Function at 0x140004234
Capabilities:
Check if file exists
Check mutex and terminate process on windows
Check mutex on windows
Create pipe
Get file attributes
Read file on windows
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x520
mov rax, qword [0x1403bbc88]
xor rax, rsp
mov qword [rbp + 0x410], rax
movdqa xmm0, xmmword [0x140387aa0]
lea rbx, str.install_driver_internal
or rax, 0xffffffffffffffff
mov qword [rsp + 0x60], 0x200
xor edi, edi
mov qword [rbp + 0xb0], rax
mov r14, rcx
mov qword [rsp + 0x20], rbx
lea r9, str.Global_s
mov r8, rax
lea rcx, [rbp + 0xb8]
mov esi, edi
lea edx, [rdi + 0x22]
mov r13, rax
movdqu xmmword [rbp + 0xa0], xmm0
mov r12d, edi
call fcn.140003238
lea r8, [rbp + 0xb8]
xor ecx, ecx
lea edx, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x58], rax
mov r15, rax
test rax, rax
jne 0x1400042e8
lea eax, [rdi - 0xb]
jmp 0x140004f6c
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400042ff
mov ebx, 0xfffffffa
jmp 0x140004f61
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x140004315
call fcn.140002b18
mov eax, dword [section..data]
cmp eax, 0x61
jge 0x140004338
lea r8, str.This_version_of_Windows_is_no_longer_supported
mov rdx, rbx
mov ecx, 3
call fcn.1400082ac
mov ebx, 0xfffffff4
jmp 0x140004eaa
lea rcx, str.SetupAPI
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x50], rax
mov r15d, 0xfffffff5
mov rsi, rax
mov ebx, r15d
test rax, rax
jne 0x14000438a
lea rcx, str.SetupAPI
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x50], rax
mov rsi, rax
test rax, rax
jne 0x14000438a
lea rcx, str.SetupAPI
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
mov qword [rsp + 0x50], rax
lea rdx, str.CMP_WaitNoPendingInstallEvents
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
jne 0x1400043d0
lea rax, str.SetupAPI
lea r9, str.CMP_WaitNoPendingInstallEvents
mov qword [rsp + 0x20], rax
lea r8, str.Unable_to_locate__s___in__s_n
lea rdx, str.install_driver_internal
lea ecx, [rdi + 3]
call fcn.1400082ac
jmp 0x140004ea5
mov rax, qword [r14]
xor ebx, ebx
mov qword [0x1403bca20], rax
mov rax, qword [r14 + 0x18]
mov dword [0x1403bca28], ebx
test rax, rax
je 0x1400043f4
mov eax, dword [rax + 8]
mov dword [0x1403bca28], eax
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x140004493
cmp byte [rcx], bl
je 0x140004493
call fcn.14001ad10
mov rdx, qword [r14 + 8]
inc rax
mov esi, 0x104
cmp rax, rsi
jae 0x14000443e
test rdx, rdx
jne 0x14000442c
mov rax, rbx
mov rdx, rbx
jmp 0x140004438
mov rcx, rdx
call fcn.14001ad10
mov rdx, qword [r14 + 8]
lea r8, [rax + 1]
jmp 0x140004441
mov r8, rsi
lea rcx, [rbp + 0x1f0]
call fcn.14000d0e0
mov rcx, qword [r14 + 8]
test rcx, rcx
jne 0x14000445b
mov rax, rbx
jmp 0x140004460
call fcn.14001ad10
inc rax
cmp rax, rsi
jae 0x140004485
mov rcx, qword [r14 + 8]
test rcx, rcx
jne 0x140004476
mov rax, rbx
jmp 0x14000447b
call fcn.14001ad10
lea rax, [rbp + rax + 0x1f0]
jmp 0x14000448c
lea rax, [rbp + 0x2f3]
mov byte [rax], bl
jmp 0x14000455d
lea rcx, str.TEMP
call fcn.140004198
xor ecx, ecx
mov rbx, rax
test rax, rax
jne 0x1400044ad
mov eax, ecx
jmp 0x1400044b7
mov rcx, rbx
call fcn.14001ad10
xor ecx, ecx
inc rax
mov esi, 0x104
cmp rax, rsi
jae 0x1400044dc
test rbx, rbx
jne 0x1400044ce
mov rax, rcx
jmp 0x1400044d6
mov rcx, rbx
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x1400044df
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.14000d0e0
xor edx, edx
test rbx, rbx
jne 0x1400044f9
mov eax, edx
jmp 0x140004503
mov rcx, rbx
call fcn.14001ad10
xor edx, edx
inc rax
cmp rax, rsi
jae 0x14000452b
test rbx, rbx
jne 0x140004515
mov rax, rdx
jmp 0x14000451f
mov rcx, rbx
call fcn.14001ad10
xor edx, edx
lea rcx, [rbp + 0x1f0]
add rcx, rax
jmp 0x140004532
lea rcx, [rbp + 0x2f3]
mov byte [rcx], dl
mov rcx, rbx
call fcn.14001b038
lea r9, [rbp + 0x1f0]
mov ecx, 1
lea r8, str.No_path_provided___installing_from__s
lea rdx, str.install_driver_internal
call fcn.1400082ac
xor ebx, ebx
cmp qword [r14], rbx
je 0x140004e83
cmp qword [r14 + 0x10], rbx
je 0x140004e83
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x1400045a7
mov ecx, dword [rax + 0xc]
call rdi
cmp eax, 0x102
jne 0x1400045bc
lea r8, str.Timeout_expired_while_waiting_for_another_pending_installation___aborting
mov ecx, 2
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov ebx, 0xfffffff7
jmp 0x140004ea0
lea r8, str.CMP_WaitNoPendingInstallEvents_not_available
xor ecx, ecx
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov qword [rsp + 0x38], rbx
lea rcx, str..pipelibwdi_installer
mov eax, 0x1000
mov dword [rsp + 0x30], ebx
mov edi, 1
mov dword [rsp + 0x28], eax
mov r9d, edi
mov dword [rsp + 0x20], eax
mov edx, 0x40000003
lea r8d, [rdi + 5]
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov qword [0x1403ae528], rax
cmp rax, 0xffffffffffffffff
jne 0x140004625
xor ecx, ecx
call fcn.140007e4c
lea r8, str.Could_not_create_read_pipe:__s
lea ecx, [rdi + 2]
lea rdx, str.install_driver_internal
mov r9, rax
call fcn.1400082ac
mov ebx, r15d
jmp 0x140004ea0
xor edx, edx
lea rcx, [rbp - 0x60]
lea r8d, [rdx + 0x20]
call fcn.14000d540
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x14000461d
cmp dword [0x1403bca28], ebx
mov edi, 3
mov qword [rbp - 0x48], rax
lea rax, [0x140387600]
jne 0x1400046fd
lea r9, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
lea r8, str.__sinstaller_x_s.exe_
mov rdx, rsi
lea rcx, [rbp + 0x300]
call fcn.1400031e0
mov r9, qword [r14 + 0x10]
lea r8, str.__s_
mov rdx, rsi
mov byte [rbp + 0x403], bl
lea rcx, [rbp + 0xe0]
call fcn.1400031e0
mov byte [rbp + 0x1e3], bl
lea rcx, [rbp + 0x300]
call fcn.1400052f0
mov r14d, 0x22
mov rsi, rax
cmp word [rax], r14w
jne 0x1400048f6
mov rcx, rax
call fcn.14001a758
cmp word [rsi + rax*2 - 2], r14w
jne 0x1400048f6
mov rcx, rsi
call fcn.14001a758
lea rcx, [rsi + 2]
mov word [rsi + rax*2 - 2], bx
jmp 0x1400048f9
lea rcx, str._amd64
call fcn.14001ad10
lea rcx, [rbp + 0x1f0]
mov rbx, rax
call fcn.14001ad10
mov r13d, 0x103
mov ecx, r13d
sub rcx, rax
lea rax, [rbx + 1]
cmp rax, rcx
jae 0x14000473f
lea rcx, str._amd64
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x140004751
lea rcx, [rbp + 0x1f0]
call fcn.14001ad10
mov r8, r13
sub r8, rax
lea rdx, str._amd64
lea rcx, [rbp + 0x1f0]
call fcn.14001add0
lea r9, [rbp + 0x1f0]
mov rdx, rsi
lea r8, str.__sinstall_filter.exe_
lea rcx, [rbp + 0x300]
call fcn.1400031e0
mov rax, qword [0x1403bca20]
lea rcx, str._NULL_
xor ebx, ebx
lea rdx, str.libusb0
mov byte [rbp + 0x403], bl
cmp qword [rax + 0x40], rbx
cmovne rcx, qword [rax + 0x40]
call fcn.14001ac28
lea r13, str.uninstall__d
test eax, eax
je 0x1400047be
lea r13, str.install__d
mov rcx, r13
call fcn.14001ad10
inc rax
cmp rax, rsi
jae 0x1400047dc
mov rcx, r13
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x1400047df
mov r8, rsi
mov rdx, r13
lea rcx, [rbp + 0xe0]
call fcn.14000d0e0
mov rcx, r13
call fcn.14001ad10
inc rax
cmp rax, rsi
jae 0x140004812
mov rcx, r13
call fcn.14001ad10
lea rcx, [rbp + 0xe0]
add rcx, rax
jmp 0x140004819
lea rcx, [rbp + 0x1e3]
mov rax, qword [r14]
mov byte [rcx], bl
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x14000482f
call fcn.14001ad10
mov rbx, rax
lea rcx, [rbp + 0xe0]
call fcn.14001ad10
mov esi, 0x103
mov ecx, esi
sub rcx, rax
lea rax, [rbx + 1]
cmp rax, rcx
jae 0x14000486b
mov rax, qword [r14]
xor ebx, ebx
mov rcx, qword [rax + 0x30]
test rcx, rcx
jne 0x140004860
mov eax, ebx
jmp 0x140004865
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x14000487f
lea rcx, [rbp + 0xe0]
call fcn.14001ad10
mov r8, rsi
sub r8, rax
xor ebx, ebx
mov rdx, qword [r14]
lea rcx, [rbp + 0xe0]
mov rdx, qword [rdx + 0x30]
call fcn.14001add0
mov qword [rsp + 0x30], rbx
lea r9, [rsp + 0x70]
mov dword [rsp + 0x28], 0x40000080
lea rcx, str..pipelibwdi_installer
mov edx, 0x40000000
mov dword [rsp + 0x20], edi
mov r8d, 2
mov dword [rsp + 0x70], 0x18
mov dword [rbp - 0x80], 1
mov qword [rsp + 0x78], rbx
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x1400046b4
xor ecx, ecx
call fcn.140007e4c
lea r8, str.Could_not_create_stdout_endpoint:__s
mov ecx, edi
jmp 0x14000460e
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r14d, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rsi
mov ebx, eax
call fcn.14001b038
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp r14d, 0xffffffff
jne 0x140004962
lea r9, [0x140387600]
mov ecx, edi
lea r8, str.This_application_does_not_contain_the_required__s_bit_installer
lea rdx, str.install_driver_internal
call fcn.1400082ac
lea r9, [0x140387600]
mov ecx, edi
lea r8, str.Please_contact_the_application_provider_for_a__s_bit_compatible_version
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov ebx, 0xfffffffb
jmp 0x140004ea0
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
xor esi, esi
test eax, eax
je 0x140004a67
cmp dword [0x1403bca28], esi
lea rax, str.runas
mov qword [rbp - 0x30], rax
lea rcx, str.install_filter.exe
lea rax, str.installer_x64.exe
mov dword [rbp - 0x40], 0x70
cmovne rax, rcx
mov dword [rbp - 0x3c], 0x40
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x40]
lea rax, [rbp + 0xe0]
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x20], rax
lea rax, [rbp + 0x1f0]
mov qword [rbp - 0x18], rax
mov qword [rbp + 8], rsi
mov dword [rbp - 0x10], esi
mov qword [rbp - 8], rsi
call fcn.14000309c
test eax, eax
jne 0x140004a57
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140004a57
cmp eax, 2
je 0x140004a3a
cmp eax, 0x4c7
je 0x140004a18
mov ecx, eax
call fcn.140007e4c
lea r8, str.ShellExecuteEx_failed:__s
mov r9, rax
lea rdx, str.install_driver_internal
mov ecx, edi
call fcn.1400082ac
mov ebx, 0xfffffff1
jmp 0x140004ea0
lea r8, str.Operation_cancelled_by_the_user_or_due_to_missing_data
mov ecx, 1
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov ebx, 0xfffffff2
jmp 0x140004ea0
lea r8, str.Could_not_find_installer_executable
mov ecx, 1
lea rdx, str.install_driver_internal
call fcn.1400082ac
jmp 0x140004958
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0xa8], rax
jmp 0x140004bf4
mov ebx, 0x68
lea rcx, [rbp + 0x30]
mov r8d, ebx
xor edx, edx
call fcn.14000d540
cmp dword [0x1403bca28], esi
mov dword [rbp + 0x30], ebx
je 0x140004aac
mov ecx, 0xfffffff6
mov dword [rbp + 0x6c], 0x100
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
xor edx, edx
lea rcx, [rbp - 0x78]
lea r8d, [rdx + 0x18]
call fcn.14000d540
lea r14, [0x14038600c]
mov rcx, r14
call fcn.14001ad10
lea rcx, [rbp + 0x300]
mov rbx, rax
call fcn.14001ad10
lea rdx, [rbx + 1]
mov ebx, 0x103
mov ecx, ebx
sub rcx, rax
cmp rdx, rcx
jae 0x140004afa
mov rcx, r14
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x140004b0c
lea rcx, [rbp + 0x300]
call fcn.14001ad10
mov r8, rbx
sub r8, rax
mov rdx, r14
lea rcx, [rbp + 0x300]
call fcn.14001add0
lea rcx, [rbp + 0xe0]
call fcn.14001ad10
lea rcx, [rbp + 0x300]
mov rbx, rax
call fcn.14001ad10
lea rdx, [rbx + 1]
mov ebx, 0x103
mov ecx, ebx
sub rcx, rax
cmp rdx, rcx
jae 0x140004b5b
lea rcx, [rbp + 0xe0]
call fcn.14001ad10
lea r8, [rax + 1]
jmp 0x140004b6d
lea rcx, [rbp + 0x300]
call fcn.14001ad10
mov r8, rbx
sub r8, rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x300]
call fcn.14001add0
lea rax, [rbp - 0x78]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x300]
lea rax, [rbp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
call fcn.140002198
test eax, eax
jne 0x140004bde
xor ecx, ecx
call fcn.140007e4c
lea r8, str.CreateProcess_failed:__s
jmp 0x1400049fd
mov rax, qword [rbp - 0x78]
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0xb0], rax
mov ecx, 0x200
mov ebx, esi
call fcn.14001b04c
mov r12, rax
test rax, rax
jne 0x140004c22
lea r8, str.Unable_to_allocate_buffer:_aborting
lea rdx, str.install_driver_internal
mov ecx, edi
call fcn.1400082ac
jmp 0x14000461d
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x68]
mov rcx, qword [0x1403ae528]
mov r8d, eax
mov r14d, eax
mov edx, esi
lea rax, [rbp - 0x60]
sub r8d, esi
add rdx, r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
test eax, eax
je 0x140004c6b
mov edx, dword [rsp + 0x68]
mov esi, ecx
mov rcx, r12
call fcn.140004f9c
mov ebx, eax
jmp 0x140004de5
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 0x6d
je 0x140004e20
sub eax, 0x7d
je 0x140004da6
sub eax, 0x12e
je 0x140004d96
cmp eax, 0x1cd
je 0x140004cb9
xor ecx, ecx
call fcn.140007e4c
lea r8, str.Could_not_read_from_pipe__sync_:__s
mov r9, rax
lea rdx, str.install_driver_internal
mov ecx, edi
call fcn.1400082ac
jmp 0x140004c22
mov r9d, dword [0x1403ae520]
lea rdx, [rbp + 0xa0]
xor r8d, r8d
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x140004cfc
sub eax, 1
je 0x140004e49
cmp eax, 0x101
je 0x140004df2
xor ecx, ecx
call fcn.140007e4c
lea r8, str.Could_not_read_from_pipe__wait_:__s
jmp 0x140004ca3
mov rcx, qword [0x1403ae528]
lea r8, [rsp + 0x68]
xor r9d, r9d
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x140004d2e
mov edx, dword [rsp + 0x68]
mov rcx, r12
call fcn.140004f9c
mov ebx, eax
xor esi, esi
jmp 0x140004de5
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 0x6d
je 0x140004e20
cmp eax, 0x7d
je 0x140004d55
xor ecx, ecx
call fcn.140007e4c
lea r8, str.Could_not_read_from_pipe__async_:__s
jmp 0x140004ca3
mov rax, qword [rsp + 0x60]
lea r8, str.Message_overflow__async____increasing_buffer_size_to__d_bytes
add eax, eax
lea rdx, str.install_driver_internal
mov esi, eax
mov r9d, eax
xor ecx, ecx
mov qword [rsp + 0x60], rsi
call fcn.1400082ac
mov edx, esi
mov rcx, r12
call fcn.14001b054
test rax, rax
jne 0x140004ddf
lea r8, str.Unable_to_realloc_buffer:_aborting
jmp 0x140004c0f
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004c22
mov rax, qword [rsp + 0x60]
lea r8, str.message_overflow__sync____increasing_buffer_size_to__d_bytes
add eax, eax
lea rdx, str.install_driver_internal
mov esi, eax
mov r9d, eax
xor ecx, ecx
mov qword [rsp + 0x60], rsi
call fcn.1400082ac
mov edx, esi
mov rcx, r12
call fcn.14001b054
test rax, rax
je 0x140004e77
mov esi, r14d
mov r12, rax
test ebx, ebx
jne 0x140004ea0
jmp 0x140004c22
lea r8, str.Installer_failed_to_respond___aborting
mov ecx, edi
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov rcx, qword [rbp + 0xa8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ebx, 0xfffffff9
jmp 0x140004ea0
mov edx, dword [0x1403ae520]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140004e49
mov rcx, qword [rbp + 0xa8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rbp + 0xa8]
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov eax, dword [rsp + 0x60]
mov ecx, 0xffffff9d
cmp eax, 0x103
lea ebx, [rcx + 0x5c]
cmove ecx, ebx
neg eax
sbb ebx, ebx
and ebx, ecx
jmp 0x140004ea0
lea r8, str.unable_to_realloc_buffer:_aborting
jmp 0x140004c0f
lea r8, str.One_of_the_required_parameter_is_NULL
mov ecx, 3
lea rdx, str.install_driver_internal
call fcn.1400082ac
mov ebx, 0xfffffffe
mov rsi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
call fcn.140008894
mov rcx, rax
call qword [sym.imp.USER32.dll_DestroyWindow]
xor eax, eax
mov rcx, r12
mov qword [0x1403bca20], rax
call fcn.14001b038
mov rcx, qword [rbp + 0xb0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140004ee8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [rbp + 0xb0], 0xffffffffffffffff
mov rcx, qword [rbp + 0xa8]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140004f07
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [rbp + 0xa8], 0xffffffffffffffff
mov rcx, qword [rbp + 0xa0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140004f26
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [rbp + 0xa0], 0xffffffffffffffff
mov rcx, qword [0x1403ae528]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140004f45
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or qword [0x1403ae528], 0xffffffffffffffff
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140004f58
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov rcx, qword [rbp + 0x410]
xor rcx, rsp
call fcn.14000c340
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret