Function at 0x1400e0a5c
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Connect pipe
Create mailslot
Create pipe
Read file via mapping

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x258
lea rcx, [rax + 0x20]
call fcn.14005cd24
lea rcx, [rsp + 0x2b8]
call fcn.14005cd14
xor esi, esi
cmp eax, esi
jne 0x1400e0aa2
lea eax, [rsi + 1]
jmp 0x1400e2aa7
lea rcx, [rsp + 0x2b8]
call fcn.14005cff8
lea rcx, [rsp + 0x98]
call fcn.1400632a0
lea rcx, [rsp + 0xd0]
call fcn.1400632a0
lea rcx, [rsp + 0xc0]
call fcn.1400632a0
lea rcx, [rsp + 0xc8]
call fcn.1400632a0
mov r14d, 2
lea rcx, [rsp + 0x2a8]
lea eax, [r14 + 4]
lea r15d, [r14 - 1]
mov r13w, si
mov rbx, rsi
mov qword [rsp + 0x50], r14
mov word [rsp + 0x5c], si
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0xb0], eax
mov dword [rsp + 0x70], eax
mov word [rsp + 0xd8], si
mov r12w, si
mov dword [rsp + 0x88], r13d
mov rbp, rsi
call fcn.14005aec8
mov rdi, qword [rsp + 0x2a8]
lea edx, [r14 + 0x2b]
mov r11b, sil
mov byte [rsp + 0x2b8], sil
mov dword [rsp + 0x80], 3
lea r8d, [r14 + 2]
lea eax, [rdx - 3]
cmp dx, word [rdi]
jne 0x1400e0f10
lea ebx, [rdx - 0x24]
cmp dx, word [rdi + 2]
jne 0x1400e0f08
lea rcx, str.__gethostbyname
mov r8d, 0xf
mov rdx, rdi
call fcn.14005c4dc
cmp al, sil
je 0x1400e0c34
add rdi, 0x1e
mov qword [rsp + 0x2a8], rdi
movzx eax, word [rdi]
cmp ax, si
je 0x1400e0bc3
cmp bx, ax
ja 0x1400e0bb7
cmp ax, 0xd
jbe 0x1400e0bc3
mov edx, 0x20
cmp dx, ax
jne 0x1400e0bd3
jmp 0x1400e0bc8
mov edx, 0x20
mov r11b, r15b
mov byte [rsp + 0x2b8], r15b
cmp ax, si
je 0x1400e0ed7
mov ecx, 0x2a
lea r13d, [rcx - 7]
lea r8d, [rcx - 0x26]
cmp bx, ax
ja 0x1400e0bf4
cmp ax, 0xd
jbe 0x1400e0c1f
cmp dx, ax
je 0x1400e0c1f
cmp cx, ax
jne 0x1400e0c03
or r11b, r14b
jmp 0x1400e0c0c
cmp r13w, ax
jne 0x1400e0c0c
or r11b, r8b
add rdi, r14
mov qword [rsp + 0x2a8], rdi
mov ax, word [rdi]
cmp ax, si
jne 0x1400e0be9
mov r13d, dword [rsp + 0x88]
mov byte [rsp + 0x2b8], r11b
jmp 0x1400e0ed7
mov ebx, 6
lea rdx, [rsp + 0x2a8]
lea rcx, str.__file
mov r8d, ebx
call fcn.140065d7c
cmp al, sil
je 0x1400e0c6a
or ebx, 0xffffffff
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x60], ebx
mov ebx, 9
jmp 0x1400e0ee4
lea rdx, [rsp + 0x2a8]
lea rcx, str.__shm
mov r8d, 5
call fcn.140065d7c
cmp al, sil
je 0x1400e0c98
mov eax, 0xfffffffe
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x60], eax
jmp 0x1400e0c60
mov edi, 7
lea rdx, [rsp + 0x2a8]
lea rcx, str.__event
mov r8d, edi
call fcn.140065d7c
cmp al, sil
je 0x1400e0cbe
lea eax, [rdi - 0xb]
jmp 0x1400e0c8e
lea rdx, [rsp + 0x2a8]
lea rcx, str.__semaphore
mov r8d, 0xb
call fcn.140065d7c
cmp al, sil
je 0x1400e0ce4
mov eax, 0xffffffe0
jmp 0x1400e0c8e
lea rdx, [rsp + 0x2a8]
lea rcx, str.__sem
mov r8d, 5
call fcn.140065d7c
cmp al, sil
jne 0x1400e0cdd
lea rdx, [rsp + 0x2a8]
lea rcx, str.__mutex
mov r8d, edi
call fcn.140065d7c
cmp al, sil
je 0x1400e0d29
mov eax, 0xffffffc0
jmp 0x1400e0c8e
lea rdx, [rsp + 0x2a8]
lea rcx, str.__mailslot
mov r8d, 0xa
call fcn.140065d7c
cmp al, sil
je 0x1400e0d52
mov eax, 0xfffffff8
jmp 0x1400e0c8e
lea rdx, [rsp + 0x2a8]
lea rcx, str.__pipe
mov r8d, ebx
call fcn.140065d7c
cmp al, sil
je 0x1400e0d78
mov eax, 0xfffffff0
jmp 0x1400e0c8e
lea rdx, [rsp + 0x2a8]
lea rcx, str.__exist
mov r8d, edi
call fcn.140065d7c
cmp al, sil
je 0x1400e0da1
mov dword [rsp + 0x5c], 0x100
jmp 0x1400e0c60
lea rdx, [rsp + 0x2a8]
lea rcx, str.__only
mov r8d, ebx
call fcn.140065d7c
cmp al, sil
je 0x1400e0dca
mov dword [rsp + 0xd8], r15d
jmp 0x1400e0c60
lea rdx, [rsp + 0x2a8]
lea rcx, str.__unknown
mov r8d, 9
call fcn.140065d7c
cmp al, sil
je 0x1400e0df3
mov ebp, 3
jmp 0x1400e0c60
lea rdx, [rsp + 0x2a8]
lea rcx, str.__BSTRVT
mov r8d, 8
call fcn.140065d7c
cmp al, sil
je 0x1400e0e1c
mov ebp, 0x102
jmp 0x1400e0c60
lea rdx, [rsp + 0x2a8]
lea rcx, str.__BSTRVT
mov r8d, ebx
call fcn.140065d7c
cmp al, sil
je 0x1400e0e42
mov ebp, 0x100
jmp 0x1400e0c60
lea rdx, [rsp + 0x2a8]
lea rcx, [0x14012ab10]
mov r8d, 3
call fcn.140065d7c
cmp al, sil
je 0x1400e0e70
mov r8d, 4
mov r12d, r8d
lea ebx, [r8 + 5]
jmp 0x1400e0eea
lea rdx, [rsp + 0x2a8]
lea rcx, str.__reset
mov r8d, edi
call fcn.140065d7c
cmp al, sil
je 0x1400e0e9c
mov r13d, r15d
mov dword [rsp + 0x88], r15d
jmp 0x1400e0c60
mov rcx, qword [rsp + 0x2a8]
mov ebx, 9
movzx eax, word [rcx]
cmp ax, si
je 0x1400e0ed7
lea edx, [rbx + 0x17]
cmp bx, ax
ja 0x1400e0ebf
cmp ax, 0xd
jbe 0x1400e0ed7
cmp dx, ax
je 0x1400e0ed7
add rcx, r14
mov qword [rsp + 0x2a8], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x1400e0eb4
lea rcx, [rsp + 0x2a8]
call fcn.14005aec8
mov r8d, 4
mov rdi, qword [rsp + 0x2a8]
mov r11b, byte [rsp + 0x2b8]
mov edx, 0x2d
cmp dx, word [rdi]
je 0x1400e0b70
mov rbx, rsi
mov eax, 0x2a
mov byte [rsp + 0x88], sil
cmp ax, word [rdi]
jne 0x1400e0f45
add rdi, r14
lea rcx, [rsp + 0x2a8]
mov byte [rsp + 0x88], r15b
mov qword [rsp + 0x2a8], rdi
call fcn.14005aec8
mov rdi, qword [rsp + 0x2a8]
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2a0]
or dword [rsp + 0x90], 0xffffffff
mov qword [rsp + 0x110], rax
mov eax, 0x3a
mov qword [rsp + 0xe8], rcx
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0xa0], 0x100000
mov dword [rsp + 0x68], 0x80000001
cmp ax, word [rdi]
jne 0x1400e0fc8
cmp ax, word [rdi + 2]
jne 0x1400e0fc8
lea rax, [0x14013d130]
add rdi, r8
mov byte [rsp + 0x40], r15b
mov qword [rsp + 0xe8], rax
mov rax, qword [0x14013d170]
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x110], rax
mov edx, 0x3b
lea r8, [rsp + 0x98]
lea eax, [rdx - 0xf]
mov word [rsp + 0x20], dx
lea rdx, [rsp + 0x2a8]
mov r9d, eax
call fcn.140054624
cmp rbp, rsi
je 0x1400e11b1
bt rbp, 8
mov rdi, qword [rsp + 0x98]
mov rbx, rsi
mov qword [rsp + 0x2b8], rbx
jae 0x1400e1128
cmp r13w, si
je 0x1400e1064
call fcn.14006177c
lea rcx, [rsp + 0x48]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0xd0]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
xor eax, eax
jmp 0x1400e2aa7
cmp word [rdi], si
jne 0x1400e106f
mov r12d, 0xfffffffd
mov rax, qword [rsp + 0x2a8]
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400e1094
cmp bpl, sil
jne 0x1400e1089
or rbp, r15
add rax, r14
mov qword [rsp + 0x2a8], rax
mov ecx, 0x2c
cmp cx, word [rax]
je 0x1400e10a8
cmp r12w, si
jge 0x1400e1128
call fcn.1400617cc
call fcn.140003920
cmp r12w, si
jl 0x1400e101f
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x2b8], rsi
add rax, r14
cmp r12w, si
mov r12, qword [rsp + 0x2a0]
mov qword [rsp + 0x2a8], rax
jle 0x1400e1100
lea r8, [rsp + 0x2b8]
mov rdx, rax
mov rcx, r12
call fcn.140028548
mov qword [rsp + 0x2a8], rax
cmp rax, rsi
je 0x1400e1111
mov rcx, rax
call qword [0x14013c978]
mov rbx, rax
lea rcx, [rsp + 0x2b8]
call fcn.14005aef8
mov rdi, qword [rsp + 0x98]
jmp 0x1400e114d
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
call fcn.1400679a0
mov rbx, qword [rsp + 0x2b8]
mov r12, qword [rsp + 0x2a0]
cmp word [rdi], si
je 0x1400e1168
mov r9, rbp
mov r8, rdi
mov rdx, rbx
mov rcx, r12
call fcn.1400403b0
cmp rax, rsi
jne 0x1400e116b
mov esi, r15d
lea rcx, [rsp + 0x48]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0xd0]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
movsxd rax, esi
jmp 0x1400e2aa7
mov r12d, dword [rsp + 0x58]
mov dil, sil
mov r9d, 0xffdf
mov r10d, 0x57
cmp r12d, 0xfffffffe
jne 0x1400e121f
mov rcx, qword [rsp + 0x2a8]
movzx eax, word [rcx]
and ax, r9w
cmp r10w, ax
jne 0x1400e11ee
add rcx, r14
mov dil, r15b
mov qword [rsp + 0x2a8], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400e1239
mov edx, 0x2c
lea r8d, [rdx + 0xf]
add rcx, r14
mov qword [rsp + 0x2a8], rcx
cmp dx, ax
je 0x1400e1239
cmp r8w, ax
je 0x1400e1239
mov ax, word [rcx]
cmp ax, si
jne 0x1400e11ff
jmp 0x1400e1239
cmp r12d, 0xfffffffc
je 0x1400e1231
cmp r12d, 0xffffffe0
je 0x1400e1231
cmp r12d, 0xffffffc0
jne 0x1400e1293
mov rcx, qword [rsp + 0x2a8]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x1400e1275
add rcx, r14
lea rdx, str.Local_
mov qword [rsp + 0x2a8], rcx
or rbp, 0xffffffffffffffff
lea rcx, [rsp + 0x48]
mov r8, rbp
mov r9, rbp
call fcn.14006345c
mov r9d, 0xffdf
lea r10d, [rbp + 0x58]
jmp 0x1400e1297
mov eax, 0x23
cmp ax, word [rcx]
jne 0x1400e128a
add rcx, r14
mov qword [rsp + 0x2a8], rcx
lea rdx, [0x14012a640]
jmp 0x1400e1255
or rbp, 0xffffffffffffffff
cmp byte [rsp + 0x2b8], sil
je 0x1400e1546
lea rcx, [rsp + 0xd8]
call fcn.1400632a0
mov rcx, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x50]
mov ebx, 4
mov r9, rbp
mov r8, rbp
mov r13d, esi
mov qword [rsp + 0x50], rsi
mov word [rsp + 0x88], bx
call fcn.1400631dc
lea rcx, [rsp + 0x78]
call fcn.1400632a0
mov rdi, qword [rsp + 0x50]
mov dword [rsp + 0xb0], esi
lea r12, [rsp + 0xb0]
mov byte [rsp + 0x40], r15b
mov rbp, rsi
cmp rdi, rsi
je 0x1400e138f
cmp byte [rdi], sil
je 0x1400e1356
mov rcx, rdi
call qword [0x14013d580]
mov dword [rsp + 0xb0], eax
cmp eax, 0xffffffff
jne 0x1400e138f
mov dword [rsp + 0xb0], esi
mov rcx, rdi
call qword [0x14013d588]
cmp rax, rsi
je 0x1400e138f
mov rbp, qword [rax + 0x18]
movzx ebx, word [rax + 0x12]
mov word [rsp + 0x88], bx
cmp qword [rbp], rsi
je 0x1400e138f
mov al, byte [rsp + 0x2b8]
mov rdi, qword [rsp + 0x78]
mov byte [rsp + 0x40], al
jmp 0x1400e14fb
mov eax, 4
test byte [rsp + 0x2b8], al
je 0x1400e144e
lea eax, [r13 + 0x3e]
lea rcx, [rsp + 0x78]
movsxd rdx, eax
call fcn.1400633a0
mov rdi, qword [rsp + 0x78]
xor eax, eax
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
movsx eax, bx
mov ecx, 0x20
movsxd r11, r13d
cmp eax, ecx
lea r15, [rdi + r11*2]
mov rdx, r12
cmova eax, ecx
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x2a8], r15
movsxd r8, eax
mov qword [rsp + 0x118], rsi
call fcn.14001d7d8
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x2a8]
lea r8, str.0x_08I64X
call fcn.1400e6270
mov rcx, qword [rsp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, qword [rsp + 0x2a8]
lea rdx, [rax + rcx*2]
mov qword [rsp + 0x2a8], rdx
jmp 0x1400e14da
movsx ebx, bx
lea eax, [rbx + rbx*2]
lea ecx, [r13 + rax*2]
movsxd rdx, ecx
lea rcx, [rsp + 0x78]
call fcn.1400633a0
mov rdi, qword [rsp + 0x78]
movsxd r11, r13d
lea rax, [rdi + r11*2]
dec ebx
cmp ebx, esi
lea rdx, [rax + 2]
mov qword [rsp + 0x2a8], rax
mov r15, rax
jl 0x1400e14cc
movzx r8d, byte [r12]
lea rdx, [0x14012ab00]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, qword [rsp + 0x2a8]
inc r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
sub ebx, 1
movsxd rcx, eax
mov rax, qword [rsp + 0x2a8]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x2a8], rax
mov rdx, rax
jns 0x1400e1487
mov bx, word [rsp + 0x88]
sub rdx, r14
mov word [rdx], si
test byte [rsp + 0x40], r14b
je 0x1400e150d
cmp qword [rbp], rsi
je 0x1400e150d
mov eax, 0x20
mov word [rdx], ax
sub rdx, r15
add rdx, r14
sar rdx, 1
add r13d, edx
mov r12, qword [rbp]
cmp r12, rsi
je 0x1400e150d
add rbp, 8
jmp 0x1400e138f
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x2a0]
mov r8, rdi
call fcn.140062600
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
jmp 0x1400e25cb
mov qword [rsp + 0x108], rsi
cmp r12d, ebp
jne 0x1400e180b
mov rcx, qword [rsp + 0x2a8]
mov ebp, 0x80000000
mov edx, esi
movzx eax, word [rcx]
mov r11d, 4
and ax, r9w
cmp r10w, ax
jne 0x1400e1591
add rcx, r14
mov ebp, 0xc0000000
mov dword [rsp + 0x80], r11d
mov qword [rsp + 0x2a8], rcx
movzx eax, word [rcx]
mov edi, 0x45
and ax, r9w
cmp di, ax
jne 0x1400e15b8
add rcx, r14
mov dword [rsp + 0x80], 3
mov qword [rsp + 0x2a8], rcx
mov eax, 0x2d
cmp ax, word [rcx]
jne 0x1400e15d5
add rcx, r14
mov r13d, esi
mov edx, r15d
mov qword [rsp + 0x2a8], rcx
jmp 0x1400e15db
mov r13d, 7
movzx eax, word [rcx]
movsxd rdx, edx
cmp ax, si
je 0x1400e1644
mov r8d, 0x2c
lea r12d, [r8 + 0xf]
add rcx, r14
mov qword [rsp + 0x2a8], rcx
cmp r8w, ax
je 0x1400e163f
cmp r12w, ax
je 0x1400e163f
and ax, r9w
cmp rdx, rsi
je 0x1400e1637
mov edi, 0x52
cmp di, ax
jne 0x1400e161f
or r13d, r15d
jmp 0x1400e1637
cmp r10w, ax
jne 0x1400e162a
or r13d, r14d
jmp 0x1400e1637
mov edi, 0x44
cmp di, ax
jne 0x1400e1637
or r13d, r11d
mov ax, word [rcx]
cmp ax, si
jne 0x1400e15f0
mov r12d, dword [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.1400632a0
mov rcx, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov word [rsp + 0x20], ax
call fcn.140054624
mov rcx, qword [rsp + 0x70]
call fcn.14001be60
mov rdi, rax
cmp word [rax], si
jne 0x1400e16a2
lea rcx, [rsp + 0x70]
call fcn.14005aef8
cmp word [rsp + 0x5c], si
jne 0x1400e27e9
jmp 0x1400e2128
cmp dword [rsp + 0x80], 3
jne 0x1400e173c
cmp r13d, esi
je 0x1400e173c
mov eax, 0x5c
cmp ax, word [rdi]
jne 0x1400e1718
cmp ax, word [rdi + 2]
jne 0x1400e1718
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0x2b8]
xor r9d, r9d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003888
mov rcx, qword [rsp + 0x2b8]
cmp rcx, rsi
je 0x1400e1776
cmp rcx, 0xffffffffffffffff
je 0x1400e173c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e173c
mov rcx, rdi
call fcn.1401011e0
movabs rcx, 0x100000010
and rax, rcx
movabs rcx, 0x100000000
cmp rax, rcx
jne 0x1400e1776
mov ebx, dword [rsp + 0x80]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0x2b8]
mov r9d, r13d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003888
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e178c
lea rcx, [rsp + 0x70]
call fcn.14005aef8
jmp 0x1400e27d2
cmp rbx, rsi
jne 0x1400e17a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x70]
jmp 0x1400e25c9
lea rcx, [rsp + 0x70]
call fcn.14005aef8
mov r15, rsi
mov r13, qword [rsp + 0x2a0]
mov rbp, qword [rsp + 0x110]
mov dil, byte [rsp + 0x40]
cmp rbp, rsi
jne 0x1400e299c
mov al, dil
neg al
sbb rdx, rdx
and rdx, r13
mov r13, qword [rsp + 0xe8]
mov rcx, r13
call fcn.14001b3ec
mov rbp, qword [r13 + 0x40]
cmp rbp, rsi
jne 0x1400e29a4
cmp rbx, rsi
je 0x1400e2128
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e2128
cmp r12d, 0xfffffffe
jne 0x1400e1ecb
lea eax, [r12 + 6]
mov rbx, rsi
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x90], 0x80000000
mov dword [rsp + 0x68], esi
mov r15, rsi
mov dword [rsp + 0xa0], eax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x70], rsi
mov r12, rsi
mov qword [rsp + 0xb0], rsi
mov rbp, rsi
cmp dil, sil
je 0x1400e1879
mov dword [rsp + 0x60], eax
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0x90], 0xc0000000
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0xa8]
call fcn.1400632a0
lea rcx, [rsp + 0x78]
call fcn.1400632a0
mov r13, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e18fa
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2a8]
call fcn.140074228
mov rdx, qword [rsp + 0x2a8]
mov r15, qword [rsp + 0x70]
cmp word [rdx], si
je 0x1400e18fa
add rdx, r14
mov qword [rsp + 0x2a8], rdx
lea rcx, str._sm_
mov r8d, 4
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
mov rcx, qword [rsp + 0x2a8]
mov edi, esi
cmp eax, esi
sete dil
cmp edi, esi
je 0x1400e192d
add rcx, 8
mov qword [rsp + 0x2a8], rcx
cmp word [rcx], si
je 0x1400e1981
mov eax, 0x3b
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rcx, qword [rsp + 0x2a8]
cmp word [rcx], si
je 0x1400e1981
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2a8]
call fcn.140074228
mov rcx, qword [rsp + 0x2a8]
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0xa8]
cmp word [rax], si
je 0x1400e1eb4
cmp r15, rsi
jl 0x1400e1eb4
cmp rbx, rsi
jl 0x1400e1eb4
cmp word [rcx], si
je 0x1400e1a0d
add rcx, r14
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0x2a8], rcx
lea rcx, [rsp + 0x2a8]
call fcn.140007c18
mov rcx, qword [rsp + 0x2a8]
cmp eax, esi
mov dword [rsp + 0x68], eax
cmovg rbp, r15
mov qword [rsp + 0xb8], rbp
cmp word [rcx], si
je 0x1400e1a05
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x2a8]
call fcn.140007c18
mov rbp, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xb0]
or rax, 0xffffffffffffffff
mov r14, rsi
mov dword [rsp + 0x2b8], esi
mov dword [rsp + 0xb0], esi
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xe0], rax
cmp edi, esi
je 0x1400e1a4d
lea rdx, [0x14011d2e8]
lea rcx, [rsp + 0x48]
mov r9, rax
mov r8, rax
call fcn.14006345c
lea rax, str.pecmd2012.sm.
lea rdx, str.pecmd2012.shm.
cmp edi, esi
lea rcx, [rsp + 0x48]
cmovne rdx, rax
call fcn.1400633dc
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov r8, qword [rsp + 0x78]
lea r9, [rsp + 0x2b8]
movzx eax, word [r8]
neg ax
sbb r13d, r13d
not r13d
and r13d, 4
movsxd rax, r13d
mov dword [rsp + 0x70], r13d
add r15, rax
cmp edi, esi
mov edi, dword [rsp + 0x5c]
lea rdx, [r15 + rbx]
je 0x1400e1b22
mov rcx, qword [rsp + 0xa8]
movsx eax, di
mov dword [rsp + 0x2b8], eax
call fcn.1400748c0
mov rbx, rax
movzx eax, byte [rsp + 0x2b8]
mov dword [rsp + 0x2b8], eax
cmp di, si
je 0x1400e1b02
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
mov r15d, 1
jmp 0x1400e27e0
cmp rbx, rsi
je 0x1400e1c48
mov rax, qword [rbx]
mov dword [rsp + 0xb0], 0xfffffffe
mov r14, qword [rax + 0x18]
jmp 0x1400e1dd1
movzx eax, di
neg ax
sbb ecx, ecx
and ecx, 0x100
add ecx, 0x200
mov dword [rsp + 0x2b8], ecx
mov rcx, qword [rsp + 0xa8]
call fcn.1400748c0
movzx ecx, byte [rsp + 0x2b8]
mov dword [rsp + 0x2b8], ecx
mov r13, rax
cmp rax, rsi
je 0x1400e1b7e
mov rcx, qword [rax]
mov r14, qword [rcx + 0x18]
cmp di, si
je 0x1400e1b75
mov rbx, r14
jmp 0x1400e1ae0
cmp r14, rsi
jne 0x1400e1dc9
mov rdi, qword [rsp + 0x48]
mov ecx, dword [rsp + 0xa0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp word [rsp + 0x5c], si
jne 0x1400e1ae0
cmp r13, rsi
jne 0x1400e1bd3
cmp rbx, rsi
je 0x1400e1bbc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
jmp 0x1400e25cb
cmp rbx, rsi
jne 0x1400e1d5a
mov rcx, qword [rsp + 0x78]
cmp word [rcx], si
je 0x1400e1cb6
call fcn.14001be60
mov ecx, dword [rsp + 0x80]
mov r8d, dword [rsp + 0x90]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ecx
lea rcx, [rsp + 0xe0]
mov r9d, 7
mov rdx, rax
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003888
mov qword [rsp + 0xe0], rax
cmp rax, rsi
jne 0x1400e1cb6
mov edx, 0x200
mov rcx, r13
call fcn.14005e550
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x78]
mov edi, eax
cmp eax, esi
mov eax, 1
cmove edi, eax
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x48]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0xd0]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
mov eax, edi
jmp 0x1400e2aa7
xor edx, edx
lea rcx, [rsp + 0x119]
mov byte [rsp + 0x118], sil
lea r8d, [rdx + 0x27]
call fcn.140101f00
lea rax, [rsp + 0x118]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xf0], 0x18
mov dword [rsp + 0x100], esi
call fcn.14005e444
mov r9, qword [rsp + 0x50]
mov r8d, dword [rsp + 0x60]
lea r10, [r15 + r9]
mov qword [rsp + 0x28], rdi
mov rdi, qword [rsp + 0xe0]
mov r9, r10
lea rdx, [rsp + 0xf0]
mov rcx, rdi
shr r9, 0x20
mov dword [rsp + 0x20], r10d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbp, rsi
cmovle rbp, r15
mov dword [rsp + 0x2b8], 1
cmp rbx, rsi
je 0x1400e1d90
jmp 0x1400e1d62
mov rdi, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x60]
mov qword [rsp + 0x20], r15
and ecx, 4
mov r8, rdx
mov r9d, edx
or ecx, 8
sar r8, 0x20
shr ecx, 1
mov edx, ecx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r14, rax
cmp rdi, 0xffffffffffffffff
je 0x1400e1d9f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r13]
mov qword [rcx + 0x18], r14
cmp r14, rsi
jne 0x1400e1dc2
cmp rbx, rsi
je 0x1400e1dc9
cmp rbx, 0xffffffffffffffff
je 0x1400e1dc9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e1dc9
mov rax, qword [r13]
mov qword [rax], rbx
mov rbx, r13
mov r13d, dword [rsp + 0x70]
cmp r14, rsi
je 0x1400e1c48
mov r15, qword [rsp + 0xb8]
cmp dword [rsp + 0x2b8], esi
je 0x1400e1e93
cmp r13d, esi
je 0x1400e1e02
lea rcx, [r15 + r14]
movsxd r8, r13d
xor edx, edx
call fcn.140101f00
cmp dword [rsp + 0x2b8], esi
je 0x1400e1e93
cmp dword [rsp + 0x68], esi
jle 0x1400e1e93
cmp rbp, rsi
jle 0x1400e1e93
movabs rcx, 0x100000000
cmp r12, rcx
jb 0x1400e1e42
shr rbp, 3
sub rbp, 1
js 0x1400e1e93
lea rcx, [rbp + 1]
mov rdi, r14
mov rax, r12
rep stosq qword [rdi], rax
jmp 0x1400e1e93
cmp r12, 0x10000
jb 0x1400e1e63
shr rbp, 2
sub rbp, 1
js 0x1400e1e93
lea rcx, [rbp + 1]
mov eax, r12d
mov rdi, r14
rep stosd dword [rdi], eax
jmp 0x1400e1e93
cmp r12, 0x100
jb 0x1400e1e85
shr rbp, 1
sub rbp, 1
js 0x1400e1e93
lea rcx, [rbp + 1]
movzx eax, r12w
mov rdi, r14
rep stosw word [rdi], ax
jmp 0x1400e1e93
mov r8, rbp
mov edx, r12d
mov rcx, r14
call fcn.140101f00
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
mov r12d, dword [rsp + 0x58]
jmp 0x1400e17ae
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
jmp 0x1400e2123
cmp r12d, 0xfffffffc
jne 0x1400e20b4
lea rcx, [rsp + 0x80]
call fcn.1400632a0
lea rcx, [rsp + 0xb8]
call fcn.1400632a0
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x3f]
lea r9d, [r12 + 0x30]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0x80]
cmp word [rdx], si
jne 0x1400e1f37
mov rsi, 0xffffffff80070057
jmp 0x1400e2080
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x2b8], esi
mov dword [rsp + 0x90], esi
mov dword [rsp + 0x68], esi
call fcn.140007bf4
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, str.pecmd2012.event.
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov edi, dword [rsp + 0x5c]
cmp di, si
jne 0x1400e1fba
cmp dword [rsp + 0x2b8], esi
jne 0x1400e1ff9
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x68]
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov rbx, rax
cmp di, si
je 0x1400e1ff0
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
jmp 0x1400e1782
cmp rax, rsi
jne 0x1400e209a
xor edx, edx
lea rcx, [rsp + 0x201]
mov byte [rsp + 0x200], sil
lea r8d, [rdx + 0x27]
call fcn.140101f00
lea rax, [rsp + 0x200]
lea rcx, [rsp + 0x148]
mov qword [rsp + 0x148], rax
mov dword [rsp + 0x140], 0x18
mov dword [rsp + 0x150], esi
call fcn.14005e444
cmp dword [rsp + 0x2b8], esi
mov r9, qword [rsp + 0x48]
mov r8d, esi
setne r8b
cmp dword [rsp + 0x90], esi
mov edx, esi
lea rcx, [rsp + 0x140]
setne dl
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rbx, rax
cmp rax, rsi
jne 0x1400e209a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
jmp 0x1400e25cb
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
jmp 0x1400e2680
cmp r12d, 0xffffffe0
jne 0x1400e22c9
lea rcx, [rsp + 0x90]
call fcn.1400632a0
lea rcx, [rsp + 0x50]
call fcn.1400632a0
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x5b]
lea r9d, [r12 + 0x4c]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0x90]
cmp word [rdx], si
jne 0x1400e2134
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x90]
call fcn.14005aef8
mov rsi, 0xffffffff80070057
jmp 0x1400e2a66
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x2b8], r15d
mov dword [rsp + 0x70], esi
call fcn.140007bf4
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
mov ebp, dword [rsp + 0x2b8]
mov edi, dword [rsp + 0x68]
cmp ebp, r15d
lea rdx, str.pecmd2012.semaphore.
lea rcx, [rsp + 0x48]
cmovl ebp, r15d
cmp edi, ebp
cmovg edi, ebp
call fcn.1400633dc
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov r8, qword [rsp + 0x48]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e21eb
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x90]
jmp 0x1400e1782
cmp rax, rsi
jne 0x1400e22b2
xor edx, edx
lea rcx, [rsp + 0x189]
mov byte [rsp + 0x188], sil
lea r8d, [rdx + 0x27]
call fcn.140101f00
lea rax, [rsp + 0x188]
lea rcx, [rsp + 0x178]
mov qword [rsp + 0x178], rax
mov dword [rsp + 0x170], 0x18
mov dword [rsp + 0x180], esi
call fcn.14005e444
mov r9, qword [rsp + 0x48]
cmp edi, esi
cmovl edi, esi
mov edx, r15d
lea rcx, [rsp + 0x170]
cmp edi, esi
mov r8d, ebp
cmovg edx, edi
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov qword [rsp + 0x108], r13
cmp rbx, rsi
jne 0x1400e2299
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x90]
call fcn.14005aef8
mov rsi, r13
jmp 0x1400e2a66
cmp edi, r15d
jge 0x1400e22aa
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r13, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x90]
jmp 0x1400e2680
cmp r12d, 0xffffffc0
jne 0x1400e245f
lea rcx, [rsp + 0x68]
call fcn.1400632a0
lea rcx, [rsp + 0x50]
call fcn.1400632a0
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x7b]
lea r9d, [r12 + 0x6c]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0x68]
cmp word [rdx], si
jne 0x1400e2331
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x68]
jmp 0x1400e2123
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x2b8], esi
call fcn.140007bf4
lea rdx, str.pecmd2012.mutex.
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov r8, qword [rsp + 0x48]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e239d
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x68]
jmp 0x1400e1782
cmp rax, rsi
jne 0x1400e244b
xor edx, edx
lea rcx, [rsp + 0x1b1]
mov byte [rsp + 0x1b0], sil
lea r8d, [rdx + 0x27]
call fcn.140101f00
lea rax, [rsp + 0x1b0]
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x158], 0x18
mov dword [rsp + 0x168], esi
call fcn.14005e444
mov ecx, dword [rsp + 0x2b8]
mov r8, qword [rsp + 0x48]
cmp ecx, esi
mov edx, esi
cmovl ecx, esi
cmp ecx, esi
lea rcx, [rsp + 0x158]
setg dl
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov qword [rsp + 0x108], r13
cmp rbx, rsi
jne 0x1400e2443
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x68]
jmp 0x1400e228c
mov r13, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call fcn.14005aef8
lea rcx, [rsp + 0x68]
jmp 0x1400e2680
cmp r12d, 0xfffffff8
jne 0x1400e269f
lea rcx, [rsp + 0xa0]
call fcn.1400632a0
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x43]
lea r9d, [r12 + 0x34]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0xa0]
cmp word [rdx], si
jne 0x1400e24bf
lea rcx, [rsp + 0xa0]
jmp 0x1400e2123
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x80], esi
call fcn.140007bf4
mov eax, dword [rsp + 0x80]
lea rdx, [rsp + 0x2b8]
neg eax
sbb ecx, ecx
and ecx, ebp
mov dword [rsp + 0x2b8], ecx
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, str..mailslotpecmd2012.mailslot.
lea rcx, [rsp + 0x48]
mov r9, rbp
mov r8, rbp
call fcn.14006345c
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
xor edx, edx
lea rcx, [rsp + 0x1d9]
lea r8d, [rdx + 0x27]
mov byte [rsp + 0x1d8], sil
call fcn.140101f00
lea rax, [rsp + 0x1d8]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xf0], 0x18
mov dword [rsp + 0x100], esi
call fcn.14005e444
mov ebp, dword [rsp + 0x5c]
cmp bp, si
jne 0x1400e25d5
cmp dword [rsp + 0x80], esi
je 0x1400e25d5
mov r8d, dword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x48]
lea r9, [rsp + 0xf0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400e25b2
mov rbx, rsi
cmp rbx, rsi
jne 0x1400e2678
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xa0]
mov esi, eax
call fcn.14005aef8
jmp 0x1400e2a66
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0xf0]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], 0x80
mov edi, eax
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp bp, si
jne 0x1400e268d
cmp rbx, 0xffffffffffffffff
jne 0x1400e25b2
cmp dword [rsp + 0x2b8], 0xffffffff
je 0x1400e263a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, dword [rsp + 0x2b8]
jae 0x1400e25af
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0xf0]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
jmp 0x1400e2615
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
mov r15, rsi
jmp 0x1400e17b6
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
jmp 0x1400e27ca
cmp r12d, 0xfffffff0
jne 0x1400e28dc
lea rcx, [rsp + 0x60]
call fcn.1400632a0
lea rcx, [rsp + 0x2b8]
call fcn.1400632a0
mov rcx, qword [rsp + 0x2a0]
lea eax, [r12 + 0x4b]
lea r9d, [r12 + 0x3c]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x2a8]
mov word [rsp + 0x20], ax
call fcn.140054624
mov rdx, qword [rsp + 0x60]
cmp word [rdx], si
jne 0x1400e270a
lea rcx, [rsp + 0x2b8]
call fcn.14005aef8
lea rcx, [rsp + 0x60]
jmp 0x1400e2123
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
call fcn.140007bf4
lea rdx, str..pipepecmd2012.pipe.
lea rcx, [rsp + 0x48]
mov r9, rbp
mov r8, rbp
call fcn.14006345c
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x48]
call fcn.1400633dc
mov r13d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x68]
lea rcx, [rsp + 0x2b8]
cmp r13w, si
mov rbx, rbp
cmovne edi, esi
call fcn.14005aef8
lea rcx, [rsp + 0x60]
call fcn.14005aef8
mov ebp, dword [rsp + 0x90]
mov eax, 4
test al, dil
jne 0x1400e27fc
mov rcx, qword [rsp + 0x48]
mov eax, edi
mov r8d, esi
and eax, 3
mov edx, ebp
cmp al, 3
sete r8b
call fcn.14005e474
mov rbx, rax
cmp r13w, si
je 0x1400e27fc
cmp rbx, 0xffffffffffffffff
cmove rbx, rsi
cmp rbx, rsi
je 0x1400e27e9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rbx, rsi
jne 0x1400e2a66
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
cmove eax, r15d
mov esi, eax
jmp 0x1400e2a66
xor edx, edx
lea rcx, [rsp + 0x229]
mov byte [rsp + 0x228], sil
lea r8d, [rdx + 0x27]
call fcn.140101f00
lea rax, [rsp + 0x228]
lea rcx, [rsp + 0x120]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x118], 0x18
mov dword [rsp + 0x128], esi
call fcn.14005e444
test r14b, dil
jne 0x1400e28b5
cmp rbx, 0xffffffffffffffff
jne 0x1400e17ab
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x118]
lea edx, [rbx + 4]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], eax
mov r9d, 0xff
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov rbx, rax
test r15b, dil
je 0x1400e28a9
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp eax, esi
jne 0x1400e28a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbx, 0xffffffffffffffff
je 0x1400e28bb
mov r12d, 0xffffffef
cmp rbx, 0xffffffffffffffff
jne 0x1400e28be
mov rbx, rsi
cmp r12d, 0xfffffff0
je 0x1400e17ab
cmp rbx, rsi
jne 0x1400e17ab
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400e27f5
mov rax, qword [rsp + 0x2a8]
cmp word [rax], si
je 0x1400e2976
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2a8]
call fcn.140074228
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e2971
add rdx, r14
lea rcx, [rsp + 0x2a8]
mov qword [rsp + 0x2a8], rdx
lea rdx, [rsp + 0x60]
call fcn.140074498
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e296c
add rdx, r14
lea rcx, [rsp + 0x2a8]
mov qword [rsp + 0x2a8], rdx
lea rdx, [rsp + 0x70]
call fcn.140074498
mov r8d, dword [rsp + 0x70]
mov r14, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x60]
mov dword [rsp + 0xb0], r8d
jmp 0x1400e297c
mov r12d, dword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov r8d, 6
mov edx, r12d
mov ecx, r14d
call qword [0x14013d4f0]
cmp rax, rsi
mov rbx, rax
jg 0x1400e17ab
mov rsi, r15
jmp 0x1400e2a66
mov r13, qword [rsp + 0xe8]
cmp dil, sil
jne 0x1400e29bc
cmp byte [rsp + 0x88], sil
jne 0x1400e29bc
mov rdi, qword [rbp + 0x280]
jmp 0x1400e29bf
mov rdi, r13
cmp word [rsp + 0xd8], si
je 0x1400e2a2e
lea rdx, [0x14012aa28]
lea rcx, [rsp + 0x2b8]
call fcn.14006ff14
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x2b8]
call fcn.1400633dc
lea rdx, [0x14012aa18]
lea rcx, [rsp + 0x2b8]
call fcn.1400633dc
mov r9, qword [rsp + 0x2b0]
mov rdx, qword [rsp + 0x2b8]
xor r8d, r8d
mov rcx, r13
call fcn.1400dc318
lea rcx, [rsp + 0x2b8]
call fcn.14005aef8
mov eax, dword [rsp + 0xb0]
mov qword [rsp + 0x38], r15
lea r8, [rsp + 0x98]
mov dword [rsp + 0x30], eax
mov r9, rbx
mov rdx, rdi
mov rcx, rbp
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r14
call fcn.140063ddc
mov rsi, qword [rsp + 0x108]
lea rcx, [rsp + 0x48]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0xd0]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
mov rax, rsi
add rsp, 0x258
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret