f401f
mov eax, dword [rbp - 0x5c]
mov r8d, 0xffffffff
mov rsi, qword [rsp + 0x50]
add eax, 0xfffffff8
mov edx, dword [rbp - 0x68]
mov rcx, r15
mov dword [rsp + 0x20], eax
mov r9, qword [rsi]
add r9, 8
call qword [sym.imp.ADVAPI32.DLL_AddAce]
test eax, eax
jne 0x1400f4206
cmp dword [0x140277860], ebx
jl 0x1400f41d3
test dword [0x140277894], 0x10000
je 0x1400f41d3
mov edi, ebx
jmp 0x1400f41d5
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f41ed
test eax, eax
je 0x1400f4542
lea rcx, str.Unable_to_add_ACE_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1d7
jmp 0x1400f3c57
mov ecx, 0x28
call fcn.1400f3580
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x1400f4264
cmp dword [0x140277860], ebx
jl 0x1400f4231
test dword [0x140277894], 0x10000
je 0x1400f4231
mov edi, ebx
jmp 0x1400f4233
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f424b
test eax, eax
je 0x1400f4542
lea rcx, str.Allocation_failure_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e0
jmp 0x1400f3c57
mov edx, ebx
mov dword [rbp - 0x80], 0x18
mov rcx, rax
mov dword [rbp - 0x70], ebx
call qword [sym.imp.ADVAPI32.DLL_InitializeSecurityDescriptor]
test eax, eax
jne 0x1400f42c8
cmp dword [0x140277860], ebx
jl 0x1400f4295
test dword [0x140277894], 0x10000
je 0x1400f4295
mov edi, ebx
jmp 0x1400f4297
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f42af
test eax, eax
je 0x1400f4542
lea rcx, str.Unable_to_initialize_security_descriptor_n
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 0x1e7
jmp 0x1400f3c57
mov rcx, qword [rbp - 0x78]
xor r9d, r9d
mov r8, r15
mov edx, ebx
call qword [sym.imp.ADVAPI32.DLL_SetSecurityDescriptorDacl]
cmp dword [r14 + 0x218], 0
mov edx, 0x40080003
mov eax, 0x80003
mov r9d, ebx
cmove edx, eax
mov r8d, 0xe
lea rax, [rbp - 0x80]
mov rcx, r14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.DLL_CreateNamedPipeW]
mov qword [r14 + 0x208], rax
cmp dword [0x140277860], 3
jl 0x1400f433c
test dword [0x1402778c4], 0x10000
je 0x1400f433c
mov edi, ebx
jmp 0x1400f433e
xor edi, edi
mov edx, 3
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f4359
test eax, eax
je 0x1400f4542
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 3
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x1fd
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bb960
jmp 0x1400f4550
mov edx, 0x3e8
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_WaitNamedPipeW]
test eax, eax
je 0x1400f453f
mov eax, dword [r14 + 0x218]
mov edx, 0xc0000000
neg eax
mov qword [rsp + 0x30], r15
sbb ecx, ecx
xor r9d, r9d
and ecx, 0x40000000
xor r8d, r8d
mov dword [rsp + 0x28], ecx
mov rcx, r14
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov qword [r14 + 0x208], rax
cmp dword [0x140277860], 4
jl 0x1400f4417
test dword [0x1402778dc], 0x10000
je 0x1400f4417
mov edi, ebx
jmp 0x1400f4419
xor edi, edi
mov edx, 4
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f4430
test eax, eax
je 0x1400f447f
mov rcx, qword [r14 + 0x208]
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
mov qword [rsp + 0x40], rcx
lea r13, str.named_pipe_create
lea rcx, str.Pipe_handle___p_n
mov r9d, 4
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x212
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bb960
jmp 0x1400f448d
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
lea r13, str.named_pipe_create
mov rcx, qword [r14 + 0x208]
cmp rcx, 0xffffffffffffffff
je 0x1400f3b1b
xor r9d, r9d
mov dword [rbp - 0x64], 2
xor r8d, r8d
lea rdx, [rbp - 0x64]
call qword [sym.imp.KERNEL32.DLL_SetNamedPipeHandleState]
test eax, eax
jne 0x1400f3b1b
cmp dword [0x140277860], ebx
jl 0x1400f44d5
test dword [0x140277894], 0x10000
je 0x1400f44d5
mov edi, ebx
jmp 0x1400f44d7
xor edi, edi
mov edx, ebx
mov ecx, 0x10000
call fcn.1400e3b80
test edi, edi
jne 0x1400f44eb
test eax, eax
je 0x1400f451b
lea rcx, str.Unable_to_set_handle_state_n
mov r9d, ebx
mov qword [rsp + 0x38], rcx
mov r8d, 0x10000
mov dword [rsp + 0x30], 0x21b
mov edx, eax
mov qword [rsp + 0x28], r12
mov ecx, edi
mov qword [rsp + 0x20], r13
call fcn.1400bb960
mov rcx, qword [r14 + 0x208]
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov qword [r14 + 0x208], 0xffffffffffffffff
mov rsi, r15
jmp 0x1400f4550
mov rsi, qword [rsp + 0x50]
jmp 0x1400f4542
mov rsi, r15
lea r13, str.named_pipe_create
lea r12, str.C:jenkinsworkspacedptf_2SrcESIFProductsESIF_UFSourceswin_named_pipe.c
cmp dword [0x140277860], 3
jl 0x1400f4565
test dword [0x1402778c4], 0x10000
jne 0x1400f4567
xor ebx, ebx
mov edx, 3
mov ecx, 0x10000
call fcn.1400e3b80
mov edi, eax
test ebx, ebx
jne 0x1400f4580
test eax, eax
je 0x1400f45bd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [rsp + 0x40], eax
mov r9d, 3
lea rax, str.GetLastError___lu_n
mov r8d, 0x10000
mov qword [rsp + 0x38], rax
mov edx, edi
mov dword [rsp + 0x30], 0x223
mov ecx, ebx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r13
call fcn.1400bb960
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400f45cd
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1400f45db
call fcn.1401120d4
test r15, r15
je 0x1400f45e8
mov rcx, r15
call fcn.1401120d4
test rsi, rsi
je 0x1400f45f5
mov rcx, rsi
call fcn.1401120d4
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400f4605
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f4615
call qword [sym.imp.KERNEL32.DLL_LocalFree]
mov rax, qword [r14 + 0x208]
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140102a00
mov rbx, qword [rsp + 0x228]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret