Function at 0x1400d81f0
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Connect pipe
Create mailslot
Create pipe
Read file via mapping

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x298
lea rcx, [rax + 0x20]
call fcn.14005ac48
lea rcx, [rsp + 0x2f8]
call fcn.14005ac38
xor esi, esi
cmp eax, esi
jne 0x1400d8236
lea eax, [rsi + 1]
jmp 0x1400d9fe9
lea rcx, [rsp + 0x2f8]
call fcn.14005af1c
lea rcx, [rsp + 0xb0]
call fcn.140061510
lea rcx, [rsp + 0xd0]
call fcn.140061510
lea rcx, [rsp + 0xc0]
call fcn.140061510
lea rcx, [rsp + 0xc8]
call fcn.140061510
mov r13d, 2
lea rcx, [rsp + 0x2e8]
lea r15d, [r13 - 1]
mov rbx, rsi
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x90], rsi
mov dword [rsp + 0x70], 6
mov byte [rsp + 0x2f8], sil
mov ebp, r15d
mov dword [rsp + 0x80], r15d
mov dword [rsp + 0x58], r15d
mov byte [rsp + 0x60], sil
mov byte [rsp + 0x63], sil
mov r14b, sil
mov byte [rsp + 0x41], sil
mov r12, rsi
call fcn.140058d58
mov rdi, qword [rsp + 0x2e8]
lea edx, [r13 + 0x2b]
mov r11b, sil
mov byte [rsp + 0x40], sil
mov dword [rsp + 0x78], 3
lea r8d, [r13 + 2]
lea ecx, [rdx - 3]
cmp dx, word [rdi]
jne 0x1400d868e
lea ebx, [rdx - 0x26]
cmp dx, word [rdi + 2]
jne 0x1400d8686
lea rcx, str.__gethostbyname
mov r8d, 0xf
mov rdx, rdi
call fcn.14005a400
cmp al, sil
je 0x1400d83cb
add rdi, 0x1e
mov ecx, 9
mov qword [rsp + 0x2e8], rdi
movzx eax, word [rdi]
cmp ax, si
je 0x1400d835c
cmp cx, ax
ja 0x1400d834e
cmp ax, 0xd
jbe 0x1400d835c
mov r8d, 0x20
cmp r8w, ax
jne 0x1400d836a
jmp 0x1400d8362
mov r8d, 0x20
mov r11b, r15b
mov byte [rsp + 0x40], r15b
cmp ax, si
je 0x1400d8658
mov edx, 0x2a
lea ebp, [rdx - 7]
lea r14d, [rdx - 0x26]
cmp cx, ax
ja 0x1400d838a
cmp ax, 0xd
jbe 0x1400d83b5
cmp r8w, ax
je 0x1400d83b5
cmp dx, ax
jne 0x1400d839a
or r11b, r13b
jmp 0x1400d83a2
cmp bp, ax
jne 0x1400d83a2
or r11b, r14b
add rdi, r13
mov qword [rsp + 0x2e8], rdi
mov ax, word [rdi]
cmp ax, si
jne 0x1400d837f
mov ebp, dword [rsp + 0x80]
mov r14b, byte [rsp + 0x41]
mov byte [rsp + 0x40], r11b
jmp 0x1400d8658
mov edi, dword [rsp + 0x70]
lea rdx, [rsp + 0x2e8]
lea rcx, str.__file
mov r8d, edi
call fcn.140063f6c
cmp al, sil
je 0x1400d83fe
or ebp, 0xffffffff
mov dword [rsp + 0x80], ebp
mov dword [rsp + 0x58], ebp
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, str.__shm
mov r8d, 5
call fcn.140063f6c
cmp al, sil
je 0x1400d8424
mov ebp, 0xfffffffe
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__event
mov r8d, ebx
call fcn.140063f6c
cmp al, sil
je 0x1400d8447
mov ebp, 0xfffffffc
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__semaphore
mov r8d, 0xb
call fcn.140063f6c
cmp al, sil
je 0x1400d846d
mov ebp, 0xffffffe0
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__sem
mov r8d, 5
call fcn.140063f6c
cmp al, sil
jne 0x1400d8466
lea rdx, [rsp + 0x2e8]
lea rcx, str.__mutex
mov r8d, ebx
call fcn.140063f6c
cmp al, sil
je 0x1400d84b2
mov ebp, 0xffffffc0
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__mailslot
mov r8d, 0xa
call fcn.140063f6c
cmp al, sil
je 0x1400d84db
mov ebp, 0xfffffff8
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__pipe
mov r8d, edi
call fcn.140063f6c
cmp al, sil
je 0x1400d8501
mov ebp, 0xfffffff0
jmp 0x1400d83ee
lea rdx, [rsp + 0x2e8]
lea rcx, str.__exist
mov r8d, ebx
call fcn.140063f6c
cmp al, sil
je 0x1400d852a
mov byte [rsp + 0x2f8], r15b
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, str.__only
mov r8d, edi
call fcn.140063f6c
cmp al, sil
je 0x1400d8550
mov byte [rsp + 0x60], r15b
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, str.__unknown
mov r8d, 9
call fcn.140063f6c
cmp al, sil
je 0x1400d857a
mov r12d, 3
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, str.__BSTRVT
mov r8d, 8
call fcn.140063f6c
cmp al, sil
je 0x1400d85a4
mov r12d, 0x102
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, str.__BSTRVT
mov r8d, edi
call fcn.140063f6c
cmp al, sil
je 0x1400d85cb
mov r12d, 0x100
jmp 0x1400d8665
lea rdx, [rsp + 0x2e8]
lea rcx, [0x14011f4a0]
mov r8d, 3
call fcn.140063f6c
cmp al, sil
je 0x1400d85f7
mov r8d, 4
mov byte [rsp + 0x63], r8b
jmp 0x1400d866b
lea rdx, [rsp + 0x2e8]
lea rcx, str.__reset
mov r8d, ebx
call fcn.140063f6c
cmp al, sil
je 0x1400d861d
mov r14b, r15b
mov byte [rsp + 0x41], r15b
jmp 0x1400d8665
mov rcx, qword [rsp + 0x2e8]
movzx eax, word [rcx]
cmp ax, si
je 0x1400d8658
mov edx, 9
lea edi, [rdx + 0x17]
cmp dx, ax
ja 0x1400d8640
cmp ax, 0xd
jbe 0x1400d8658
cmp di, ax
je 0x1400d8658
add rcx, r13
mov qword [rsp + 0x2e8], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x1400d8635
lea rcx, [rsp + 0x2e8]
call fcn.140058d58
mov r8d, 4
mov rdi, qword [rsp + 0x2e8]
mov r11b, byte [rsp + 0x40]
mov edx, 0x2d
cmp dx, word [rdi]
je 0x1400d8302
mov rbx, rsi
mov ecx, 0x2a
mov byte [rsp + 0x62], sil
cmp cx, word [rdi]
jne 0x1400d86bd
add rdi, r13
lea rcx, [rsp + 0x2e8]
mov byte [rsp + 0x62], r15b
mov qword [rsp + 0x2e8], rdi
call fcn.140058d58
mov rdi, qword [rsp + 0x2e8]
mov rax, qword [rsp + 0x2e0]
or dword [rsp + 0x88], 0xffffffff
mov byte [rsp + 0x41], sil
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0xe8], rax
mov eax, 0x3a
mov dword [rsp + 0xa0], 0x100000
mov dword [rsp + 0x68], 0x80000001
cmp ax, word [rdi]
jne 0x1400d8740
cmp ax, word [rdi + 2]
jne 0x1400d8740
lea rax, [0x1401310e0]
add rdi, r8
mov byte [rsp + 0x41], r15b
mov qword [rsp + 0xd8], rax
mov rax, qword [0x140131120]
mov qword [rsp + 0x2e8], rdi
mov qword [rsp + 0xe8], rax
mov rdi, qword [rsp + 0x2e0]
mov ecx, 0x3b
lea r8, [rsp + 0xb0]
lea eax, [rcx - 0xf]
mov word [rsp + 0x20], cx
lea rdx, [rsp + 0x2e8]
mov r9d, eax
mov rcx, rdi
call fcn.140052520
cmp r12, rsi
je 0x1400d892b
bt r12, 8
mov rdi, qword [rsp + 0xb0]
mov rbp, rsi
mov qword [rsp + 0x2f8], rsi
jae 0x1400d88a5
cmp r14b, sil
je 0x1400d87e6
call fcn.14005f650
lea rcx, [rsp + 0x50]
call fcn.140058d88
lea rcx, [rsp + 0xc8]
call fcn.140058d88
lea rcx, [rsp + 0xc0]
call fcn.140058d88
lea rcx, [rsp + 0xd0]
call fcn.140058d88
lea rcx, [rsp + 0xb0]
call fcn.140058d88
xor eax, eax
jmp 0x1400d9fe9
cmp word [rdi], si
movzx ebx, byte [rsp + 0x63]
mov eax, 0xfffffffd
cmove ebx, eax
mov rax, qword [rsp + 0x2e8]
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400d881b
cmp r12b, sil
jne 0x1400d8810
or r12, r15
add rax, r13
mov qword [rsp + 0x2e8], rax
mov ecx, 0x2c
cmp cx, word [rax]
je 0x1400d882a
cmp bl, sil
jge 0x1400d88a5
call fcn.14005f6a0
call fcn.1400037fc
cmp bl, sil
jl 0x1400d87a1
mov rax, qword [rsp + 0x2e8]
mov qword [rsp + 0x2f8], rsi
add rax, r13
cmp bl, sil
mov qword [rsp + 0x2e8], rax
jle 0x1400d887d
mov rcx, qword [rsp + 0x2e0]
lea r8, [rsp + 0x2f8]
mov rdx, rax
call fcn.140028258
mov qword [rsp + 0x2e8], rax
cmp rax, rsi
je 0x1400d888e
mov rcx, rax
call qword [0x140130978]
mov rbp, rax
lea rcx, [rsp + 0x2f8]
call fcn.140058d88
mov rdi, qword [rsp + 0xb0]
jmp 0x1400d88c2
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x2e8]
call fcn.140065afc
mov rbp, qword [rsp + 0x2f8]
cmp word [rdi], si
je 0x1400d88e2
mov rcx, qword [rsp + 0x2e0]
mov r9, r12
mov r8, rdi
mov rdx, rbp
call fcn.14003ea48
cmp rax, rsi
jne 0x1400d88e5
mov esi, r15d
lea rcx, [rsp + 0x50]
call fcn.140058d88
lea rcx, [rsp + 0xc8]
call fcn.140058d88
lea rcx, [rsp + 0xc0]
call fcn.140058d88
lea rcx, [rsp + 0xd0]
call fcn.140058d88
lea rcx, [rsp + 0xb0]
call fcn.140058d88
movsxd rax, esi
jmp 0x1400d9fe9
mov r14b, sil
mov r10d, 0xffdf
mov r11d, 0x57
cmp ebp, 0xfffffffe
jne 0x1400d8993
mov rcx, qword [rsp + 0x2e8]
movzx eax, word [rcx]
and ax, r10w
cmp r11w, ax
jne 0x1400d8962
add rcx, r13
mov r14b, r15b
mov qword [rsp + 0x2e8], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400d89aa
mov edx, 0x2c
lea r8d, [rdx + 0xf]
add rcx, r13
mov qword [rsp + 0x2e8], rcx
cmp dx, ax
je 0x1400d89aa
cmp r8w, ax
je 0x1400d89aa
mov ax, word [rcx]
cmp ax, si
jne 0x1400d8973
jmp 0x1400d89aa
cmp ebp, 0xfffffffc
je 0x1400d89a2
cmp ebp, 0xffffffe0
je 0x1400d89a2
cmp ebp, 0xffffffc0
jne 0x1400d8a05
mov rcx, qword [rsp + 0x2e8]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x1400d89e7
add rcx, r13
lea rdx, str.Local_
mov qword [rsp + 0x2e8], rcx
or r12, 0xffffffffffffffff
lea rcx, [rsp + 0x50]
mov r8, r12
mov r9, r12
call fcn.1400616cc
mov r10d, 0xffdf
lea r11d, [r12 + 0x58]
jmp 0x1400d8a09
mov eax, 0x23
cmp ax, word [rcx]
jne 0x1400d89fc
add rcx, r13
mov qword [rsp + 0x2e8], rcx
lea rdx, [0x14011f1d8]
jmp 0x1400d89c6
or r12, 0xffffffffffffffff
cmp byte [rsp + 0x40], sil
je 0x1400d8cac
lea rcx, [rsp + 0x80]
call fcn.140061510
mov eax, 0x3b
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x2e8]
lea r9d, [rax - 0xf]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x80]
mov eax, 4
lea rcx, [rsp + 0x90]
mov r9, r12
mov r8, r12
mov r14d, esi
mov qword [rsp + 0x90], rsi
movzx ebx, ax
mov word [rsp + 0x60], ax
call fcn.14006144c
lea rcx, [rsp + 0x48]
call fcn.140061510
mov rdi, qword [rsp + 0x90]
mov dword [rsp + 0x70], esi
lea r12, [rsp + 0x70]
mov byte [rsp + 0x2f8], r15b
mov rbp, rsi
cmp rdi, rsi
je 0x1400d8af6
cmp byte [rdi], sil
je 0x1400d8ac0
mov rcx, rdi
call qword [0x140131550]
mov dword [rsp + 0x70], eax
cmp eax, 0xffffffff
jne 0x1400d8af6
mov dword [rsp + 0x70], esi
mov rcx, rdi
call qword [0x140131558]
cmp rax, rsi
je 0x1400d8af6
mov rbp, qword [rax + 0x18]
mov bx, word [rax + 0x12]
mov word [rsp + 0x60], bx
cmp qword [rbp], rsi
je 0x1400d8af6
mov al, byte [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov byte [rsp + 0x2f8], al
jmp 0x1400d8c5e
mov eax, 4
test byte [rsp + 0x40], al
je 0x1400d8bb2
lea eax, [r14 + 0x3e]
lea rcx, [rsp + 0x48]
movsxd rdx, eax
call fcn.140061610
mov rdi, qword [rsp + 0x48]
xor eax, eax
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], rax
movsx eax, bx
mov ecx, 0x20
movsxd r11, r14d
cmp eax, ecx
lea r15, [rdi + r11*2]
mov rdx, r12
cmova eax, ecx
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x2e8], r15
movsxd r8, eax
mov qword [rsp + 0xf0], rsi
call fcn.14001cecc
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x2e8]
lea r8, str.0x_08I64X
call fcn.1400dcf58
mov rcx, qword [rsp + 0x2e8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, qword [rsp + 0x2e8]
lea rdx, [rax + rcx*2]
mov qword [rsp + 0x2e8], rdx
jmp 0x1400d8c3a
movsx ebx, bx
lea eax, [rbx + rbx*2]
lea ecx, [r14 + rax*2]
movsxd rdx, ecx
lea rcx, [rsp + 0x48]
call fcn.140061610
mov rdi, qword [rsp + 0x48]
movsxd r11, r14d
lea rax, [rdi + r11*2]
dec ebx
cmp ebx, esi
lea rdx, [rax + 2]
mov qword [rsp + 0x2e8], rax
mov r15, rax
jl 0x1400d8c2f
movzx r8d, byte [r12]
lea rdx, [0x14011f490]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, qword [rsp + 0x2e8]
inc r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
sub ebx, 1
movsxd rcx, eax
mov rax, qword [rsp + 0x2e8]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x2e8], rax
mov rdx, rax
jns 0x1400d8bea
mov bx, word [rsp + 0x60]
sub rdx, r13
mov word [rdx], si
test byte [rsp + 0x2f8], r13b
je 0x1400d8c70
cmp qword [rbp], rsi
je 0x1400d8c70
mov eax, 0x20
mov word [rdx], ax
sub rdx, r15
add rdx, r13
sar rdx, 1
add r14d, edx
mov r12, qword [rbp]
cmp r12, rsi
je 0x1400d8c70
add rbp, 8
jmp 0x1400d8af6
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x2e0]
mov r8, rdi
call fcn.140060828
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x90]
call fcn.140058d88
lea rcx, [rsp + 0x80]
jmp 0x1400d8f14
or r12, 0xffffffffffffffff
mov qword [rsp + 0xe0], rsi
cmp ebp, r12d
jne 0x1400d8f8c
mov rcx, qword [rsp + 0x2e8]
mov ebp, 0x80000000
mov edx, esi
movzx eax, word [rcx]
and ax, r10w
cmp r11w, ax
jne 0x1400d8cf4
add rcx, r13
mov ebp, 0xc0000000
lea r14d, [r12 + 5]
mov qword [rsp + 0x2e8], rcx
jmp 0x1400d8cf9
mov r14d, dword [rsp + 0x78]
movzx eax, word [rcx]
mov r8d, 0x45
and ax, r10w
cmp r8w, ax
jne 0x1400d8d1b
add rcx, r13
lea r14d, [r8 - 0x42]
mov qword [rsp + 0x2e8], rcx
mov eax, 0x2d
cmp ax, word [rcx]
jne 0x1400d8d38
add rcx, r13
mov r12d, esi
mov edx, r15d
mov qword [rsp + 0x2e8], rcx
jmp 0x1400d8d3e
mov r12d, 7
movzx eax, word [rcx]
movsxd rdx, edx
cmp ax, si
je 0x1400d8db2
mov edi, 0x3b
lea ebx, [rdi - 0x37]
lea r9d, [rdi - 0xf]
add rcx, r13
mov qword [rsp + 0x2e8], rcx
cmp r9w, ax
je 0x1400d8da7
cmp di, ax
je 0x1400d8da7
and ax, r10w
cmp rdx, rsi
je 0x1400d8d9f
mov r8d, 0x52
cmp r8w, ax
jne 0x1400d8d85
or r12d, r15d
jmp 0x1400d8d9f
cmp r11w, ax
jne 0x1400d8d90
or r12d, r13d
jmp 0x1400d8d9f
mov r8d, 0x44
cmp r8w, ax
jne 0x1400d8d9f
or r12d, ebx
mov ax, word [rcx]
cmp ax, si
jne 0x1400d8d55
mov rdi, qword [rsp + 0x2e0]
mov rbx, rsi
lea rcx, [rsp + 0x98]
call fcn.140061510
mov eax, 0x3b
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x2e8]
lea r9d, [rax - 0xf]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rcx, qword [rsp + 0x98]
call fcn.14001b428
mov rdi, rax
cmp word [rax], si
jne 0x1400d8e21
lea rcx, [rsp + 0x98]
call fcn.140058d88
cmp byte [rsp + 0x2f8], sil
jne 0x1400d9d49
mov rsi, 0xffffffff80070057
jmp 0x1400d9fa8
cmp r14d, 3
jne 0x1400d8eaf
cmp r12d, esi
je 0x1400d8eaf
lea eax, [r14 + 0x59]
cmp ax, word [rdi]
jne 0x1400d8e8b
cmp ax, word [rdi + 2]
jne 0x1400d8e8b
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0xa8]
xor r9d, r9d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003764
mov rcx, qword [rsp + 0xa8]
cmp rcx, rsi
je 0x1400d8ee3
cmp rcx, 0xffffffffffffffff
je 0x1400d8eaf
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400d8eaf
mov rcx, rdi
call fcn.1400f6bf0
movabs rcx, 0x100000010
and rax, rcx
movabs rcx, 0x100000000
cmp rax, rcx
jne 0x1400d8ee3
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0xa8]
mov r9d, r12d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003764
mov rbx, rax
cmp byte [rsp + 0x2f8], sil
je 0x1400d8eff
lea rcx, [rsp + 0x98]
call fcn.140058d88
jmp 0x1400d9d36
cmp rbx, rsi
jne 0x1400d8f1e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x98]
mov esi, eax
call fcn.140058d88
jmp 0x1400d9fa8
lea rcx, [rsp + 0x98]
call fcn.140058d88
mov ebp, dword [rsp + 0x80]
mov r12, qword [rsp + 0xe8]
mov dil, byte [rsp + 0x41]
mov r14, qword [rsp + 0xd8]
cmp r12, rsi
jne 0x1400d9ee7
mov al, dil
mov rcx, r14
neg al
sbb rdx, rdx
and rdx, qword [rsp + 0x2e0]
call fcn.14001a9b4
mov r12, qword [r14 + 0x40]
cmp r12, rsi
jne 0x1400d9ee7
cmp rbx, rsi
je 0x1400d8e15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400d8e15
cmp ebp, 0xfffffffe
jne 0x1400d94c8
lea ecx, [rbp + 6]
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0xa0], 0x80000000
mov dword [rsp + 0x68], esi
mov rdi, rsi
mov qword [rsp + 0xa8], rsi
mov r15d, ecx
mov qword [rsp + 0x90], rsi
mov r12, rsi
mov qword [rsp + 0x98], rsi
mov rbp, rsi
cmp r14b, sil
je 0x1400d8fed
mov r15d, dword [rsp + 0x70]
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0xa0], 0xc0000000
mov dword [rsp + 0x78], ecx
lea rcx, [rsp + 0x48]
call fcn.140061510
lea rcx, [rsp + 0xb8]
call fcn.140061510
mov rbx, qword [rsp + 0x2e0]
mov r14d, 0x2c
lea eax, [r14 + 0xf]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x2e8]
mov r9d, r14d
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x2e8]
cmp word [rdx], si
je 0x1400d90db
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2e8]
call fcn.140070e78
mov rdx, qword [rsp + 0x2e8]
cmp word [rdx], si
je 0x1400d90d1
add rdx, r13
lea eax, [r14 + 0xf]
lea r8, [rsp + 0xb8]
mov qword [rsp + 0x2e8], rdx
lea rdx, [rsp + 0x2e8]
mov r9d, r14d
mov rcx, rbx
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x2e8]
cmp word [rdx], si
je 0x1400d90d1
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x2e8]
call fcn.140070e78
mov rdx, qword [rsp + 0x2e8]
mov rbx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xa8]
jmp 0x1400d90de
mov rbx, qword [rsp + 0x90]
jmp 0x1400d90de
mov rbx, rsi
mov rax, qword [rsp + 0x48]
cmp word [rax], si
je 0x1400d94ac
cmp rbx, rsi
jl 0x1400d94ac
cmp rdi, rsi
jl 0x1400d94ac
cmp word [rdx], si
je 0x1400d9167
add rdx, r13
lea rcx, [rsp + 0x2e8]
mov qword [rsp + 0x2e8], rdx
lea rdx, [rsp + 0x98]
call fcn.1400078b4
mov rcx, qword [rsp + 0x2e8]
cmp eax, esi
mov dword [rsp + 0x68], eax
cmovg rbp, rbx
mov qword [rsp + 0x90], rbp
cmp word [rcx], si
je 0x1400d915f
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2e8]
call fcn.1400078b4
mov rbp, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
lea rdx, str.pecmd2012.shm.
lea rcx, [rsp + 0x50]
or r14, 0xffffffffffffffff
mov r13, rsi
call fcn.14006164c
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov rdx, qword [rsp + 0xb8]
movzx edx, word [rdx]
movzx eax, dx
neg ax
sbb eax, eax
not eax
and eax, 8
neg dx
sbb ecx, ecx
mov dword [rsp + 0x88], eax
xor edx, edx
not ecx
and ecx, 4
add eax, ecx
mov dword [rsp + 0x98], ecx
mov ecx, r15d
cdqe
add rbx, rax
mov qword [rsp + 0x128], rax
lea rax, [rbx + rdi]
mov rdi, qword [rsp + 0x50]
mov qword [rsp + 0x90], rbx
mov r8, rdi
mov qword [rsp + 0x130], rax
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, esi
cmp byte [rsp + 0x2f8], sil
je 0x1400d922a
lea rcx, [rsp + 0xb8]
call fcn.140058d88
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea r15d, [r14 + 2]
jmp 0x1400d9d36
cmp rbx, rsi
jne 0x1400d9345
mov rcx, qword [rsp + 0xb8]
cmp word [rcx], si
je 0x1400d92a8
call fcn.14001b428
mov ecx, dword [rsp + 0x78]
mov r8d, dword [rsp + 0xa0]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ecx
lea rcx, [rsp + 0x2f8]
mov r9d, 7
mov rdx, rax
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003764
mov r14, rax
cmp rax, rsi
jne 0x1400d92a8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xb8]
mov esi, eax
call fcn.140058d88
lea rcx, [rsp + 0x48]
jmp 0x1400d8f14
xor edx, edx
lea rcx, [rsp + 0x1e9]
mov byte [rsp + 0x1e8], sil
lea r8d, [rdx + 0x27]
call fcn.1400f78a0
lea rax, [rsp + 0x1e8]
lea rcx, [rsp + 0x188]
mov qword [rsp + 0x188], rax
mov dword [rsp + 0x180], 0x18
mov dword [rsp + 0x190], esi
call fcn.14005c3c8
mov rax, qword [rsp + 0x130]
mov r8d, dword [rsp + 0x58]
mov r9, rax
lea rdx, [rsp + 0x180]
mov rcx, r14
shr r9, 0x20
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x90]
cmp rbp, rsi
mov r15d, 1
cmovle rbp, rdi
cmp rbx, rsi
je 0x1400d937e
jmp 0x1400d934d
mov rdi, qword [rsp + 0x90]
mov rdx, qword [rsp + 0xa8]
mov ecx, dword [rsp + 0x58]
mov qword [rsp + 0x20], rdi
and ecx, 4
mov r8, rdx
mov r9d, edx
or ecx, 8
sar r8, 0x20
shr ecx, 1
mov edx, ecx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
cmp r14, 0xffffffffffffffff
je 0x1400d938d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13, rsi
jne 0x1400d93b3
cmp rbx, rsi
je 0x1400d9289
cmp rbx, 0xffffffffffffffff
je 0x1400d9289
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400d9289
sub rdi, qword [rsp + 0x128]
mov eax, dword [rsp + 0x88]
mov qword [rsp + 0x90], rdi
cmp r15d, esi
je 0x1400d93d7
cmp eax, esi
je 0x1400d93d7
mov qword [r13], rdi
cdqe
add r13, rax
cmp r15d, esi
je 0x1400d9495
movsxd rax, dword [rsp + 0x98]
cmp eax, esi
je 0x1400d93ff
lea rcx, [rdi + r13]
mov r8, rax
xor edx, edx
call fcn.1400f78a0
cmp r15d, esi
je 0x1400d9495
cmp dword [rsp + 0x68], esi
jle 0x1400d9495
cmp rbp, rsi
jle 0x1400d9495
cmp r13, rsi
je 0x1400d9495
movabs rcx, 0x100000000
cmp r12, rcx
jb 0x1400d9444
shr rbp, 3
sub rbp, 1
js 0x1400d9495
lea rcx, [rbp + 1]
mov rdi, r13
mov rax, r12
rep stosq qword [rdi], rax
jmp 0x1400d9495
cmp r12, 0x10000
jb 0x1400d9465
shr rbp, 2
sub rbp, 1
js 0x1400d9495
lea rcx, [rbp + 1]
mov eax, r12d
mov rdi, r13
rep stosd dword [rdi], eax
jmp 0x1400d9495
cmp r12, 0x100
jb 0x1400d9487
shr rbp, 1
sub rbp, 1
js 0x1400d9495
lea rcx, [rbp + 1]
movzx eax, r12w
mov rdi, r13
rep stosw word [rdi], ax
jmp 0x1400d9495
mov r8, rbp
mov edx, r12d
mov rcx, r13
call fcn.1400f78a0
lea rcx, [rsp + 0xb8]
call fcn.140058d88
lea rcx, [rsp + 0x48]
jmp 0x1400d8f26
lea rcx, [rsp + 0xb8]
call fcn.140058d88
lea rcx, [rsp + 0x48]
call fcn.140058d88
jmp 0x1400d8e15
cmp ebp, 0xfffffffc
jne 0x1400d9699
lea rcx, [rsp + 0xa0]
call fcn.140061510
lea rcx, [rsp + 0x48]
call fcn.140061510
lea eax, [rbp + 0x3f]
lea r9d, [rbp + 0x30]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x2e8]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0xa0]
cmp word [rdx], si
jne 0x1400d952d
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0xa0]
jmp 0x1400d94be
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x2e8]
mov dword [rsp + 0x78], esi
mov dword [rsp + 0x88], esi
mov dword [rsp + 0x68], esi
call fcn.140007890
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, str.pecmd2012.event.
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov dil, byte [rsp + 0x2f8]
cmp dil, sil
jne 0x1400d95ab
cmp dword [rsp + 0x78], esi
jne 0x1400d95e7
mov r8, qword [rsp + 0x50]
mov edx, dword [rsp + 0x68]
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov rbx, rax
cmp dil, sil
je 0x1400d95de
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0xa0]
jmp 0x1400d8ef5
cmp rax, rsi
jne 0x1400d9682
xor edx, edx
lea rcx, [rsp + 0x199]
mov byte [rsp + 0x198], sil
lea r8d, [rdx + 0x27]
call fcn.1400f78a0
lea rax, [rsp + 0x198]
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x140], rax
mov dword [rsp + 0x138], 0x18
mov dword [rsp + 0x148], esi
call fcn.14005c3c8
cmp dword [rsp + 0x78], esi
mov r9, qword [rsp + 0x50]
mov r8d, esi
setne r8b
cmp dword [rsp + 0x88], esi
mov edx, esi
lea rcx, [rsp + 0x138]
setne dl
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rbx, rax
cmp rax, rsi
jne 0x1400d9682
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x48]
mov esi, eax
call fcn.140058d88
lea rcx, [rsp + 0xa0]
jmp 0x1400d8f14
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0xa0]
jmp 0x1400d9bf2
cmp ebp, 0xffffffe0
jne 0x1400d987f
lea rcx, [rsp + 0x78]
call fcn.140061510
lea rcx, [rsp + 0x48]
call fcn.140061510
lea eax, [rbp + 0x5b]
lea r9d, [rbp + 0x4c]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x2e8]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x78]
cmp word [rdx], si
jne 0x1400d96f5
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x78]
jmp 0x1400d94be
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x2e8]
mov dword [rsp + 0x88], r15d
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x98], esi
call fcn.140007890
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
mov ebp, dword [rsp + 0x68]
mov edi, dword [rsp + 0x88]
cmp ebp, r15d
lea rdx, str.pecmd2012.semaphore.
lea rcx, [rsp + 0x50]
cmovl ebp, r15d
cmp edi, ebp
cmovg edi, ebp
call fcn.14006164c
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov r8, qword [rsp + 0x50]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
mov rbx, rax
cmp byte [rsp + 0x2f8], sil
je 0x1400d97af
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x78]
jmp 0x1400d8ef5
cmp rax, rsi
jne 0x1400d986b
xor edx, edx
lea rcx, [rsp + 0x239]
mov byte [rsp + 0x238], sil
lea r8d, [rdx + 0x27]
call fcn.1400f78a0
lea rax, [rsp + 0x238]
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x168], 0x18
mov dword [rsp + 0x178], esi
call fcn.14005c3c8
mov r9, qword [rsp + 0x50]
cmp edi, esi
cmovl edi, esi
mov edx, r15d
lea rcx, [rsp + 0x168]
cmp edi, esi
mov r8d, ebp
cmovg edx, edi
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov qword [rsp + 0xe0], r12
cmp rbx, rsi
jne 0x1400d985a
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x78]
call fcn.140058d88
mov rsi, r12
jmp 0x1400d9fa8
cmp edi, r15d
jge 0x1400d986b
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x78]
jmp 0x1400d8f26
cmp ebp, 0xffffffc0
jne 0x1400d9a13
lea rcx, [rsp + 0x88]
call fcn.140061510
lea rcx, [rsp + 0x48]
call fcn.140061510
lea eax, [rbp + 0x7b]
lea r9d, [rbp + 0x6c]
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x2e8]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x88]
cmp word [rdx], si
jne 0x1400d98e7
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x88]
jmp 0x1400d94be
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2e8]
mov dword [rsp + 0x68], esi
call fcn.140007890
lea rdx, str.pecmd2012.mutex.
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov rdx, qword [rsp + 0x88]
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov r8, qword [rsp + 0x50]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov rbx, rax
cmp byte [rsp + 0x2f8], sil
je 0x1400d9956
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x88]
jmp 0x1400d8ef5
cmp rax, rsi
jne 0x1400d99fc
xor edx, edx
lea rcx, [rsp + 0x1c1]
mov byte [rsp + 0x1c0], sil
lea r8d, [rdx + 0x27]
call fcn.1400f78a0
lea rax, [rsp + 0x1c0]
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x158], rax
mov dword [rsp + 0x150], 0x18
mov dword [rsp + 0x160], esi
call fcn.14005c3c8
mov ecx, dword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
cmp ecx, esi
mov edx, esi
cmovl ecx, esi
cmp ecx, esi
lea rcx, [rsp + 0x150]
setg dl
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov qword [rsp + 0xe0], r12
cmp rbx, rsi
jne 0x1400d99fc
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x88]
jmp 0x1400d984d
lea rcx, [rsp + 0x48]
call fcn.140058d88
lea rcx, [rsp + 0x88]
jmp 0x1400d9bf2
cmp ebp, 0xfffffff8
jne 0x1400d9c0b
lea rcx, [rsp + 0x68]
call fcn.140061510
lea eax, [rbp + 0x43]
lea r9d, [rbp + 0x34]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x2e8]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x68]
cmp word [rdx], si
jne 0x1400d9a5b
lea rcx, [rsp + 0x68]
jmp 0x1400d94be
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x2e8]
mov dword [rsp + 0x78], esi
call fcn.140007890
mov eax, dword [rsp + 0x78]
lea rdx, [rsp + 0x58]
neg eax
sbb ecx, ecx
and ecx, r12d
mov dword [rsp + 0x58], ecx
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, str..mailslotpecmd2012.mailslot.
lea rcx, [rsp + 0x50]
mov r9, r12
mov r8, r12
call fcn.1400616cc
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.14006164c
xor edx, edx
lea rcx, [rsp + 0x211]
lea r8d, [rdx + 0x27]
mov byte [rsp + 0x210], sil
call fcn.1400f78a0
lea rax, [rsp + 0x210]
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x118], rax
mov dword [rsp + 0x110], 0x18
mov dword [rsp + 0x120], esi
call fcn.14005c3c8
mov r12b, byte [rsp + 0x2f8]
cmp r12b, sil
jne 0x1400d9b54
cmp dword [rsp + 0x78], esi
je 0x1400d9b54
mov r8d, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
lea r9, [rsp + 0x110]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400d9b3b
mov rbx, rsi
cmp rbx, rsi
jne 0x1400d9bed
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x68]
jmp 0x1400d8f12
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rsi
mov r14d, 0x80
lea r9, [rsp + 0x110]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], r14d
mov edi, eax
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp r12b, sil
jne 0x1400d9bfc
cmp rbx, 0xffffffffffffffff
jne 0x1400d9b3b
cmp dword [rsp + 0x58], 0xffffffff
je 0x1400d9bb2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, dword [rsp + 0x58]
jae 0x1400d9b38
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0x110]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
jmp 0x1400d9b97
lea rcx, [rsp + 0x68]
call fcn.140058d88
jmp 0x1400d8f32
lea rcx, [rsp + 0x68]
call fcn.140058d88
jmp 0x1400d9d2e
cmp ebp, 0xfffffff0
jne 0x1400d9e47
lea rcx, [rsp + 0x58]
call fcn.140061510
lea rcx, [rsp + 0xa8]
call fcn.140061510
lea eax, [rbp + 0x4b]
lea r9d, [rbp + 0x3c]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x2e8]
mov rcx, rdi
mov word [rsp + 0x20], ax
call fcn.140052520
mov rdx, qword [rsp + 0x58]
cmp word [rdx], si
jne 0x1400d9c6d
lea rcx, [rsp + 0xa8]
call fcn.140058d88
lea rcx, [rsp + 0x58]
jmp 0x1400d94be
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2e8]
call fcn.140007890
lea rdx, str..pipepecmd2012.pipe.
lea rcx, [rsp + 0x50]
mov r9, r12
mov r8, r12
call fcn.1400616cc
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.14006164c
mov edi, dword [rsp + 0x68]
mov rbx, r12
mov r12b, byte [rsp + 0x2f8]
lea rcx, [rsp + 0xa8]
cmp r12b, sil
cmovne edi, esi
call fcn.140058d88
lea rcx, [rsp + 0x58]
call fcn.140058d88
mov ebp, dword [rsp + 0x88]
mov eax, 4
test al, dil
jne 0x1400d9d5c
mov rcx, qword [rsp + 0x50]
mov eax, edi
mov r8d, esi
and eax, 3
mov edx, ebp
cmp al, 3
sete r8b
call fcn.14005c3f8
mov rbx, rax
cmp r12b, sil
je 0x1400d9d5c
cmp rbx, 0xffffffffffffffff
cmove rbx, rsi
cmp rbx, rsi
je 0x1400d9d49
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400d9fa8
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
cmove eax, r15d
mov esi, eax
jmp 0x1400d9fa8
xor edx, edx
lea rcx, [rsp + 0x261]
mov byte [rsp + 0x260], sil
lea r8d, [rdx + 0x27]
call fcn.1400f78a0
lea rax, [rsp + 0x260]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xf0], 0x18
mov dword [rsp + 0x100], esi
call fcn.14005c3c8
test r13b, dil
jne 0x1400d9e1a
cmp rbx, 0xffffffffffffffff
jne 0x1400d8f2b
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0xf0]
lea edx, [rbx + 4]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], eax
mov r9d, 0xff
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov rbx, rax
test r15b, dil
je 0x1400d9e09
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp eax, esi
jne 0x1400d9e09
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbx, 0xffffffffffffffff
je 0x1400d9e20
mov dword [rsp + 0x80], 0xffffffef
cmp rbx, 0xffffffffffffffff
jne 0x1400d9e23
mov rbx, rsi
mov ebp, dword [rsp + 0x80]
cmp ebp, 0xfffffff0
je 0x1400d8f32
cmp rbx, rsi
jne 0x1400d8f32
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400d9d55
mov rax, qword [rsp + 0x2e8]
cmp word [rax], si
je 0x1400d9ec3
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x2e8]
call fcn.140070e78
mov rdx, qword [rsp + 0x2e8]
cmp word [rdx], si
je 0x1400d9ebe
add rdx, r13
lea rcx, [rsp + 0x2e8]
mov qword [rsp + 0x2e8], rdx
lea rdx, [rsp + 0x58]
call fcn.1400710e8
mov rdx, qword [rsp + 0x2e8]
cmp word [rdx], si
je 0x1400d9eba
add rdx, r13
lea rcx, [rsp + 0x2e8]
mov qword [rsp + 0x2e8], rdx
lea rdx, [rsp + 0x70]
call fcn.1400710e8
mov ebp, dword [rsp + 0x58]
mov r13, qword [rsp + 0x48]
mov r8d, dword [rsp + 0x70]
mov edx, ebp
mov ecx, r13d
call qword [0x1401314c0]
cmp rax, rsi
mov rbx, rax
jg 0x1400d8f32
mov rsi, r15
jmp 0x1400d9fa8
cmp dil, sil
jne 0x1400d9efd
cmp byte [rsp + 0x62], sil
jne 0x1400d9efd
mov rdi, qword [r12 + 0x270]
jmp 0x1400d9f00
mov rdi, r14
cmp byte [rsp + 0x60], sil
je 0x1400d9f6c
lea rdx, [0x14011f3e8]
lea rcx, [rsp + 0x2f8]
call fcn.14006cf08
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x2f8]
call fcn.14006164c
lea rdx, str..del
lea rcx, [rsp + 0x2f8]
call fcn.14006164c
mov r9, qword [rsp + 0x2f0]
mov rdx, qword [rsp + 0x2f8]
xor r8d, r8d
mov rcx, r14
call fcn.1400d4d94
lea rcx, [rsp + 0x2f8]
call fcn.140058d88
mov rax, qword [rsp + 0x90]
lea r8, [rsp + 0xb0]
mov r9, rbx
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x70]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov rcx, r12
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], r13
call fcn.140061fcc
mov rsi, qword [rsp + 0xe0]
lea rcx, [rsp + 0x50]
call fcn.140058d88
lea rcx, [rsp + 0xc8]
call fcn.140058d88
lea rcx, [rsp + 0xc0]
call fcn.140058d88
lea rcx, [rsp + 0xd0]
call fcn.140058d88
lea rcx, [rsp + 0xb0]
call fcn.140058d88
mov rax, rsi
add rsp, 0x298
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret