Function at 0x18000d8e0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov esi, dword [rsp + 0x98]
lea ebp, [r8 - 0x59f]
mov ebx, dword [rsp + 0x90]
lea eax, [rbp + 0xec]
add esi, 0xffffeaf3
lea r14d, [rdx - 0x80d]
xor ebx, 0x1ce8
lea r12d, [r9 - 0xf6e]
lea r13, [0x180026010]
mov r10d, r9d
mov rdi, rcx
mov r15d, esi
cmp r14d, eax
jge 0x18000da38
mov rax, qword [section..data]
lea r9d, [rbp - 0x338]
mov edx, ebx
mov qword [rsp + 0x20], rax
xor esi, 0xc08
xor edx, 0x27c
mov ecx, esi
mov r8d, r10d
call fcn.18000e2e0
add dword [rdi + 0x94], 0x13f138
lea r8d, [rbx - 0x62d]
mov r9d, eax
mov dword [rsp + 0x20], r8d
mov r8, r13
lea edx, [rbx + 0x57c]
lea ecx, [rax + 0x9c]
xor r9d, 0xaeb
mov esi, eax
call fcn.18000dcf0
cmp dword [rdi + 0xe0], 0xc5a3
mov ebp, eax
jne 0x18000d9d0
mov ecx, dword [rdi + 0xa8]
add ecx, dword [rdi + 0x50]
xor ecx, dword [rdi + 0x2c]
xor ecx, 0x2eab1
mov dword [rdi + 0x2c], ecx
jmp 0x18000d9e1
mov eax, dword [0x1800260a4]
add eax, 0x1581a977
mov dword [0x180026014], eax
sub ebx, 0x459
add ebp, 0x1018
add r14d, 0x196
cmp dword [rdi + 0x50], 0xca29
je 0x18000da04
mov dword [rdi + 0x18], 0x24e4f6d
xor ebp, 0x758
cmp dword [rdi + 0x2c], 0x9126
jbe 0x18000da23
mov eax, dword [rdi + 0x9c]
add eax, 0x7d6b
mov dword [rdi + 0x44], eax
jmp 0x18000da38
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xdc]
sub eax, 0xf648
xor dword [rcx + 0x50], eax
mov eax, r12d
xor eax, 0x165c
cmp esi, eax
jg 0x18000da7f
cmp dword [0x180026120], 0x3a91
je 0x18000da63
mov ecx, dword [rdi + 0x14]
mov rax, qword [section..data]
add ecx, 0x441f88d8
mov dword [rax + 0x5c], ecx
mov eax, dword [0x180026024]
xor eax, dword [0x180026118]
sub eax, 0x3487c0
mov dword [rdi + 0xe8], eax
jmp 0x18000dcc6
mov r8, qword [section..data]
mov eax, ebp
and eax, 0xc87
xor eax, dword [rdi]
cmp dword [r8 + 0xd4], eax
jae 0x18000dc96
mov eax, dword [r8 + 0x90]
or eax, ebx
xor eax, 0x150d
cmp esi, eax
jae 0x18000dc15
mov eax, esi
sub eax, r14d
xor eax, r15d
cmp esi, eax
je 0x18000dc15
mov r9d, dword [r8 + 0x34]
mov edx, dword [rdi + 0x100]
xor r9d, 0x1a0b
and r9d, dword [r8 + 0x54]
or edx, r12d
add edx, dword [r8 + 0xe0]
mov r8d, ebp
mov ecx, dword [rdi + 0x60]
sub r8d, r12d
add ecx, 0xe84
mov qword [rsp + 0x20], r13
and ecx, 0x117c
call fcn.18000e2e0
mov r10d, dword [0x1800260a0]
mov edx, eax
add r10d, dword [rdi + 0x108]
mov ecx, r14d
mov r9d, dword [rdi + 0x94]
mov r11d, r12d
mov r8d, dword [rdi + 0x110]
xor r11d, ebx
or r9d, dword [0x1800260ac]
and r11d, 0x644
mov dword [rsp + 0x30], r10d
xor r8d, 0x912
imul edx, eax
mov r15d, eax
imul ecx, ebp
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r11d
xor edx, 0x142e
call sym.zpodb664uz4.dll_MmiiJHu18
mov ecx, dword [rdi + 0xdc]
or ecx, dword [rdi + 0x4c]
call qword [sym.imp.KERNEL32.dll_ExitThread]
lea eax, [r14 + r12]
movsxd rcx, eax
call qword [sym.imp.KERNEL32.dll_CreateActCtxA]
mov rax, qword [section..data]
xor r14d, 0x150d
mov ebx, dword [0x1800260e4]
mov r8d, dword [rdi + 0x48]
and ebx, 0x182c
mov r11d, dword [0x1800260ac]
sub esi, dword [rax + 0x78]
lea edx, [r14 - 0x129c]
mov r10d, dword [rdi + 0x64]
or r11d, r15d
mov r9d, dword [rdi + 0x84]
sub esi, 0x182c
mov ecx, dword [rdi + 0x28]
sub r10d, ebp
mov qword [rsp + 0x38], rbx
xor r9d, ebp
mov dword [rsp + 0x30], r11d
imul r8d, ebp
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r10d
sub r8d, dword [rax + 0x28]
mov eax, ebp
and rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x18000dcc6
mov eax, dword [rdi + 0x2c]
sub eax, dword [rdi + 8]
mov ecx, dword [rdi + 0x108]
cmp ecx, eax
jae 0x18000dcc6
mov eax, dword [rdi + 0x28]
sub eax, dword [0x180026010]
cmp ecx, eax
ja 0x18000dcc6
mov eax, dword [r8 + 0xe0]
add eax, dword [rdi + 0x64]
add eax, dword [0x18002604c]
sub r15d, eax
mov rbx, qword [rsp + 0x70]
lea eax, [r15 + 0x1104]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret