Function at 0x18003a510
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rax, qword [0x180079880]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, rdx
mov qword [rbp - 0x19], r8
lea edx, [rcx + 0xa]
mov dword [rbp - 0x55], ecx
mov dword [rbp - 0x59], edx
mov eax, ecx
lea r10, [0x180000000]
cmp ecx, edx
jae 0x18003a70a
movsxd r14, dword [rbp - 0x55]
lea edi, [rcx - 0x5b]
mov r15d, dword [rbp - 0x55]
mov rdx, r14
mov esi, dword [rbp - 0x55]
mov r9d, 0x70
mov r12d, dword [rbp - 0x55]
mov r11d, 0x2200
mov r13d, dword [rbp - 0x55]
mov ecx, dword [rbp - 0x59]
mov qword [rbp - 0x29], rdx
mov dword [rbp - 0x31], edi
nop word [rax + rax]
cmp edi, 0x11
ja case.default.0x18003a5a4
mov ecx, dword [r10 + rdi*4 + 0x3ab20]
add rcx, r10
jmp rcx
mov rdx, 0xffffffffffffffff
mov r14d, edx
mov qword [rbp - 0x29], rdx
jmp case.0x18003a5a4.2
mov r8d, 2
lea rdx, [0x18006fc08]
lea rcx, [rbp - 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8, qword [rbp - 0x19]
mov r9d, 0x70
mov word [rbp - 3], r9w
jmp 0x18003a6e3
mov eax, dword [rbx + 0x1c]
lea r9, [rbp - 0x11]
mov dword [rbp - 0x51], eax
lea rcx, [rbp - 0x51]
mov rax, qword [rbx + 0x50]
mov rdx, qword [rax + 8]
mov eax, dword [r8]
mov r8d, 0x14
mov dword [rbp - 0x11], eax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x20], rax
call fcn.180015ea0
mov eax, dword [rbx + 0x1c]
xor esi, esi
mov edx, eax
test eax, eax
jle 0x18003a677
xor edi, edi
mov rax, qword [rbx + 0x50]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
test eax, eax
jle 0x18003a665
lea ecx, [rax + rax*2]
mov eax, 0xd
sar ecx, 4
lea r8, [rbp - 0x51]
sub eax, ecx
lea rdx, [rbp - 0x41]
mov dword [rbp - 0x51], eax
mov rax, qword [rbx + 8]
mov ecx, dword [rdi + rax]
mov rax, qword [rbx]
shl ecx, 9
mov dword [rbp - 0x41], ecx
mov ecx, 0xeb
lea r9, [rax + rsi*4]
call fcn.1800081c0
mov eax, dword [rbx + 0x1c]
inc esi
add rdi, 4
mov edx, eax
cmp esi, eax
jl 0x18003a621
mov edi, dword [rbp - 0x31]
xor r9d, r9d
xor r10d, r10d
test eax, eax
jle 0x18003a6d1
mov r11, qword [rbx]
mov edi, dword [rbp - 0x49]
nop word [rax + rax]
mov ecx, dword [r11 + r10*4]
cmp ecx, r15d
mov rax, qword [rbp - 0x29]
mov r8d, ecx
cmovl rax, r10
cmovge r8d, r15d
mov qword [rbp - 0x29], rax
mov r15d, r8d
mov eax, r9d
cmovge eax, r14d
cmp ecx, edi
mov r14d, eax
cmovle ecx, edi
inc r9d
inc r10
mov edi, ecx
cmp r9d, edx
jl 0x18003a690
mov edi, dword [rbp - 0x31]
mov dword [rbp - 0x49], ecx
jmp 0x18003a6d4
mov ecx, dword [rbp - 0x49]
mov r8, qword [rbp - 0x19]
mov esi, ecx
sub esi, r15d
mov r9d, 0x70
lea r10, [0x180000000]
mov r11d, 0x2200
mov rdx, qword [rbp - 0x29]
mov ecx, dword [rbp - 0x59]
inc edi
mov dword [rbp - 0x31], edi
lea eax, [rdi + 0x5b]
cmp eax, ecx
jb 0x18003a590
mov eax, dword [rbp - 0x55]
lea edi, [rax - 0xa]
cmp eax, edi
jbe case.0x18003a754.0
mov r12, qword [rbp - 0x19]
lea ebx, [rax - 0x52]
mov r15, qword [rbp - 0x19]
mov edx, 0x6f
movzx r14d, byte [rbp - 0x21]
movabs rsi, 0x7254656e696c5c
lea r13d, [rdx - 0xa]
nop dword [rax + rax]
cmp ebx, 9
ja case.default.0x18003a754
mov ecx, dword [r10 + rbx*4 + 0x3ab68]
add rcx, r10
jmp rcx
xor r12d, r12d
mov r15d, 0x4000
jmp case.0x18003a5a4.2
mov ecx, dword [rbx + 0x20]
mov edx, ecx
cmp ecx, r11d
jle 0x18003a78a
cmp esi, 0xb00
jle 0x18003a78a
lea eax, [r15 + 0x400]
cmp eax, r11d
cmovl eax, r11d
cmp ecx, eax
jle 0x18003a78a
mov dword [rbx + 0x20], eax
mov edx, eax
mov eax, dword [rbx + 0x24]
inc eax
mov dword [rbx + 0x24], eax
cmp esi, 0x400
jle 0x18003a7ac
cmp r15d, edx
jl 0x18003a7a4
cmp r15d, eax
jge 0x18003a7ac
mov r12d, 1
jmp 0x18003a7af
xor r12d, r12d
cmp dword [rbx + 0x2c], 0
je 0x18003a6f0
mov edi, 0x119
nop
mov eax, edi
sub eax, 0x118
je 0x18003a81f
cmp eax, 1
jne 0x18003a84d
lea rax, [rbp - 0x41]
mov dword [rbp - 0x41], r15d
mov r9, rbx
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x51]
mov dword [rbp - 0x51], esi
mov edx, 0xba
mov dword [rbp - 0x39], r14d
lea rcx, [rbp - 0x39]
call fcn.180021620
xor edx, edx
mov qword [rsp + 0x28], rbx
lea r9, [rbp - 0x39]
mov dword [rbp - 0x39], r14d
xor r8d, r8d
mov qword [rsp + 0x20], 0
lea ecx, [rdx + 0x43]
call fcn.1800269d0
mov r13d, eax
jmp 0x18003a847
mov dword [rsp + 0x20], r9d
lea r8, [rbp - 0x39]
mov r9, rbx
mov dword [rbp - 0x39], r13d
lea rdx, [rbp - 0x41]
mov dword [rbp - 0x51], r12d
lea rcx, [rbp - 0x51]
mov dword [rbp - 0x41], r14d
call fcn.18001a8c0
mov r12d, eax
mov r9d, 0x70
dec edi
cmp edi, 0x117
ja 0x18003a7c0
mov edi, dword [rbp - 0x31]
mov r8, qword [rbp - 0x19]
jmp 0x18003a6e3
mov dword [rbp - 0x49], 0
xor esi, esi
jmp case.0x18003a5a4.2
mov rcx, qword [rbx + 0x50]
mov eax, dword [rbx + 0x1c]
cmp dword [rcx + 0x10], eax
jne 0x18003a945
mov eax, dword [rbx + 0x18]
cmp eax, 1
jle case.0x18003a5a4.2
mov rdx, qword [rbx + 0x10]
dec eax
movsxd r8, eax
shl r8, 2
lea rcx, [rdx + 4]
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbp - 0x19]
mov eax, dword [r8]
mov dword [rcx], eax
movsxd rcx, dword [rbx + 0x4c]
mov rax, qword [rbx + 0x10]
mov ecx, dword [rax + rcx*4]
mov dword [r8], ecx
jmp 0x18003a6dd
test r12d, r12d
je case.0x18003a5a4.2
cmp r14d, dword [rbx + 0x28]
je 0x18003a904
mov rax, qword [rbx + 0x40]
movss xmm0, dword [0x180072bec]
movsxd rcx, dword [rbx + 0x38]
minss xmm0, dword [rax + rdx*4]
movss dword [rbx + 0x48], xmm0
movss xmm1, dword [rax + rdx*4]
movss xmm0, dword [rax + rcx*4]
comiss xmm0, xmm1
jbe 0x18003a904
movss dword [rax + rcx*4], xmm1
mov dword [rbx + 0x28], r14d
cmp r15d, dword [rbx + 0x24]
jge 0x18003a912
mov dword [rbx + 0x24], r15d
mov dword [rbx + 0x38], r14d
jmp case.0x18003a5a4.2
mov r8d, 5
mov byte [rbp - 9], 0
lea rdx, [0x18006fc10]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8, qword [rbp - 0x19]
mov r9d, 0x70
jmp 0x18003a6e3
mov eax, 0xffffffff
jmp 0x18003aaf6
mov eax, dword [rbx + 0x28]
jmp 0x18003aaf6
mov eax, dword [str.Dial]
mov dword [rbp + 0xd], eax
mov word [rbp + 0x11], dx
jmp case.default.0x18003a754
mov word [rbp + 0xc], r13w
jmp case.default.0x18003a754
mov r9d, 0x7b
lea r8, [0x18006fc28]
xor ecx, ecx
lea edx, [r9 + 0x3c]
call fcn.18001dd90
mov r12, rax
mov edx, 0x6f
jmp case.default.0x18003a754
mov qword [rsp + 0x38], 0
mov edx, 3
mov dword [rsp + 0x30], 0
mov r9d, 0xff
mov dword [rsp + 0x28], 0x200
mov rcx, r15
mov dword [rsp + 0x20], 0x200
lea r8d, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov edx, 0x7f
xor ecx, ecx
mov r8d, 0xffffffff
mov rsi, rax
lea r9d, [rdx - 0x7e]
call qword [sym.imp.KERNEL32.dll_EnumCalendarInfoExA]
cmp rsi, 0xffffffffffffffff
jne 0x18003aa0f
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [rsi + 0x70]
xor r14b, r14b
movabs rsi, 0x7254656e696c5c
jmp case.default.0x18003a754
test r14b, r14b
je 0x18003aa2b
mov edx, 1
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x6f
movabs rsi, 0x7254656e696c5c
jmp case.default.0x18003a754
call r12
cmp eax, 1
mov edx, 0x6f
sete byte [rbp - 0x55]
jmp case.default.0x18003a754
movzx eax, word [0x18006fc44]
mov word [rbp + 0x12], ax
movzx eax, byte [0x18006fc46]
mov byte [rbp + 0x14], al
jmp case.default.0x18003a754
mov r8d, 1
lea rdx, [0x18006fc24]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 4
mov qword [rbp - 1], rsi
lea rdx, str.ansl
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18006fc50]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov edx, 0x6f
jmp case.default.0x18003a754
mov r8d, 1
lea rdx, [0x18006fc54]
lea rcx, [rbp - 9]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov edx, 0x6f
jmp case.default.0x18003a754
mov r14b, 1
lea r15, [rbp - 9]
dec ebx
lea r10, [0x180000000]
lea eax, [rbx + 0x52]
cmp eax, edi
ja 0x18003a740
mov eax, dword [rbp - 0x55]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.180050c90
mov rbx, qword [rsp + 0x100]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret