Function at 0x140027260
Capabilities:
Create pipe
Create two anonymous pipes

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x10], xmm6
mov qword [rbp - 0x80], rcx
mov rax, qword [0x1400630a8]
xor rax, rbp
mov qword [rbp + 8], rax
mov ecx, dword [0x140070be8]
mov eax, dword [0x140070bec]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
mov edx, ebx
xor edx, 0x8e54e578
and edx, ebx
not ebx
and ebx, 0x3776a463
and ecx, 0xc8895b9c
or ecx, ebx
mov ebx, ecx
xor ebx, 0x80000110
xor ecx, 0x654a460
or ecx, 0x71ab1a87
mov edi, edx
not edi
mov esi, ecx
and esi, 0x3e81c84a
and ebx, 0x80542530
or ebx, esi
or ecx, edi
and edi, 0x3e81c84a
and edx, 0xc17e37b5
or edx, edi
xor edx, ebx
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0x71ab1a87
and ecx, 0x8e54e578
or ecx, edx
mov edx, ecx
not edx
mov ebx, ecx
and ebx, 0xfffffffe
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov edx, ebx
and edx, ecx
xor ecx, ebx
or ecx, edx
mov edx, ecx
not edx
and ecx, edx
mov ebx, edx
and ebx, ecx
xor ecx, edx
or ecx, ebx
mov edx, ecx
not edx
and edx, 0x9c4f8f52
and ecx, 0x63b070ad
or ecx, edx
mov edx, ecx
xor edx, 0x22001084
xor ecx, 0x88080040
and ecx, 0xc9b86069
and edx, 0x36479f96
or edx, ecx
xor edx, 0xc9b86069
cmp edx, 0xffffffff
sete byte [rbp - 0x72]
cmp eax, 0xa
setl byte [rbp - 0x71]
mov eax, 0x4c76d79e
mov r12d, 0x57926f89
mov r15d, 0xcea4a6e5
xorps xmm6, xmm6
mov r13d, 0x5caf9b80
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov rdi, qword [rbp - 0x58]
mov rcx, qword [rdi]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [0x140023f70]
call qword [0x140070bf0]
add rsp, 0x30
mov rsi, rax
mov rcx, qword [rdi]
sub rsp, 0x20
mov edx, 0xdbba0
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdi, rax
call rax
mov rcx, rsi
mov edx, 0x1d4c0
call rdi
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
call fcn.140042960
add rsp, 0x20
mov eax, 0x6683a46
nop word [rax + rax]
cmp eax, 0x17996f2f
jle 0x140027660
cmp eax, 0x27ca48a6
jle 0x140027560
cmp eax, 0x57926f88
jg 0x140027a81
cmp eax, 0x27ca48a7
je 0x140027fee
cmp eax, 0x3f01c25c
je 0x140027fd9
cmp eax, 0x4c76d79e
jne 0x140027490
mov al, byte [rbp - 0x72]
mov r8b, byte [rbp - 0x71]
mov ecx, eax
xor cl, 1
mov edx, r8d
xor dl, cl
xor dl, 1
mov ebx, r8d
xor bl, al
or al, r8b
xor al, 1
or al, dl
mov r9d, eax
xor r9b, 1
and bl, r8b
or cl, r8b
xor cl, 1
mov edx, ebx
and dl, cl
xor cl, bl
or cl, dl
mov edx, eax
and dl, r9b
xor dl, 1
mov ebx, r9d
xor bl, dl
or dl, r9b
xor dl, 1
or dl, bl
mov ebx, edx
and dl, cl
xor cl, 1
xor bl, 1
and bl, cl
or dl, bl
mov ebx, eax
and bl, cl
xor cl, al
or cl, bl
mov ebx, ecx
xor bl, dl
test cl, 1
mov eax, 0x1e93d9e8
mov ecx, 0x25a6e13a
cmovne eax, ecx
test dl, 1
cmove eax, ecx
test bl, 1
mov ecx, 0x1e93d9e8
jmp 0x140028be8
cmp eax, 0x1b300453
jle 0x140027c97
cmp eax, 0x1b300454
je 0x14002828c
cmp eax, 0x1e93d9e8
je 0x1400282a5
cmp eax, 0x25a6e13a
jne 0x140027490
mov eax, 0x40
call fcn.14003aeb0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14003aeb0
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.14003aeb0
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.14003aeb0
sub rsp, rax
mov r14, rsp
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx], xmm6
mov word [rbx + 0x30], 0
sub rsp, 0x20
lea rcx, [0x140063b60]
mov rdx, rbx
call fcn.14000b7c0
mov rcx, rbx
call fcn.140043460
mov rcx, rbx
mov rdx, rax
call fcn.140007540
add rsp, 0x20
mov qword [rdi], 0
mov qword [rsi], 0
mov dword [r14], 0x18
mov dword [r14 + 0x10], 1
mov qword [r14 + 8], 0
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
mov r8, r14
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreatePipe]
add rsp, 0x20
mov eax, 0x1e93d9e8
cmp eax, 0x17996f2f
jg 0x14002749b
nop word cs:[rax + rax]
cmp eax, 0xe1ab733c
jg 0x140027a40
cmp eax, 0xb1185838
jle 0x140027c71
cmp eax, 0xb1185839
je 0x140028554
cmp eax, 0xb3e92fa1
je 0x140027fd9
cmp eax, 0xcea4a6e5
jne 0x140027490
mov rax, qword [rbp - 0x28]
movups xmmword [rax + 0x50], xmm6
movups xmmword [rax + 0x40], xmm6
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x60], 0
mov rax, qword [rbp - 0x60]
mov dword [rax], 0x68
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x60]
mov qword [rcx + 0x60], rax
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x60]
mov qword [rcx + 0x58], rax
mov r8, qword [rbp - 0x60]
mov r9d, dword [r8 + 0x3c]
mov r10d, r9d
not r10d
mov edi, r10d
and edi, r9d
mov eax, r10d
and eax, edi
xor edi, r10d
or edi, eax
mov esi, edi
mov r11d, edi
mov r14d, edi
xor r14d, 0x6231a2ca
and r14d, edi
not edi
mov edx, edi
and edx, 0x680e5d92
and esi, 0x97f1a26d
or esi, edx
not esi
or esi, edi
mov edx, r10d
and edx, 0x104e8fc9
and r9d, 0xefb17036
or r9d, edx
xor r9d, 0x87bf2da4
xor r10d, r9d
and r10d, r9d
mov edx, r10d
and r10d, esi
not esi
not edx
mov ebx, esi
xor ebx, edx
and ebx, esi
and edx, esi
or edx, r10d
mov ecx, ebx
not ecx
mov esi, edx
not esi
mov r9d, ecx
and r9d, 0x88698de4
and ebx, 0x7796721b
or ebx, r9d
or ecx, esi
and esi, 0x88698de4
and edx, 0x7796721b
or edx, esi
xor edx, ebx
not ecx
or ecx, edx
mov esi, ecx
mov edx, ecx
xor edx, 0x3c4d38ec
and edx, ecx
not ecx
and ecx, 0x2444200c
and esi, 0x180918e0
or esi, ecx
mov ecx, esi
xor ecx, 0x80808c0
xor esi, 0xe7f6e71f
mov ebx, edx
not ebx
mov r9d, esi
and r9d, 0x72b17620
and ecx, 0xc4c08cc
or ecx, r9d
or esi, ebx
and ebx, 0x72b17620
and edx, 0x8d4e89df
or edx, ebx
xor edx, ecx
not esi
or esi, edx
mov ecx, esi
not ecx
and ecx, 0xabbc9b81
and esi, 0x5443647e
or esi, ecx
and edi, 0xcd2aa859
and r11d, 0x32d557a6
or r11d, edi
mov ecx, r11d
xor ecx, 0x32d557a6
mov ebx, r11d
xor ebx, 0xaf1b0a93
and ebx, ecx
mov edx, ebx
not edx
mov eax, r14d
not eax
mov edi, edx
and edi, 0x83c662e
and ebx, 0xf7c399d1
or ebx, edi
or edx, eax
and eax, 0x83c662e
and r14d, 0xf7c399d1
or r14d, eax
xor r14d, ebx
not edx
or edx, r14d
mov eax, edx
not eax
and eax, 0x9dce5c35
and edx, 0x6231a3ca
or edx, eax
and ecx, 0x100
xor r11d, 0x32d556a6
or r11d, ecx
mov eax, r11d
not eax
mov ecx, edx
not ecx
mov ebx, ecx
and ebx, 0xeb3b65ef
and edx, 0x14c49a10
or edx, ebx
or ecx, r11d
and r11d, 0xeb3b65ef
and eax, 0x14c49a10
or eax, r11d
xor eax, edx
not ecx
or ecx, eax
mov edx, ecx
not edx
and ecx, 0xb7134489
and edx, 0x48ecbb76
or edx, ecx
mov eax, edx
xor eax, 0xb7134489
xor edx, 0x48ecbb76
mov ecx, edx
and ecx, 0x9b50b65d
and eax, 0x64af49a2
or eax, ecx
xor eax, 0x9b50b65d
xor edx, eax
and edx, eax
mov ecx, esi
mov edi, esi
xor edi, 0xadbcb5b3
and edi, esi
not esi
and esi, 0xe5c05e7b
and ecx, 0x1a3fa184
or ecx, esi
mov r9d, ecx
xor r9d, 0x1a3fa184
mov ebx, edx
not ebx
xor ecx, 0xa5801433
or ecx, 0x52434a4c
mov r14d, ecx
not r14d
or edx, 0x52434a4c
mov r11d, edx
not r11d
mov r10d, ebx
or r10d, 0xadbcb5b3
mov esi, r10d
not esi
mov eax, edi
not eax
mov r15d, ecx
and r15d, 0x63c48790
and r14d, 0x8c383023
or r14d, r15d
mov r15d, 0xcea4a6e5
or ecx, eax
and eax, 0x63c48790
and edi, 0x9c3b786f
or edi, eax
xor edi, r14d
not ecx
or ecx, edi
and edx, 0x4a4367b4
and r11d, 0xa5bc9003
or r11d, edx
and r10d, 0x4a4367b4
and esi, 0x10000848
or esi, r10d
xor esi, r11d
mov eax, ecx
not eax
and eax, esi
not esi
and esi, ecx
or esi, eax
mov eax, r9d
and eax, ebx
xor ebx, r9d
or ebx, eax
not ebx
mov eax, esi
and eax, ebx
xor ebx, esi
or ebx, eax
mov dword [r8 + 0x3c], ebx
mov rcx, qword [rbp - 0x50]
sub rsp, 0x20
mov r8d, 0x7d0
lea rdx, str.cmd.exe__c_chcp_65001_
call fcn.14003bff0
add rsp, 0x20
mov rsi, qword [rbp - 0x50]
sub rsp, 0x20
mov rcx, rsi
mov rdx, qword [rbp - 0x80]
call fcn.1400436a4
add rsp, 0x20
mov rax, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x58]
sub rsp, 0x50
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
xor ecx, ecx
mov rdx, rsi
xor r8d, r8d
xor r9d, r9d
call qword [0x140070bd8]
add rsp, 0x50
mov eax, 0x27ca48a7
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
cmp eax, 0x6683a45
jle 0x140027dba
cmp eax, 0x6683a46
je 0x1400286c7
cmp eax, 0xa23e4e3
je 0x14002890f
cmp eax, 0xd4b1bed
jne 0x140027490
mov eax, 0x17996f30
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
cmp eax, 0x57926f89
je 0x140028922
cmp eax, 0x5caf9b80
je 0x1400273a2
cmp eax, 0x758389aa
jne 0x140027490
mov eax, dword [0x140070be8]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
mov edx, ecx
xor edx, 0x16460092
and edx, ecx
not ecx
and ecx, 0x10040000
and eax, 0x6420092
or eax, ecx
mov ecx, eax
xor ecx, 0x2400082
xor eax, 0xf9bdff6d
mov ebx, edx
not ebx
mov edi, eax
and edi, 0xfc2b7174
and ecx, 0x2440082
or ecx, edi
or eax, ebx
and ebx, 0xfc2b7174
and edx, 0x3d48e8b
or edx, ebx
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
and ecx, 0xe9b9ff6d
and eax, 0x16460092
or eax, ecx
mov edx, eax
not edx
and edx, 0x46af68af
mov ecx, eax
and ecx, 0xb9509750
or ecx, edx
mov edx, ecx
xor edx, 0xb9509750
mov ebx, edx
and ebx, 0x883954a1
and eax, 0x77c6ab5e
or eax, ebx
mov ebx, eax
not ebx
and ebx, 0x77c6ab5f
and eax, 0x883954a0
or eax, ebx
and edx, 1
xor ecx, 0xb9509751
or ecx, edx
mov edx, ecx
not edx
and edx, 0xa8d3c60a
and ecx, 0x572c39f5
or ecx, edx
mov edx, ecx
xor edx, 0x522821d5
mov ebx, eax
not ebx
xor ecx, 0xa8d3c60a
mov edi, ebx
and edi, 0xad141a20
and eax, 0x52ebe5df
or eax, edi
or ebx, ecx
and ecx, 0xad141a20
and edx, 0x52ebe5df
or edx, ecx
xor edx, eax
not ebx
or ebx, edx
mov eax, ebx
xor eax, 0x13a1d87d
and eax, ebx
or ebx, 0xec5e2782
mov ecx, ebx
not ecx
mov edx, eax
not edx
mov edi, ebx
and edi, 0x4ba5f15c
and ecx, 0x10000821
or ecx, edi
or ebx, edx
and edx, 0x4ba5f15c
and eax, 0xb45a0ea3
or eax, edx
xor eax, ecx
not ebx
or ebx, eax
mov eax, ebx
not eax
and eax, 0xec5e2782
and ebx, 0x13a1d87d
or ebx, eax
sete r8b
setne cl
cmp dword [0x140070bec], 9
setg al
mov ebx, eax
and bl, cl
xor cl, al
or cl, bl
mov r9d, ecx
xor r9b, 1
mov edx, eax
xor dl, r8b
not dl
and dl, r8b
or al, r8b
xor al, 1
mov ebx, edx
and bl, al
xor al, dl
or al, bl
xor al, 1
mov edx, ecx
and dl, r9b
mov ebx, ecx
xor bl, dl
xor dl, 1
or dl, r9b
xor dl, 1
or dl, bl
xor dl, al
mov ebx, ecx
and bl, al
xor al, cl
or al, bl
mov ecx, eax
xor cl, dl
test al, 1
mov eax, 0x85705604
mov ebx, 0x57926f89
cmovne eax, ebx
test dl, 1
mov r12d, 0x57926f89
cmove eax, ebx
test cl, 1
mov ecx, 0x85705604
jmp 0x140028be8
cmp eax, 0x85705604
je 0x140028937
cmp eax, 0xa420136b
je 0x140028a3b
cmp eax, 0x97517d22
jne 0x140027490
jmp 0x140028bfb
cmp eax, 0x17996f30
je 0x140028a5c
cmp eax, 0x19a11682
jne 0x140027490
mov ecx, dword [0x140070be8]
mov r8d, dword [0x140070bec]
lea edi, [rcx - 1]
imul edi, ecx
mov r9d, edi
not r9d
mov ebx, r9d
and ebx, 0xad28c4e9
mov ecx, edi
and ecx, 0x52d73b16
or ecx, ebx
mov ebx, ecx
xor ebx, 0x2530116
xor ecx, 0xad28c4e8
mov edx, edi
xor edx, 0xfffffffe
and edx, edi
or ecx, 1
mov eax, edx
not eax
mov esi, ecx
and esi, 0xd5acbaa0
and ebx, 0x2a53455e
or ebx, esi
or ecx, eax
and eax, 0xd5acbaa0
and edx, 0x2a53455f
or edx, eax
xor edx, ebx
not ecx
or ecx, edx
mov eax, ecx
not eax
and r9d, eax
and ecx, edi
or ecx, r9d
xor eax, ecx
test eax, ecx
sete cl
setne r9b
cmp r8d, 0xa
setl al
cmp r8d, 9
setg r8b
mov edx, r9d
and dl, r8b
mov ebx, eax
and bl, cl
or bl, dl
xor r8b, bl
and r8b, bl
or r9b, al
xor cl, al
and cl, al
mov eax, r9d
xor al, cl
xor cl, 1
xor al, 1
or cl, r9b
xor cl, 1
or cl, al
mov eax, ecx
xor al, 1
mov edx, eax
and dl, cl
or cl, r8b
xor r8b, 1
mov ebx, eax
and bl, dl
xor dl, al
or dl, bl
xor dl, r8b
xor al, r8b
xor cl, 1
or cl, al
mov ebx, ecx
xor bl, dl
test cl, 1
mov eax, 0x6683a46
mov ecx, 0x5caf9b80
cmovne eax, ecx
test dl, 1
mov r13d, 0x5caf9b80
cmove eax, ecx
test bl, 1
mov ecx, 0x6683a46
jmp 0x140028be8
cmp eax, 0xe1ab733d
je 0x140028290
cmp eax, 0x5bcef92
jne 0x140027490
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x38]
mov rax, qword [rbp - 0x48]
mov ecx, dword [0x140070be8]
mov r8d, dword [0x140070bec]
lea esi, [rcx - 1]
imul esi, ecx
mov ecx, esi
not ecx
mov ebx, ecx
and ebx, 0x779c074a
and ecx, esi
and esi, 0x8863f8b5
or esi, ebx
mov ebx, esi
xor ebx, 0x8639035
xor esi, 0x779c074a
mov edi, ecx
not edi
mov edx, esi
and edx, 0x92006f80
and ebx, 0x6dff907f
or ebx, edx
or esi, edi
and edi, 0x92006f80
and ecx, 0x6dff907f
or ecx, edi
xor ecx, ebx
not esi
or esi, ecx
mov ebx, esi
not ebx
mov edx, esi
xor edx, 0xc765b264
mov edi, edx
and edi, ebx
and edx, esi
mov ecx, edi
not ecx
mov eax, edx
not eax
mov r9d, ecx
and r9d, 0x4a941fcd
and edi, 0xb56be032
or edi, r9d
or ecx, eax
and eax, 0x4a941fcd
and edx, 0xb56be032
or edx, eax
xor edx, edi
not ecx
or ecx, edx
mov eax, ecx
not eax
and eax, 0x3b2c778f
and ecx, 0xc4d38870
or ecx, eax
mov edi, ecx
xor edi, 0x1043800
and esi, 0xa88e1e52
mov eax, ebx
and eax, 0x5771e1ad
or eax, esi
xor eax, 0xa88e1e53
and ebx, 1
or ebx, eax
mov eax, ebx
not eax
and eax, 0xf99879c8
and ebx, 0x6678637
or ebx, eax
mov eax, ebx
xor eax, 0x4450420
xor ecx, 0xfc49c5ea
xor ebx, 0xf99879c8
mov edx, ecx
and edx, 0x42bac31f
and edi, 0xbd453ce0
or edi, edx
or ecx, ebx
and ebx, 0x42bac31f
and eax, 0xbd453ce0
or eax, ebx
xor eax, edi
not ecx
or ecx, eax
mov eax, ecx
not eax
or ecx, 0x588db53d
mov ebx, ecx
not ebx
or eax, 0xa7724ac2
mov edx, eax
not edx
and ecx, 0x20b23dc9
and ebx, 0x87404202
or ebx, ecx
and eax, 0x20b23dc9
and edx, 0x580d8034
or edx, eax
xor edx, ebx
mov eax, edx
not eax
and eax, 0xeed3691f
and edx, 0x112c96e0
or edx, eax
mov eax, edx
xor eax, 0x1256d002
xor edx, 0x49a123dd
mov ecx, edx
and ecx, 0xe4090d69
and eax, 0x1bf6f296
or eax, ecx
xor eax, 0xe4090d69
xor edx, eax
test edx, eax
sete r9b
setne r10b
cmp r8d, 0xa
setl al
cmp r8d, 9
setg cl
mov edx, ecx
xor dl, r10b
mov ebx, ecx
or cl, r10b
and r10b, al
and bl, r9b
or bl, r10b
xor al, r9b
xor cl, 1
or cl, al
xor bl, 1
mov eax, ebx
xor al, cl
or bl, cl
xor bl, 1
or bl, al
xor bl, dl
and dl, bl
mov ecx, ebx
xor cl, dl
test bl, 1
mov eax, 0x17996f30
mov ebx, 0xd4b1bed
cmovne eax, ebx
test dl, dl
cmove eax, ebx
test cl, 1
mov ecx, 0x17996f30
jmp 0x140028be8
mov eax, 0x1b300454
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov rax, qword [rbp - 0x28]
movups xmmword [rax + 0x50], xmm6
movups xmmword [rax + 0x40], xmm6
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x60], 0
mov rax, qword [rbp - 0x60]
mov dword [rax], 0x68
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x60]
mov qword [rcx + 0x60], rax
mov rax, qword [rbp - 0x68]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x60]
mov qword [rcx + 0x58], rax
mov r8, qword [rbp - 0x60]
mov edi, dword [r8 + 0x3c]
mov ecx, edi
not ecx
mov edx, ecx
and edx, 0x9e2ba262
mov ebx, edi
and ebx, 0x61d45d9d
or ebx, edx
xor ebx, 0x61d45c9d
mov edx, ebx
xor edx, ecx
and edx, ebx
and ecx, 0x100
and edi, 0xfffffeff
or edi, ecx
mov ebx, edx
xor ebx, 0xcc5ba6a8
mov eax, ebx
and ebx, edx
mov r9d, edx
not r9d
mov ecx, edi
mov edx, edi
xor edx, 0xcc5ba6a8
and edx, edi
not edi
and edi, 0xe41bfbeb
and ecx, 0x1be40414
or ecx, edi
xor ecx, 0x1be40414
and eax, r9d
mov edi, ecx
and edi, 0xcc5ba6a8
mov esi, eax
and esi, ebx
xor ebx, eax
or ebx, esi
mov eax, edi
and eax, edx
xor edx, edi
or edx, eax
mov eax, ebx
not eax
and eax, edx
not edx
and edx, ebx
or edx, eax
mov eax, r9d
and eax, ecx
xor ecx, r9d
or ecx, eax
mov eax, ecx
not eax
and eax, 0xb16ca974
and ecx, 0x4e93568b
or ecx, eax
xor ecx, 0x4e93568b
mov eax, edx
and eax, ecx
xor ecx, edx
or ecx, eax
mov dword [r8 + 0x3c], ecx
mov rax, qword [rbp - 0x50]
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov rcx, qword [rbp - 8]
sub rsp, 0x20
mov r8d, 0x7d0
lea rdx, str.cmd.exe__c_chcp_65001_
call fcn.14003bff0
add rsp, 0x20
mov rdi, qword [rbp - 0x50]
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp - 0x80]
call fcn.1400436a4
add rsp, 0x20
mov rax, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x58]
sub rsp, 0x50
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
xor ecx, ecx
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [0x140070bd8]
add rsp, 0x50
test rax, rax
setne byte [rbp + 7]
mov edx, dword [0x140070be8]
mov ecx, dword [0x140070bec]
lea eax, [rdx - 1]
imul eax, edx
mov ebx, eax
not ebx
mov edx, ebx
and edx, 0x61700080
mov edi, eax
and edi, 0x804034
or edi, edx
xor edi, 0x804034
mov edx, eax
and edx, 0x9e0fbf4b
or edx, edi
mov edi, edx
not edi
and edi, 0x7ce33ce6
and edx, 0x831cc319
or edx, edi
mov edi, edx
xor edi, 0xe2ec83ac
and ebx, 0xcef29919
and eax, 0x310d66e6
or eax, ebx
mov ebx, eax
xor ebx, 0x310d66e6
xor edx, 0x1d137c53
and ebx, edx
xor eax, 0xcef29919
and eax, edi
or eax, ebx
not eax
or eax, edx
cmp eax, 0xffffffff
setne bl
sete r8b
cmp ecx, 9
setg al
cmp ecx, 0xa
setl cl
mov edx, ecx
xor dl, al
and dl, cl
xor bl, r8b
and bl, r8b
mov ecx, edx
xor cl, 1
or dl, cl
mov r9d, ecx
xor r9b, dl
or dl, cl
xor dl, 1
or dl, r9b
mov ecx, ebx
xor cl, 1
or cl, bl
xor cl, 1
mov r9d, ebx
and r9b, cl
xor cl, bl
or cl, r9b
xor cl, dl
xor r8b, al
and al, r8b
mov edx, r8d
xor dl, al
xor al, 1
xor dl, 1
or al, r8b
xor al, 1
or al, dl
xor al, cl
and cl, al
mov edx, eax
xor dl, cl
test al, 1
mov eax, 0xa23e4e3
cmovne eax, r15d
test cl, 1
cmove eax, r15d
not dl
test dl, 1
mov ecx, 0xa23e4e3
jmp 0x140028a49
mov rax, qword [rbp - 8]
mov eax, 0x5bcef92
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov eax, 0x40
call fcn.14003aeb0
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14003aeb0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x70], rax
mov eax, 0x10
call fcn.14003aeb0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x68], rax
mov eax, 0x70
call fcn.14003aeb0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x60], rax
mov eax, 0x20
call fcn.14003aeb0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x58], rax
mov eax, 0x20
call fcn.14003aeb0
sub rsp, rax
mov rdi, rsp
mov eax, 0x7d0
call fcn.14003aeb0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rbx
mov rax, qword [rbp - 0x48]
movaps xmmword [rbx + 0x10], xmm6
movaps xmmword [rbx + 0x20], xmm6
movaps xmmword [rbx], xmm6
mov word [rbx + 0x30], 0
sub rsp, 0x20
lea rcx, [0x140063b60]
mov rdx, rbx
call fcn.14000b7c0
mov rcx, rbx
call fcn.140043460
mov rcx, rbx
mov rdx, rax
call fcn.140007540
add rsp, 0x20
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov rax, qword [rbp - 0x70]
mov qword [rax], 0
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x68]
mov qword [rax], 0
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x28]
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x18], rdi
mov rax, qword [rbp - 0x18]
mov dword [rdi], 0x18
mov dword [rdi + 0x10], 1
mov qword [rdi + 8], 0
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x68]
sub rsp, 0x20
mov r8, rdi
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreatePipe]
add rsp, 0x20
test eax, eax
setne byte [rbp - 9]
mov edx, dword [0x140070be8]
mov eax, dword [0x140070bec]
lea ecx, [rdx - 1]
imul ecx, edx
mov edx, ecx
not edx
mov ebx, edx
and ebx, 0xd45f9a43
and edx, ecx
and ecx, 0x2ba065bc
or ecx, ebx
mov ebx, ecx
xor ebx, 0xa0419c
xor ecx, 0xd45f9a43
mov edi, edx
not edi
mov esi, ecx
and esi, 0x3b40b461
and ebx, 0xc4bf4b9e
or ebx, esi
or ecx, edi
and edi, 0x3b40b461
and edx, 0xc4bf4b9e
or edx, edi
xor edx, ebx
not ecx
or ecx, edx
mov edx, ecx
xor edx, 1
and edx, ecx
mov ebx, ecx
not ebx
and ebx, 0x15ee47af
and ecx, 0xea11b850
or ecx, ebx
xor ecx, 0xea11b851
mov ebx, edx
and ebx, ecx
xor ecx, edx
or ecx, ebx
mov edx, ecx
not edx
and edx, 0xdaeb47d1
and ecx, 0x2514b82e
or ecx, edx
mov edx, ecx
xor edx, 0x2504102a
xor ecx, 0x120240c0
and ecx, 0x1212e8c4
and edx, 0xeded173b
or edx, ecx
xor edx, 0x1212e8c4
sete r8b
setne bl
cmp eax, 0xa
setl r10b
cmp eax, 9
setg r9b
mov eax, ebx
xor al, r9b
and bl, al
and al, r9b
xor bl, 1
xor al, 1
mov edx, ebx
xor dl, al
or al, bl
xor al, 1
or al, dl
mov edx, r9d
xor dl, r8b
and dl, r9b
xor r10b, r8b
mov ebx, edx
and bl, r10b
xor r10b, dl
or r10b, bl
mov ecx, r10d
xor cl, 1
mov edx, ecx
and dl, r10b
xor cl, dl
xor dl, 1
or dl, r10b
xor dl, 1
or dl, cl
mov ecx, eax
xor cl, 1
mov ebx, edx
xor bl, 1
and dl, cl
or cl, bl
and bl, al
or bl, dl
mov edx, ebx
xor dl, cl
test bl, 1
mov eax, 0x25a6e13a
mov ebx, 0xa420136b
cmovne eax, ebx
test cl, 1
mov ecx, 0x25a6e13a
cmovne eax, ecx
test dl, 1
cmove eax, ebx
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov ecx, dword [0x140070be8]
mov r8d, dword [0x140070bec]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, edx
not ecx
and ecx, 0xfc063850
and edx, 0x3f9c7af
or edx, ecx
mov ebx, edx
xor ebx, 0x24086a2
xor edx, 0xb0002840
and edx, 0xb1b9694d
and ebx, 0x4e4696b2
or ebx, edx
mov edx, ebx
xor edx, 0xb1b9694d
mov r9d, ebx
xor r9d, 0x4e4696b2
mov ecx, ebx
xor ecx, 0x71e81a45
mov eax, ecx
and eax, r9d
and ecx, edx
mov edi, eax
not edi
mov edx, ecx
not edx
mov esi, edi
and esi, 0xb3c39bac
and eax, 0x4c3c6453
or eax, esi
or edi, edx
and edx, 0xb3c39bac
and ecx, 0x4c3c6453
or ecx, edx
xor ecx, eax
not edi
or edi, ecx
mov eax, edi
not eax
and eax, 0x3fae8cf6
and edi, 0xc0517309
or edi, eax
and r9d, 1
xor ebx, 0x4e4696b3
or ebx, r9d
mov eax, ebx
not eax
and eax, 0x544576d1
and ebx, 0xabba892e
or ebx, eax
mov eax, ebx
xor eax, 0x81b80820
xor ebx, 0x544576d1
mov edx, edi
not edx
mov ecx, edx
and ecx, 0x2a47a54e
and edi, 0xd5b85ab1
or edi, ecx
or edx, ebx
and ebx, 0x2a47a54e
and eax, 0xd5b85ab1
or eax, ebx
xor eax, edi
not edx
or edx, eax
mov eax, edx
not eax
and eax, 0xf3ed8627
and edx, 0xc1279d8
or edx, eax
mov eax, edx
xor eax, 0x7858
xor edx, 0x11400202
and edx, 0x1d520382
and eax, 0xe2adfc7d
or eax, edx
xor eax, 0x1d520382
sete al
setne cl
cmp r8d, 0xa
setl r9b
cmp r8d, 9
setg bl
and cl, bl
mov edx, r9d
and dl, al
or dl, cl
xor bl, dl
and bl, dl
xor al, r9b
xor al, bl
mov ecx, eax
xor cl, 1
and bl, cl
xor cl, bl
test cl, 1
mov ecx, 0x27ca48a7
cmovne ecx, r15d
test al, al
mov eax, ecx
mov edx, 0x27ca48a7
cmovne eax, edx
test bl, bl
jmp 0x140028be8
mov rsi, qword [rbp - 0x58]
mov rcx, qword [rsi]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x68]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov r9, qword [rax]
sub rsp, 0x30
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [0x140023f70]
call qword [0x140070bf0]
add rsp, 0x30
mov rdi, rax
mov rcx, qword [rsi]
sub rsp, 0x20
mov edx, 0xdbba0
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rsi, rax
call rax
mov rcx, rdi
mov edx, 0x1d4c0
call rsi
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
add rsp, 0x20
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [0x140064028]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
call fcn.140042960
add rsp, 0x20
mov ecx, dword [0x140070be8]
mov eax, dword [0x140070bec]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, ebx
not edx
and ebx, 0xee74f392
and edx, 0x118b0c6d
or edx, ebx
mov ebx, edx
xor ebx, 0xee74f392
mov edi, edx
xor edi, 0xee74f393
and edi, ebx
xor edx, 0x11090449
and edx, 0xf16d97db
and ebx, 0xe926824
or ebx, edx
mov edx, ebx
xor edx, 0x822000
mov ecx, edi
not ecx
xor ebx, 0xf16d97da
mov esi, ecx
and esi, 0x4f79cb2f
and edi, 0xb08634d0
or edi, esi
or ecx, ebx
and ebx, 0x4f79cb2f
and edx, 0xb08634d0
or edx, ebx
xor edx, edi
not ecx
or ecx, edx
mov edx, ecx
not edx
and ecx, 0x32fc5fc5
and edx, 0xcd03a03a
or edx, ecx
mov ecx, edx
xor ecx, 0x208c0700
xor edx, 0x81000000
and edx, 0x937058c5
and ecx, 0x6c8fa73a
or ecx, edx
mov edx, ecx
xor edx, 0x64090038
xor ecx, 0x1404081
and ecx, 0x9c6e783
and edx, 0xf639187c
or edx, ecx
xor edx, 0xf639187c
setne r8b
sete r9b
cmp eax, 9
setg cl
cmp eax, 0xa
setl dl
mov eax, r9d
xor al, dl
mov ebx, eax
and bl, r9b
and al, dl
mov r10d, ebx
and r10b, al
xor al, bl
or al, r10b
and r9b, cl
and dl, r8b
or dl, r9b
mov ebx, ecx
xor bl, r8b
or cl, r8b
xor cl, 1
or cl, bl
xor cl, 1
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
mov ebx, ecx
xor bl, 1
mov edx, ebx
and dl, cl
xor bl, dl
xor dl, 1
or dl, cl
xor dl, 1
or dl, bl
mov ecx, edx
xor cl, 1
mov ebx, eax
xor bl, 1
and dl, bl
or bl, cl
and cl, al
or cl, dl
mov edx, ebx
xor dl, cl
test cl, 1
mov eax, 0x5caf9b80
mov ecx, 0xb3e92fa1
cmovne eax, ecx
test bl, 1
cmovne eax, r13d
test dl, 1
jmp 0x140028be8
cmp byte [rbp + 7], 0
mov eax, 0x3f01c25c
mov ecx, 0x19a11682
jmp 0x140028a49
mov eax, 0x85705604
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov ecx, dword [0x140070be8]
mov eax, dword [0x140070bec]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
mov edx, ebx
xor edx, 0xa9827838
and edx, ebx
not ebx
mov edi, ebx
and edi, 0x8806810
and ecx, 0xa1021028
or ecx, edi
xor ecx, 0xa1021028
mov edi, ecx
and edi, edx
xor edx, ecx
or edx, edi
mov ecx, edx
not ecx
and ecx, 0xe689ede1
and edx, 0x1976121e
or edx, ecx
xor edx, 0x4f0b95d8
mov ecx, edx
and ecx, ebx
xor edx, ebx
or edx, ecx
cmp edx, 0xffffffff
setne r9b
sete r8b
cmp eax, 9
setg cl
cmp eax, 0xa
setl bl
mov eax, ebx
xor al, cl
and al, bl
mov ebx, eax
xor bl, 1
or al, bl
mov edx, ebx
xor dl, al
or al, bl
xor al, 1
or al, dl
mov edx, eax
xor dl, 1
and dl, r8b
and al, r9b
or al, dl
mov edx, ecx
xor dl, r9b
mov ebx, edx
xor bl, 1
or cl, r9b
xor cl, 1
or cl, dl
xor dl, cl
xor dl, 1
or cl, bl
xor cl, 1
or cl, dl
mov edx, eax
xor dl, 1
mov r8d, ecx
mov ebx, edx
xor dl, cl
xor cl, 1
and r8b, al
and bl, cl
or bl, r8b
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, bl
test al, 1
mov edx, 0xe1ab733d
cmovne edx, r12d
test cl, 1
mov eax, 0xe1ab733d
cmovne eax, edx
test bl, bl
cmove eax, edx
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
cmp byte [rbp - 9], 0
mov eax, 0x758389aa
mov ecx, 0xb1185839
cmovne eax, ecx
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov ecx, dword [0x140070be8]
mov eax, dword [0x140070bec]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
mov edx, ebx
xor edx, 0x2472f0a2
and edx, ebx
not ebx
and ebx, 0x20305002
and ecx, 0x442a0a0
or ecx, ebx
xor ecx, 0x442a0a0
mov ebx, ecx
and ebx, edx
xor edx, ecx
or edx, ebx
mov ecx, edx
not ecx
and ecx, 0x1470ace4
and edx, 0xeb8f531b
or edx, ecx
mov ebx, edx
xor ebx, 0xc508a1b0
xor edx, 0x30025c46
mov ecx, edx
or ecx, 1
mov edi, ecx
not edi
and edx, 0x3af5420b
and ebx, 0xc50abdf4
or ebx, edx
mov edx, ebx
xor edx, 0x840228c0
xor ebx, 0x3af5420a
mov esi, ecx
and esi, 0x4b299537
and edi, 0xb4d66ac8
or edi, esi
or ecx, ebx
and ebx, 0x4b299537
and edx, 0xb4d66ac8
or edx, ebx
xor edx, edi
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xe101588
and ecx, 0xf1efea77
or ecx, edx
mov edx, ecx
xor edx, 0xe0e62a41
xor ecx, 0xe100488
and ecx, 0x1f19c4be
and edx, 0xe0e63b41
or edx, ecx
mov ecx, edx
xor ecx, 0xb09800e
xor edx, 0xe0e63b41
mov ebx, edx
and ebx, 0xb41646f1
and ecx, 0x4be9b90e
or ecx, ebx
xor ecx, 0xb41646f1
xor edx, ecx
test edx, ecx
sete dl
setne bl
cmp eax, 9
setg r8b
cmp eax, 0xa
setl al
and bl, al
and r8b, dl
or r8b, bl
mov ebx, eax
or bl, dl
xor bl, 1
xor al, dl
mov edx, ebx
and dl, al
xor al, bl
or al, dl
mov ebx, eax
xor bl, 1
mov r9d, r8d
xor r9b, 1
mov ecx, r8d
and cl, r9b
mov edx, ebx
and dl, al
mov r10d, ecx
and r10b, r8b
xor cl, r8b
or cl, r10b
xor dl, 1
mov r10d, edx
xor r10b, al
or dl, al
xor dl, 1
or dl, r10b
xor dl, cl
xor r9b, al
or bl, r8b
xor bl, 1
or bl, r9b
mov ecx, ebx
xor cl, dl
test bl, 1
mov eax, 0x97517d22
mov ebx, 0xd4b1bed
cmovne eax, ebx
test dl, 1
cmove eax, ebx
test cl, 1
mov ecx, 0x97517d22
cmove eax, ecx
cmp eax, 0x17996f2f
jg 0x14002749b
jmp 0x140027660
mov rcx, qword [rbp + 8]
xor rcx, rbp
sub rsp, 0x20
call fcn.14003af10
add rsp, 0x20
xor eax, eax
movaps xmm6, xmmword [rbp + 0x10]
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret