Function at 0x140001650
Capabilities:
Create pipe
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x120
mov rax, qword [0x140040020]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov rbx, rcx
mov dword [rsp + 0x88], 0x18
xor r15d, r15d
mov qword [rsp + 0x90], r15
mov dword [rsp + 0x98], 1
mov esi, 0xffffffff
mov dword [rsp + 0x40], esi
xor r9d, r9d
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
je 0x1400019b9
lea rdx, str._usr_bin_id__u
lea rcx, [rsp + 0xa8]
call fcn.1400020c0
nop
movups xmm1, xmmword [rbx]
mov r14, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
sub rax, r14
mov rdi, qword [rbx + 8]
cmp rdi, rax
ja 0x14000173d
lea rax, [r14 + rdi]
mov qword [rsp + 0xb8], rax
lea rbx, [rsp + 0xa8]
cmp rcx, 8
cmovae rbx, qword [rsp + 0xa8]
lea rcx, [rbx + r14*2]
lea r8, [rdi + rdi]
movq rdx, xmm1
call fcn.140009930
lea rax, [rdi + r14]
mov word [rbx + rax*2], r15w
jmp 0x140001757
mov qword [rsp + 0x20], rdi
movq r9, xmm1
mov rdx, rdi
lea rcx, [rsp + 0xa8]
call fcn.140001b70
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov rdi, qword [rsp + 0x78]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r14, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 8
cmovae r14, qword [rsp + 0xa8]
mov r10, qword [0x140042c88]
lea rcx, [0x140042c40]
cmp qword [0x140042c58], 8
cmovae rcx, qword [0x140042c40]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov r9, rax
mov r8d, 1
mov rdx, r14
call r10
mov ebx, eax
test eax, eax
jns 0x14000184d
mov r8d, eax
mov rdx, r14
mov ecx, 0x3ec
call fcn.140002290
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0xc0]
cmp rdx, 8
jb 0x1400019b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019e4
jmp 0x1400019b4
mov edx, esi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x14000187b
cmp dword [rsp + 0xa0], 0
je 0x140001880
mov ebx, 0x80070057
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
js 0x1400017e6
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0xa4]
mov r8d, 0x3f
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400017e6
mov eax, dword [rsp + 0xa4]
cmp rax, 0x40
jae 0x140001a09
mov byte [rsp + rax + 0xd0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rsp + 0xd0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140001900
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x48]
call fcn.140001d90
nop
call fcn.14000f8dc
mov rdi, rax
lea rbx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rbx, qword [rsp + 0x48]
mov dword [rax], r15d
mov r8d, 0xa
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.14000f6a0
mov esi, eax
cmp rbx, qword [rsp + 0x80]
je 0x1400019ea
cmp dword [rdi], 0x22
je 0x1400019f6
mov dword [rsp + 0x40], eax
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400019a6
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001a03
call fcn.140007b08
nop
jmp 0x1400017e6
call fcn.140007b08
mov eax, esi
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.140007a80
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
call fcn.14000e2e4
nop
lea rcx, str.invalid_stoul_argument
call fcn.14000547c
lea rcx, str.stoul_argument_out_of_range
call fcn.1400054c4
nop
call fcn.14000e2e4
nop
call fcn.140007c18
int3