Function at 0x1400e1228
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Connect pipe
Create mailslot
Create pipe
Read file via mapping

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x258
lea rcx, [rax + 0x20]
call fcn.14005cfd0
lea rcx, [rsp + 0x2b8]
call fcn.14005cfc0
xor esi, esi
cmp eax, esi
jne 0x1400e126e
lea eax, [rsi + 1]
jmp 0x1400e3273
lea rcx, [rsp + 0x2b8]
call fcn.14005d2a4
lea rcx, [rsp + 0x98]
call fcn.140063620
lea rcx, [rsp + 0xd0]
call fcn.140063620
lea rcx, [rsp + 0xc0]
call fcn.140063620
lea rcx, [rsp + 0xc8]
call fcn.140063620
mov r14d, 2
lea rcx, [rsp + 0x2a8]
lea eax, [r14 + 4]
lea r15d, [r14 - 1]
mov r13w, si
mov rbx, rsi
mov qword [rsp + 0x50], r14
mov word [rsp + 0x5c], si
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0xb0], eax
mov dword [rsp + 0x70], eax
mov word [rsp + 0xd8], si
mov r12w, si
mov dword [rsp + 0x88], r13d
mov rbp, rsi
call fcn.14005b154
mov rdi, qword [rsp + 0x2a8]
lea edx, [r14 + 0x2b]
mov r11b, sil
mov byte [rsp + 0x2b8], sil
mov dword [rsp + 0x80], 3
lea r8d, [r14 + 2]
lea eax, [rdx - 3]
cmp dx, word [rdi]
jne 0x1400e16dc
lea ebx, [rdx - 0x24]
cmp dx, word [rdi + 2]
jne 0x1400e16d4
lea rcx, str.__gethostbyname
mov r8d, 0xf
mov rdx, rdi
call fcn.14005c788
cmp al, sil
je 0x1400e1400
add rdi, 0x1e
mov qword [rsp + 0x2a8], rdi
movzx eax, word [rdi]
cmp ax, si
je 0x1400e138f
cmp bx, ax
ja 0x1400e1383
cmp ax, 0xd
jbe 0x1400e138f
mov edx, 0x20
cmp dx, ax
jne 0x1400e139f
jmp 0x1400e1394
mov edx, 0x20
mov r11b, r15b
mov byte [rsp + 0x2b8], r15b
cmp ax, si
je 0x1400e16a3
mov ecx, 0x2a
lea r13d, [rcx - 7]
lea r8d, [rcx - 0x26]
cmp bx, ax
ja 0x1400e13c0
cmp ax, 0xd
jbe 0x1400e13eb
cmp dx, ax
je 0x1400e13eb
cmp cx, ax
jne 0x1400e13cf
or r11b, r14b
jmp 0x1400e13d8
cmp r13w, ax
jne 0x1400e13d8
or r11b, r8b
add rdi, r14
mov qword [rsp + 0x2a8], rdi
mov ax, word [rdi]
cmp ax, si
jne 0x1400e13b5
mov r13d, dword [rsp + 0x88]
mov byte [rsp + 0x2b8], r11b
jmp 0x1400e16a3
mov ebx, 6
lea rdx, [rsp + 0x2a8]
lea rcx, str.__file
mov r8d, ebx
call fcn.1400660ac
cmp al, sil
je 0x1400e1436
or ebx, 0xffffffff
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x60], ebx
mov ebx, 9
jmp 0x1400e16b0
lea rdx, [rsp + 0x2a8]
lea rcx, str.__shm
mov r8d, 5
call fcn.1400660ac
cmp al, sil
je 0x1400e1464
mov eax, 0xfffffffe
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x60], eax
jmp 0x1400e142c
mov edi, 7
lea rdx, [rsp + 0x2a8]
lea rcx, str.__event
mov r8d, edi
call fcn.1400660ac
cmp al, sil
je 0x1400e148a
lea eax, [rdi - 0xb]
jmp 0x1400e145a
lea rdx, [rsp + 0x2a8]
lea rcx, str.__semaphore
mov r8d, 0xb
call fcn.1400660ac
cmp al, sil
je 0x1400e14b0
mov eax, 0xffffffe0
jmp 0x1400e145a
lea rdx, [rsp + 0x2a8]
lea rcx, str.__sem
mov r8d, 5
call fcn.1400660ac
cmp al, sil
jne 0x1400e14a9
lea rdx, [rsp + 0x2a8]
lea rcx, str.__mutex
mov r8d, edi
call fcn.1400660ac
cmp al, sil
je 0x1400e14f5
mov eax, 0xffffffc0
jmp 0x1400e145a
lea rdx, [rsp + 0x2a8]
lea rcx, str.__mailslot
mov r8d, 0xa
call fcn.1400660ac
cmp al, sil
je 0x1400e151e
mov eax, 0xfffffff8
jmp 0x1400e145a
lea rdx, [rsp + 0x2a8]
lea rcx, str.__pipe
mov r8d, ebx
call fcn.1400660ac
cmp al, sil
je 0x1400e1544
mov eax, 0xfffffff0
jmp 0x1400e145a
lea rdx, [rsp + 0x2a8]
lea rcx, str.__exist
mov r8d, edi
call fcn.1400660ac
cmp al, sil
je 0x1400e156d
mov dword [rsp + 0x5c], 0x100
jmp 0x1400e142c
lea rdx, [rsp + 0x2a8]
lea rcx, str.__only
mov r8d, ebx
call fcn.1400660ac
cmp al, sil
je 0x1400e1596
mov dword [rsp + 0xd8], r15d
jmp 0x1400e142c
lea rdx, [rsp + 0x2a8]
lea rcx, str.__unknown
mov r8d, 9
call fcn.1400660ac
cmp al, sil
je 0x1400e15bf
mov ebp, 3
jmp 0x1400e142c
lea rdx, [rsp + 0x2a8]
lea rcx, str.__BSTRVT
mov r8d, 8
call fcn.1400660ac
cmp al, sil
je 0x1400e15e8
mov ebp, 0x102
jmp 0x1400e142c
lea rdx, [rsp + 0x2a8]
lea rcx, str.__BSTRVT
mov r8d, ebx
call fcn.1400660ac
cmp al, sil
je 0x1400e160e
mov ebp, 0x100
jmp 0x1400e142c
lea rdx, [rsp + 0x2a8]
lea rcx, [0x14012ab70]
mov r8d, 3
call fcn.1400660ac
cmp al, sil
je 0x1400e163c
mov r8d, 4
mov r12d, r8d
lea ebx, [r8 + 5]
jmp 0x1400e16b6
lea rdx, [rsp + 0x2a8]
lea rcx, str.__reset
mov r8d, edi
call fcn.1400660ac
cmp al, sil
je 0x1400e1668
mov r13d, r15d
mov dword [rsp + 0x88], r15d
jmp 0x1400e142c
mov rcx, qword [rsp + 0x2a8]
mov ebx, 9
movzx eax, word [rcx]
cmp ax, si
je 0x1400e16a3
lea edx, [rbx + 0x17]
cmp bx, ax
ja 0x1400e168b
cmp ax, 0xd
jbe 0x1400e16a3
cmp dx, ax
je 0x1400e16a3
add rcx, r14
mov qword [rsp + 0x2a8], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x1400e1680
lea rcx, [rsp + 0x2a8]
call fcn.14005b154
mov r8d, 4
mov rdi, qword [rsp + 0x2a8]
mov r11b, byte [rsp + 0x2b8]
mov edx, 0x2d
cmp dx, word [rdi]
je 0x1400e133c
mov rbx, rsi
mov eax, 0x2a
mov byte [rsp + 0x88], sil
cmp ax, word [rdi]
jne 0x1400e1711
add rdi, r14
lea rcx, [rsp + 0x2a8]
mov byte [rsp + 0x88], r15b
mov qword [rsp + 0x2a8], rdi
call fcn.14005b154
mov rdi, qword [rsp + 0x2a8]
mov rax, qword [rsp + 0x2b0]
mov rcx, qword [rsp + 0x2a0]
or dword [rsp + 0x90], 0xffffffff
mov qword [rsp + 0x110], rax
mov eax, 0x3a
mov qword [rsp + 0xe8], rcx
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x48], rsi
mov dword [rsp + 0xa0], 0x100000
mov dword [rsp + 0x68], 0x80000001
cmp ax, word [rdi]
jne 0x1400e1794
cmp ax, word [rdi + 2]
jne 0x1400e1794
lea rax, [0x14013d130]
add rdi, r8
mov byte [rsp + 0x40], r15b
mov qword [rsp + 0xe8], rax
mov rax, qword [0x14013d170]
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x110], rax
mov edx, 0x3b
lea r8, [rsp + 0x98]
lea eax, [rdx - 0xf]
mov word [rsp + 0x20], dx
lea rdx, [rsp + 0x2a8]
mov r9d, eax
call fcn.1400547bc
cmp rbp, rsi
je 0x1400e197d
bt rbp, 8
mov rdi, qword [rsp + 0x98]
mov rbx, rsi
mov qword [rsp + 0x2b8], rbx
jae 0x1400e18f4
cmp r13w, si
je 0x1400e1830
call fcn.140061bf4
lea rcx, [rsp + 0x48]
call fcn.14005b104
lea rcx, [rsp + 0xc8]
call fcn.14005b104
lea rcx, [rsp + 0xc0]
call fcn.14005b104
lea rcx, [rsp + 0xd0]
call fcn.14005b104
lea rcx, [rsp + 0x98]
call fcn.14005b104
xor eax, eax
jmp 0x1400e3273
cmp word [rdi], si
jne 0x1400e183b
mov r12d, 0xfffffffd
mov rax, qword [rsp + 0x2a8]
mov ecx, 0x2a
cmp cx, word [rax]
jne 0x1400e1860
cmp bpl, sil
jne 0x1400e1855
or rbp, r15
add rax, r14
mov qword [rsp + 0x2a8], rax
mov ecx, 0x2c
cmp cx, word [rax]
je 0x1400e1874
cmp r12w, si
jge 0x1400e18f4
call fcn.140061c44
call fcn.1400038fc
cmp r12w, si
jl 0x1400e17eb
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x2b8], rsi
add rax, r14
cmp r12w, si
mov r12, qword [rsp + 0x2a0]
mov qword [rsp + 0x2a8], rax
jle 0x1400e18cc
lea r8, [rsp + 0x2b8]
mov rdx, rax
mov rcx, r12
call fcn.140028484
mov qword [rsp + 0x2a8], rax
cmp rax, rsi
je 0x1400e18dd
mov rcx, rax
call qword [0x14013c978]
mov rbx, rax
lea rcx, [rsp + 0x2b8]
call fcn.14005b104
mov rdi, qword [rsp + 0x98]
jmp 0x1400e1919
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
call fcn.140067cf4
mov rbx, qword [rsp + 0x2b8]
mov r12, qword [rsp + 0x2a0]
cmp word [rdi], si
je 0x1400e1934
mov r9, rbp
mov r8, rdi
mov rdx, rbx
mov rcx, r12
call fcn.1400402ec
cmp rax, rsi
jne 0x1400e1937
mov esi, r15d
lea rcx, [rsp + 0x48]
call fcn.14005b104
lea rcx, [rsp + 0xc8]
call fcn.14005b104
lea rcx, [rsp + 0xc0]
call fcn.14005b104
lea rcx, [rsp + 0xd0]
call fcn.14005b104
lea rcx, [rsp + 0x98]
call fcn.14005b104
movsxd rax, esi
jmp 0x1400e3273
mov r12d, dword [rsp + 0x58]
mov dil, sil
mov r9d, 0xffdf
mov r10d, 0x57
cmp r12d, 0xfffffffe
jne 0x1400e19eb
mov rcx, qword [rsp + 0x2a8]
movzx eax, word [rcx]
and ax, r9w
cmp r10w, ax
jne 0x1400e19ba
add rcx, r14
mov dil, r15b
mov qword [rsp + 0x2a8], rcx
movzx eax, word [rcx]
cmp ax, si
je 0x1400e1a05
mov edx, 0x2c
lea r8d, [rdx + 0xf]
add rcx, r14
mov qword [rsp + 0x2a8], rcx
cmp dx, ax
je 0x1400e1a05
cmp r8w, ax
je 0x1400e1a05
mov ax, word [rcx]
cmp ax, si
jne 0x1400e19cb
jmp 0x1400e1a05
cmp r12d, 0xfffffffc
je 0x1400e19fd
cmp r12d, 0xffffffe0
je 0x1400e19fd
cmp r12d, 0xffffffc0
jne 0x1400e1a5f
mov rcx, qword [rsp + 0x2a8]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x1400e1a41
add rcx, r14
lea rdx, str.Local_
mov qword [rsp + 0x2a8], rcx
or rbp, 0xffffffffffffffff
lea rcx, [rsp + 0x48]
mov r8, rbp
mov r9, rbp
call fcn.1400637dc
mov r9d, 0xffdf
lea r10d, [rbp + 0x58]
jmp 0x1400e1a63
mov eax, 0x23
cmp ax, word [rcx]
jne 0x1400e1a56
add rcx, r14
mov qword [rsp + 0x2a8], rcx
lea rdx, [0x14012a648]
jmp 0x1400e1a21
or rbp, 0xffffffffffffffff
cmp byte [rsp + 0x2b8], sil
je 0x1400e1d12
lea rcx, [rsp + 0xd8]
call fcn.140063620
mov rcx, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x50]
mov ebx, 4
mov r9, rbp
mov r8, rbp
mov r13d, esi
mov qword [rsp + 0x50], rsi
mov word [rsp + 0x88], bx
call fcn.14006355c
lea rcx, [rsp + 0x78]
call fcn.140063620
mov rdi, qword [rsp + 0x50]
mov dword [rsp + 0xb0], esi
lea r12, [rsp + 0xb0]
mov byte [rsp + 0x40], r15b
mov rbp, rsi
cmp rdi, rsi
je 0x1400e1b5b
cmp byte [rdi], sil
je 0x1400e1b22
mov rcx, rdi
call qword [0x14013d580]
mov dword [rsp + 0xb0], eax
cmp eax, 0xffffffff
jne 0x1400e1b5b
mov dword [rsp + 0xb0], esi
mov rcx, rdi
call qword [0x14013d588]
cmp rax, rsi
je 0x1400e1b5b
mov rbp, qword [rax + 0x18]
movzx ebx, word [rax + 0x12]
mov word [rsp + 0x88], bx
cmp qword [rbp], rsi
je 0x1400e1b5b
mov al, byte [rsp + 0x2b8]
mov rdi, qword [rsp + 0x78]
mov byte [rsp + 0x40], al
jmp 0x1400e1cc7
mov eax, 4
test byte [rsp + 0x2b8], al
je 0x1400e1c1a
lea eax, [r13 + 0x3e]
lea rcx, [rsp + 0x78]
movsxd rdx, eax
call fcn.140063720
mov rdi, qword [rsp + 0x78]
xor eax, eax
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
movsx eax, bx
mov ecx, 0x20
movsxd r11, r13d
cmp eax, ecx
lea r15, [rdi + r11*2]
mov rdx, r12
cmova eax, ecx
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x2a8], r15
movsxd r8, eax
mov qword [rsp + 0x118], rsi
call fcn.14001d78c
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x2a8]
lea r8, str.0x_08I64X
call fcn.1400e6d38
mov rcx, qword [rsp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
mov rax, qword [rsp + 0x2a8]
lea rdx, [rax + rcx*2]
mov qword [rsp + 0x2a8], rdx
jmp 0x1400e1ca6
movsx ebx, bx
lea eax, [rbx + rbx*2]
lea ecx, [r13 + rax*2]
movsxd rdx, ecx
lea rcx, [rsp + 0x78]
call fcn.140063720
mov rdi, qword [rsp + 0x78]
movsxd r11, r13d
lea rax, [rdi + r11*2]
dec ebx
cmp ebx, esi
lea rdx, [rax + 2]
mov qword [rsp + 0x2a8], rax
mov r15, rax
jl 0x1400e1c98
movzx r8d, byte [r12]
lea rdx, [0x14012ab60]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, qword [rsp + 0x2a8]
inc r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
sub ebx, 1
movsxd rcx, eax
mov rax, qword [rsp + 0x2a8]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x2a8], rax
mov rdx, rax
jns 0x1400e1c53
mov bx, word [rsp + 0x88]
sub rdx, r14
mov word [rdx], si
test byte [rsp + 0x40], r14b
je 0x1400e1cd9
cmp qword [rbp], rsi
je 0x1400e1cd9
mov eax, 0x20
mov word [rdx], ax
sub rdx, r15
add rdx, r14
sar rdx, 1
add r13d, edx
mov r12, qword [rbp]
cmp r12, rsi
je 0x1400e1cd9
add rbp, 8
jmp 0x1400e1b5b
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x2a0]
mov r8, rdi
call fcn.1400629b8
lea rcx, [rsp + 0x78]
call fcn.14005b104
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0xd8]
jmp 0x1400e2d97
mov qword [rsp + 0x108], rsi
cmp r12d, ebp
jne 0x1400e1fd7
mov rcx, qword [rsp + 0x2a8]
mov ebp, 0x80000000
mov edx, esi
movzx eax, word [rcx]
mov r11d, 4
and ax, r9w
cmp r10w, ax
jne 0x1400e1d5d
add rcx, r14
mov ebp, 0xc0000000
mov dword [rsp + 0x80], r11d
mov qword [rsp + 0x2a8], rcx
movzx eax, word [rcx]
mov edi, 0x45
and ax, r9w
cmp di, ax
jne 0x1400e1d84
add rcx, r14
mov dword [rsp + 0x80], 3
mov qword [rsp + 0x2a8], rcx
mov eax, 0x2d
cmp ax, word [rcx]
jne 0x1400e1da1
add rcx, r14
mov r13d, esi
mov edx, r15d
mov qword [rsp + 0x2a8], rcx
jmp 0x1400e1da7
mov r13d, 7
movzx eax, word [rcx]
movsxd rdx, edx
cmp ax, si
je 0x1400e1e10
mov r8d, 0x2c
lea r12d, [r8 + 0xf]
add rcx, r14
mov qword [rsp + 0x2a8], rcx
cmp r8w, ax
je 0x1400e1e0b
cmp r12w, ax
je 0x1400e1e0b
and ax, r9w
cmp rdx, rsi
je 0x1400e1e03
mov edi, 0x52
cmp di, ax
jne 0x1400e1deb
or r13d, r15d
jmp 0x1400e1e03
cmp r10w, ax
jne 0x1400e1df6
or r13d, r14d
jmp 0x1400e1e03
mov edi, 0x44
cmp di, ax
jne 0x1400e1e03
or r13d, r11d
mov ax, word [rcx]
cmp ax, si
jne 0x1400e1dbc
mov r12d, dword [rsp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.140063620
mov rcx, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rcx, qword [rsp + 0x70]
call fcn.14001be14
mov rdi, rax
cmp word [rax], si
jne 0x1400e1e6e
lea rcx, [rsp + 0x70]
call fcn.14005b104
cmp word [rsp + 0x5c], si
jne 0x1400e2fb5
jmp 0x1400e28f4
cmp dword [rsp + 0x80], 3
jne 0x1400e1f08
cmp r13d, esi
je 0x1400e1f08
mov eax, 0x5c
cmp ax, word [rdi]
jne 0x1400e1ee4
cmp ax, word [rdi + 2]
jne 0x1400e1ee4
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0x2b8]
xor r9d, r9d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003864
mov rcx, qword [rsp + 0x2b8]
cmp rcx, rsi
je 0x1400e1f42
cmp rcx, 0xffffffffffffffff
je 0x1400e1f08
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e1f08
mov rcx, rdi
call fcn.140101d74
movabs rcx, 0x100000010
and rax, rcx
movabs rcx, 0x100000000
cmp rax, rcx
jne 0x1400e1f42
mov ebx, dword [rsp + 0x80]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
lea rcx, [rsp + 0x2b8]
mov r9d, r13d
mov r8d, ebp
mov rdx, rdi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x2b8], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003864
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e1f58
lea rcx, [rsp + 0x70]
call fcn.14005b104
jmp 0x1400e2f9e
cmp rbx, rsi
jne 0x1400e1f6d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x70]
jmp 0x1400e2d95
lea rcx, [rsp + 0x70]
call fcn.14005b104
mov r15, rsi
mov r13, qword [rsp + 0x2a0]
mov rbp, qword [rsp + 0x110]
mov dil, byte [rsp + 0x40]
cmp rbp, rsi
jne 0x1400e3168
mov al, dil
neg al
sbb rdx, rdx
and rdx, r13
mov r13, qword [rsp + 0xe8]
mov rcx, r13
call fcn.14001b3a0
mov rbp, qword [r13 + 0x40]
cmp rbp, rsi
jne 0x1400e3170
cmp rbx, rsi
je 0x1400e28f4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e28f4
cmp r12d, 0xfffffffe
jne 0x1400e2697
lea eax, [r12 + 6]
mov rbx, rsi
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x90], 0x80000000
mov dword [rsp + 0x68], esi
mov r15, rsi
mov dword [rsp + 0xa0], eax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x70], rsi
mov r12, rsi
mov qword [rsp + 0xb0], rsi
mov rbp, rsi
cmp dil, sil
je 0x1400e2045
mov dword [rsp + 0x60], eax
mov dword [rsp + 0xa0], 6
mov dword [rsp + 0x90], 0xc0000000
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0xa8]
call fcn.140063620
lea rcx, [rsp + 0x78]
call fcn.140063620
mov r13, qword [rsp + 0x2a0]
mov eax, 0x3b
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e20c6
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2a8]
call fcn.1400745c8
mov rdx, qword [rsp + 0x2a8]
mov r15, qword [rsp + 0x70]
cmp word [rdx], si
je 0x1400e20c6
add rdx, r14
mov qword [rsp + 0x2a8], rdx
lea rcx, str._sm_
mov r8d, 4
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
mov rcx, qword [rsp + 0x2a8]
mov edi, esi
cmp eax, esi
sete dil
cmp edi, esi
je 0x1400e20f9
add rcx, 8
mov qword [rsp + 0x2a8], rcx
cmp word [rcx], si
je 0x1400e214d
mov eax, 0x3b
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x2a8]
lea r9d, [rax - 0xf]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rcx, qword [rsp + 0x2a8]
cmp word [rcx], si
je 0x1400e214d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2a8]
call fcn.1400745c8
mov rcx, qword [rsp + 0x2a8]
mov rbx, qword [rsp + 0x50]
mov rax, qword [rsp + 0xa8]
cmp word [rax], si
je 0x1400e2680
cmp r15, rsi
jl 0x1400e2680
cmp rbx, rsi
jl 0x1400e2680
cmp word [rcx], si
je 0x1400e21d9
add rcx, r14
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0x2a8], rcx
lea rcx, [rsp + 0x2a8]
call fcn.1400a9a84
mov rcx, qword [rsp + 0x2a8]
cmp eax, esi
mov dword [rsp + 0x68], eax
cmovg rbp, r15
mov qword [rsp + 0xb8], rbp
cmp word [rcx], si
je 0x1400e21d1
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x2a8]
call fcn.1400a9a84
mov rbp, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xb0]
or rax, 0xffffffffffffffff
mov r14, rsi
mov dword [rsp + 0x2b8], esi
mov dword [rsp + 0xb0], esi
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xe0], rax
cmp edi, esi
je 0x1400e2219
lea rdx, [0x14011d308]
lea rcx, [rsp + 0x48]
mov r9, rax
mov r8, rax
call fcn.1400637dc
lea rax, str.pecmd2012.sm.
lea rdx, str.pecmd2012.shm.
cmp edi, esi
lea rcx, [rsp + 0x48]
cmovne rdx, rax
call fcn.14006375c
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov r8, qword [rsp + 0x78]
lea r9, [rsp + 0x2b8]
movzx eax, word [r8]
neg ax
sbb r13d, r13d
not r13d
and r13d, 4
movsxd rax, r13d
mov dword [rsp + 0x70], r13d
add r15, rax
cmp edi, esi
mov edi, dword [rsp + 0x5c]
lea rdx, [r15 + rbx]
je 0x1400e22ee
mov rcx, qword [rsp + 0xa8]
movsx eax, di
mov dword [rsp + 0x2b8], eax
call fcn.140074c60
mov rbx, rax
movzx eax, byte [rsp + 0x2b8]
mov dword [rsp + 0x2b8], eax
cmp di, si
je 0x1400e22ce
lea rcx, [rsp + 0x78]
call fcn.14005b104
lea rcx, [rsp + 0xa8]
call fcn.14005b104
mov r15d, 1
jmp 0x1400e2fac
cmp rbx, rsi
je 0x1400e2414
mov rax, qword [rbx]
mov dword [rsp + 0xb0], 0xfffffffe
mov r14, qword [rax + 0x18]
jmp 0x1400e259d
movzx eax, di
neg ax
sbb ecx, ecx
and ecx, 0x100
add ecx, 0x200
mov dword [rsp + 0x2b8], ecx
mov rcx, qword [rsp + 0xa8]
call fcn.140074c60
movzx ecx, byte [rsp + 0x2b8]
mov dword [rsp + 0x2b8], ecx
mov r13, rax
cmp rax, rsi
je 0x1400e234a
mov rcx, qword [rax]
mov r14, qword [rcx + 0x18]
cmp di, si
je 0x1400e2341
mov rbx, r14
jmp 0x1400e22ac
cmp r14, rsi
jne 0x1400e2595
mov rdi, qword [rsp + 0x48]
mov ecx, dword [rsp + 0xa0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp word [rsp + 0x5c], si
jne 0x1400e22ac
cmp r13, rsi
jne 0x1400e239f
cmp rbx, rsi
je 0x1400e2388
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x78]
call fcn.14005b104
lea rcx, [rsp + 0xa8]
jmp 0x1400e2d97
cmp rbx, rsi
jne 0x1400e2526
mov rcx, qword [rsp + 0x78]
cmp word [rcx], si
je 0x1400e2482
call fcn.14001be14
mov ecx, dword [rsp + 0x80]
mov r8d, dword [rsp + 0x90]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ecx
lea rcx, [rsp + 0xe0]
mov r9d, 7
mov rdx, rax
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003864
mov qword [rsp + 0xe0], rax
cmp rax, rsi
jne 0x1400e2482
mov edx, 0x200
mov rcx, r13
call fcn.14005e8e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x78]
mov edi, eax
cmp eax, esi
mov eax, 1
cmove edi, eax
call fcn.14005b104
lea rcx, [rsp + 0xa8]
call fcn.14005b104
lea rcx, [rsp + 0x48]
call fcn.14005b104
lea rcx, [rsp + 0xc8]
call fcn.14005b104
lea rcx, [rsp + 0xc0]
call fcn.14005b104
lea rcx, [rsp + 0xd0]
call fcn.14005b104
lea rcx, [rsp + 0x98]
call fcn.14005b104
mov eax, edi
jmp 0x1400e3273
xor edx, edx
lea rcx, [rsp + 0x119]
mov byte [rsp + 0x118], sil
lea r8d, [rdx + 0x27]
call fcn.140102a90
lea rax, [rsp + 0x118]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xf0], 0x18
mov dword [rsp + 0x100], esi
call fcn.14005e7dc
mov r9, qword [rsp + 0x50]
mov r8d, dword [rsp + 0x60]
lea r10, [r15 + r9]
mov qword [rsp + 0x28], rdi
mov rdi, qword [rsp + 0xe0]
mov r9, r10
lea rdx, [rsp + 0xf0]
mov rcx, rdi
shr r9, 0x20
mov dword [rsp + 0x20], r10d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbp, rsi
cmovle rbp, r15
mov dword [rsp + 0x2b8], 1
cmp rbx, rsi
je 0x1400e255c
jmp 0x1400e252e
mov rdi, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x60]
mov qword [rsp + 0x20], r15
and ecx, 4
mov r8, rdx
mov r9d, edx
or ecx, 8
sar r8, 0x20
shr ecx, 1
mov edx, ecx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r14, rax
cmp rdi, 0xffffffffffffffff
je 0x1400e256b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r13]
mov qword [rcx + 0x18], r14
cmp r14, rsi
jne 0x1400e258e
cmp rbx, rsi
je 0x1400e2595
cmp rbx, 0xffffffffffffffff
je 0x1400e2595
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e2595
mov rax, qword [r13]
mov qword [rax], rbx
mov rbx, r13
mov r13d, dword [rsp + 0x70]
cmp r14, rsi
je 0x1400e2414
mov r15, qword [rsp + 0xb8]
cmp dword [rsp + 0x2b8], esi
je 0x1400e265f
cmp r13d, esi
je 0x1400e25ce
lea rcx, [r15 + r14]
movsxd r8, r13d
xor edx, edx
call fcn.140102a90
cmp dword [rsp + 0x2b8], esi
je 0x1400e265f
cmp dword [rsp + 0x68], esi
jle 0x1400e265f
cmp rbp, rsi
jle 0x1400e265f
movabs rcx, 0x100000000
cmp r12, rcx
jb 0x1400e260e
shr rbp, 3
sub rbp, 1
js 0x1400e265f
lea rcx, [rbp + 1]
mov rdi, r14
mov rax, r12
rep stosq qword [rdi], rax
jmp 0x1400e265f
cmp r12, 0x10000
jb 0x1400e262f
shr rbp, 2
sub rbp, 1
js 0x1400e265f
lea rcx, [rbp + 1]
mov eax, r12d
mov rdi, r14
rep stosd dword [rdi], eax
jmp 0x1400e265f
cmp r12, 0x100
jb 0x1400e2651
shr rbp, 1
sub rbp, 1
js 0x1400e265f
lea rcx, [rbp + 1]
movzx eax, r12w
mov rdi, r14
rep stosw word [rdi], ax
jmp 0x1400e265f
mov r8, rbp
mov edx, r12d
mov rcx, r14
call fcn.140102a90
lea rcx, [rsp + 0x78]
call fcn.14005b104
lea rcx, [rsp + 0xa8]
call fcn.14005b104
mov r12d, dword [rsp + 0x58]
jmp 0x1400e1f7a
lea rcx, [rsp + 0x78]
call fcn.14005b104
lea rcx, [rsp + 0xa8]
jmp 0x1400e28ef
cmp r12d, 0xfffffffc
jne 0x1400e2880
lea rcx, [rsp + 0x80]
call fcn.140063620
lea rcx, [rsp + 0xb8]
call fcn.140063620
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x3f]
lea r9d, [r12 + 0x30]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0x80]
cmp word [rdx], si
jne 0x1400e2703
mov rsi, 0xffffffff80070057
jmp 0x1400e284c
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x2b8], esi
mov dword [rsp + 0x90], esi
mov dword [rsp + 0x68], esi
call fcn.140007bcc
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, str.pecmd2012.event.
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov edi, dword [rsp + 0x5c]
cmp di, si
jne 0x1400e2786
cmp dword [rsp + 0x2b8], esi
jne 0x1400e27c5
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x68]
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov rbx, rax
cmp di, si
je 0x1400e27bc
lea rcx, [rsp + 0xb8]
call fcn.14005b104
lea rcx, [rsp + 0x80]
jmp 0x1400e1f4e
cmp rax, rsi
jne 0x1400e2866
xor edx, edx
lea rcx, [rsp + 0x201]
mov byte [rsp + 0x200], sil
lea r8d, [rdx + 0x27]
call fcn.140102a90
lea rax, [rsp + 0x200]
lea rcx, [rsp + 0x148]
mov qword [rsp + 0x148], rax
mov dword [rsp + 0x140], 0x18
mov dword [rsp + 0x150], esi
call fcn.14005e7dc
cmp dword [rsp + 0x2b8], esi
mov r9, qword [rsp + 0x48]
mov r8d, esi
setne r8b
cmp dword [rsp + 0x90], esi
mov edx, esi
lea rcx, [rsp + 0x140]
setne dl
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rbx, rax
cmp rax, rsi
jne 0x1400e2866
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea rcx, [rsp + 0xb8]
call fcn.14005b104
lea rcx, [rsp + 0x80]
jmp 0x1400e2d97
lea rcx, [rsp + 0xb8]
call fcn.14005b104
lea rcx, [rsp + 0x80]
jmp 0x1400e2e4c
cmp r12d, 0xffffffe0
jne 0x1400e2a95
lea rcx, [rsp + 0x90]
call fcn.140063620
lea rcx, [rsp + 0x50]
call fcn.140063620
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x5b]
lea r9d, [r12 + 0x4c]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0x90]
cmp word [rdx], si
jne 0x1400e2900
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x90]
call fcn.14005b104
mov rsi, 0xffffffff80070057
jmp 0x1400e3232
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x2b8], r15d
mov dword [rsp + 0x70], esi
call fcn.140007bcc
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
mov ebp, dword [rsp + 0x2b8]
mov edi, dword [rsp + 0x68]
cmp ebp, r15d
lea rdx, str.pecmd2012.semaphore.
lea rcx, [rsp + 0x48]
cmovl ebp, r15d
cmp edi, ebp
cmovg edi, ebp
call fcn.14006375c
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov r8, qword [rsp + 0x48]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e29b7
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x90]
jmp 0x1400e1f4e
cmp rax, rsi
jne 0x1400e2a7e
xor edx, edx
lea rcx, [rsp + 0x189]
mov byte [rsp + 0x188], sil
lea r8d, [rdx + 0x27]
call fcn.140102a90
lea rax, [rsp + 0x188]
lea rcx, [rsp + 0x178]
mov qword [rsp + 0x178], rax
mov dword [rsp + 0x170], 0x18
mov dword [rsp + 0x180], esi
call fcn.14005e7dc
mov r9, qword [rsp + 0x48]
cmp edi, esi
cmovl edi, esi
mov edx, r15d
lea rcx, [rsp + 0x170]
cmp edi, esi
mov r8d, ebp
cmovg edx, edi
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov qword [rsp + 0x108], r13
cmp rbx, rsi
jne 0x1400e2a65
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x90]
call fcn.14005b104
mov rsi, r13
jmp 0x1400e3232
cmp edi, r15d
jge 0x1400e2a76
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r13, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x90]
jmp 0x1400e2e4c
cmp r12d, 0xffffffc0
jne 0x1400e2c2b
lea rcx, [rsp + 0x68]
call fcn.140063620
lea rcx, [rsp + 0x50]
call fcn.140063620
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x7b]
lea r9d, [r12 + 0x6c]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0x68]
cmp word [rdx], si
jne 0x1400e2afd
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x68]
jmp 0x1400e28ef
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x2b8], esi
call fcn.140007bcc
lea rdx, str.pecmd2012.mutex.
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov r8, qword [rsp + 0x48]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov rbx, rax
cmp word [rsp + 0x5c], si
je 0x1400e2b69
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x68]
jmp 0x1400e1f4e
cmp rax, rsi
jne 0x1400e2c17
xor edx, edx
lea rcx, [rsp + 0x1b1]
mov byte [rsp + 0x1b0], sil
lea r8d, [rdx + 0x27]
call fcn.140102a90
lea rax, [rsp + 0x1b0]
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x158], 0x18
mov dword [rsp + 0x168], esi
call fcn.14005e7dc
mov ecx, dword [rsp + 0x2b8]
mov r8, qword [rsp + 0x48]
cmp ecx, esi
mov edx, esi
cmovl ecx, esi
cmp ecx, esi
lea rcx, [rsp + 0x158]
setg dl
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov qword [rsp + 0x108], r13
cmp rbx, rsi
jne 0x1400e2c0f
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x68]
jmp 0x1400e2a58
mov r13, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x50]
call fcn.14005b104
lea rcx, [rsp + 0x68]
jmp 0x1400e2e4c
cmp r12d, 0xfffffff8
jne 0x1400e2e6b
lea rcx, [rsp + 0xa0]
call fcn.140063620
mov r13, qword [rsp + 0x2a0]
lea eax, [r12 + 0x43]
lea r9d, [r12 + 0x34]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x2a8]
mov rcx, r13
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0xa0]
cmp word [rdx], si
jne 0x1400e2c8b
lea rcx, [rsp + 0xa0]
jmp 0x1400e28ef
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x2a8]
mov dword [rsp + 0x80], esi
call fcn.140007bcc
mov eax, dword [rsp + 0x80]
lea rdx, [rsp + 0x2b8]
neg eax
sbb ecx, ecx
and ecx, ebp
mov dword [rsp + 0x2b8], ecx
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, str..mailslotpecmd2012.mailslot.
lea rcx, [rsp + 0x48]
mov r9, rbp
mov r8, rbp
call fcn.1400637dc
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.14006375c
xor edx, edx
lea rcx, [rsp + 0x1d9]
lea r8d, [rdx + 0x27]
mov byte [rsp + 0x1d8], sil
call fcn.140102a90
lea rax, [rsp + 0x1d8]
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xf0], 0x18
mov dword [rsp + 0x100], esi
call fcn.14005e7dc
mov ebp, dword [rsp + 0x5c]
cmp bp, si
jne 0x1400e2da1
cmp dword [rsp + 0x80], esi
je 0x1400e2da1
mov r8d, dword [rsp + 0x2b8]
mov rcx, qword [rsp + 0x48]
lea r9, [rsp + 0xf0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400e2d7e
mov rbx, rsi
cmp rbx, rsi
jne 0x1400e2e44
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xa0]
mov esi, eax
call fcn.14005b104
jmp 0x1400e3232
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0xf0]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], 0x80
mov edi, eax
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp bp, si
jne 0x1400e2e59
cmp rbx, 0xffffffffffffffff
jne 0x1400e2d7e
cmp dword [rsp + 0x2b8], 0xffffffff
je 0x1400e2e06
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, dword [rsp + 0x2b8]
jae 0x1400e2d7b
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x30], rsi
lea r9, [rsp + 0xf0]
mov r8d, r15d
mov edx, 0x40000000
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
jmp 0x1400e2de1
lea rcx, [rsp + 0xa0]
call fcn.14005b104
mov r15, rsi
jmp 0x1400e1f82
lea rcx, [rsp + 0xa0]
call fcn.14005b104
jmp 0x1400e2f96
cmp r12d, 0xfffffff0
jne 0x1400e30a8
lea rcx, [rsp + 0x60]
call fcn.140063620
lea rcx, [rsp + 0x2b8]
call fcn.140063620
mov rcx, qword [rsp + 0x2a0]
lea eax, [r12 + 0x4b]
lea r9d, [r12 + 0x3c]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x2a8]
mov word [rsp + 0x20], ax
call fcn.1400547bc
mov rdx, qword [rsp + 0x60]
cmp word [rdx], si
jne 0x1400e2ed6
lea rcx, [rsp + 0x2b8]
call fcn.14005b104
lea rcx, [rsp + 0x60]
jmp 0x1400e28ef
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2a8]
call fcn.140007bcc
lea rdx, str..pipepecmd2012.pipe.
lea rcx, [rsp + 0x48]
mov r9, rbp
mov r8, rbp
call fcn.1400637dc
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x48]
call fcn.14006375c
mov r13d, dword [rsp + 0x5c]
mov edi, dword [rsp + 0x68]
lea rcx, [rsp + 0x2b8]
cmp r13w, si
mov rbx, rbp
cmovne edi, esi
call fcn.14005b104
lea rcx, [rsp + 0x60]
call fcn.14005b104
mov ebp, dword [rsp + 0x90]
mov eax, 4
test al, dil
jne 0x1400e2fc8
mov rcx, qword [rsp + 0x48]
mov eax, edi
mov r8d, esi
and eax, 3
mov edx, ebp
cmp al, 3
sete r8b
call fcn.14005e80c
mov rbx, rax
cmp r13w, si
je 0x1400e2fc8
cmp rbx, 0xffffffffffffffff
cmove rbx, rsi
cmp rbx, rsi
je 0x1400e2fb5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rbx, rsi
jne 0x1400e3232
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
cmove eax, r15d
mov esi, eax
jmp 0x1400e3232
xor edx, edx
lea rcx, [rsp + 0x229]
mov byte [rsp + 0x228], sil
lea r8d, [rdx + 0x27]
call fcn.140102a90
lea rax, [rsp + 0x228]
lea rcx, [rsp + 0x120]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x118], 0x18
mov dword [rsp + 0x128], esi
call fcn.14005e7dc
test r14b, dil
jne 0x1400e3081
cmp rbx, 0xffffffffffffffff
jne 0x1400e1f77
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x118]
lea edx, [rbx + 4]
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], eax
mov r9d, 0xff
xor r8d, r8d
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov rbx, rax
test r15b, dil
je 0x1400e3075
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp eax, esi
jne 0x1400e3075
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rbx, 0xffffffffffffffff
je 0x1400e3087
mov r12d, 0xffffffef
cmp rbx, 0xffffffffffffffff
jne 0x1400e308a
mov rbx, rsi
cmp r12d, 0xfffffff0
je 0x1400e1f77
cmp rbx, rsi
jne 0x1400e1f77
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400e2fc1
mov rax, qword [rsp + 0x2a8]
cmp word [rax], si
je 0x1400e3142
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x2a8]
call fcn.1400745c8
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e313d
add rdx, r14
lea rcx, [rsp + 0x2a8]
mov qword [rsp + 0x2a8], rdx
lea rdx, [rsp + 0x60]
call fcn.140074838
mov rdx, qword [rsp + 0x2a8]
cmp word [rdx], si
je 0x1400e3138
add rdx, r14
lea rcx, [rsp + 0x2a8]
mov qword [rsp + 0x2a8], rdx
lea rdx, [rsp + 0x70]
call fcn.140074838
mov r8d, dword [rsp + 0x70]
mov r14, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x60]
mov dword [rsp + 0xb0], r8d
jmp 0x1400e3148
mov r12d, dword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov r8d, 6
mov edx, r12d
mov ecx, r14d
call qword [0x14013d4f0]
cmp rax, rsi
mov rbx, rax
jg 0x1400e1f77
mov rsi, r15
jmp 0x1400e3232
mov r13, qword [rsp + 0xe8]
cmp dil, sil
jne 0x1400e3188
cmp byte [rsp + 0x88], sil
jne 0x1400e3188
mov rdi, qword [rbp + 0x290]
jmp 0x1400e318b
mov rdi, r13
cmp word [rsp + 0xd8], si
je 0x1400e31fa
lea rdx, [0x14012aa88]
lea rcx, [rsp + 0x2b8]
call fcn.1400702b0
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x2b8]
call fcn.14006375c
lea rdx, [0x14012aa78]
lea rcx, [rsp + 0x2b8]
call fcn.14006375c
mov r9, qword [rsp + 0x2b0]
mov rdx, qword [rsp + 0x2b8]
xor r8d, r8d
mov rcx, r13
call fcn.1400dc9fc
lea rcx, [rsp + 0x2b8]
call fcn.14005b104
mov eax, dword [rsp + 0xb0]
mov qword [rsp + 0x38], r15
lea r8, [rsp + 0x98]
mov dword [rsp + 0x30], eax
mov r9, rbx
mov rdx, rdi
mov rcx, rbp
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r14
call fcn.14006410c
mov rsi, qword [rsp + 0x108]
lea rcx, [rsp + 0x48]
call fcn.14005b104
lea rcx, [rsp + 0xc8]
call fcn.14005b104
lea rcx, [rsp + 0xc0]
call fcn.14005b104
lea rcx, [rsp + 0xd0]
call fcn.14005b104
lea rcx, [rsp + 0x98]
call fcn.14005b104
mov rax, rsi
add rsp, 0x258
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret