Function at 0x140010a00
Capabilities:
Create pipe
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [0x1400cd170], r8
xor edx, edx
mov dword [0x1400cd018], edx
mov eax, 0x1f7f
mov dword [rbp - 0xc], eax
mov edi, 0x1e15
mov dword [rbp - 0x10], edx
mov ebx, 0x52d
mov dword [rbp - 0x20], edi
lea ecx, [rdx + 1]
mov dword [rbp - 0x18], 0x235b
mov esi, 0x79b
mov dword [rbp + 0x20], 0x1ae4
mov dword [rbp - 0x14], edx
mov dword [0x1400cd028], edx
mov dword [0x1400cd02c], 7
mov dword [rbp - 0x1c], 0x18c1
mov dword [rbp - 8], eax
mov rax, qword [section..data]
mov dword [rax + 0x24], edx
mov rax, qword [section..data]
mov qword [0x1400cd038], rdx
mov dword [0x1400cd04c], 0x49
mov dword [rax + 0x50], ecx
mov rax, qword [section..data]
mov dword [0x1400cd064], ecx
mov dword [rax + 0x60], edx
mov rax, qword [section..data]
mov dword [0x1400cd078], edx
mov dword [0x1400cd084], edx
mov dword [rax + 0x78], 4
mov rax, qword [section..data]
mov dword [0x1400cd0b0], ecx
mov dword [0x1400cd0e0], ecx
lea ecx, [rdx + 5]
mov dword [0x1400cd108], ecx
mov dword [0x1400cd09c], edx
mov dword [0x1400cd0f4], edx
mov dword [0x1400cd0c0], 0x43
mov dword [0x1400cd0cc], 2
mov dword [0x1400cd100], 0x14
mov dword [0x1400cd10c], 0xf
mov dword [0x1400cd118], 0x13
mov dword [rax + 0x118], 0x1d
mov rax, qword [section..data]
mov dword [0x1400cd140], ecx
mov ecx, dword [rbp - 0x18]
mov r8d, dword [rbp - 0x14]
sub ecx, esi
mov r9d, dword [rbp - 8]
add r8d, 0x18b3
mov r10d, dword [rbp - 0x18]
sub r9d, 0x16a
mov dword [0x1400cd148], 3
sub r10d, ebx
mov dword [0x1400cd158], 0x23
mov dword [rax + 0x14c], 0x21
mov eax, dword [rbp - 8]
sub eax, 0x151
mov dword [0x1400cd17c], edx
mov rdx, qword [section..data]
mov dword [rsp + 0x28], eax
mov dword [r11 - 0x48], r10d
call fcn.140001f38
mov dword [rbp - 0x20], eax
xor dword [rbp - 0x1c], 0x68f
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x1c]
add ecx, 0x255
cmp eax, ecx
je 0x140010e9b
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
add ecx, 0x28e
cmp eax, ecx
je 0x140010d19
mov ecx, dword [rbp - 0x18]
mov edx, dword [rbp - 0x1c]
sub ecx, ebx
mov r8d, dword [rbp - 0xc]
lea rbx, [0x1400cd010]
mov r9d, dword [rbp - 0xc]
add edx, 0x50b
mov eax, dword [rbp - 0x10]
sub r9d, 0x657
xor eax, 0x1928
xor r8d, 0x243
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r9d
mov r9, rbx
call fcn.140001460
mov dword [rbp - 0x1c], eax
mov ecx, dword [rbp - 0x20]
mov edx, dword [rbp - 0x20]
sub ecx, 0x35c
mov r8d, dword [rbp - 0x18]
xor edx, 0x124
mov r9d, dword [rbp - 0x1c]
sub r8d, 0x902
mov r10d, dword [rbp - 0x20]
sub r9d, 0xa0e
mov eax, dword [rbp - 0x20]
sub r10d, 0x167
add eax, esi
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r10d
call fcn.140001060
mov dword [rbp - 0x20], eax
mov ecx, dword [rbp - 0x20]
mov edx, dword [rbp - 0x10]
xor ecx, 0x3b
mov r8d, dword [rbp - 0x1c]
xor edx, 0x197b
mov r9d, dword [rbp + 0x20]
sub r8d, 0xa98
mov eax, dword [rbp - 8]
xor r9d, 0x59b
xor eax, 0x3d6c
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
call fcn.1400113b8
mov dword [rbp - 0x20], eax
mov edx, dword [rbp - 0x10]
mov r8d, dword [rbp + 0x20]
add edx, edi
mov r9d, dword [rbp - 0x18]
add r8d, 0xdc
mov rax, qword [section..data]
sub r9d, 0x148
mov r10d, dword [rbp - 8]
sub r10d, 0x634
mov ecx, dword [rax + 0xfc]
mov eax, dword [rbp + 0x20]
xor ecx, 0x63c691
sub dword [0x1400cd074], ecx
xor eax, 0x7d8
mov dword [rsp + 0x28], eax
mov rcx, rbx
mov dword [rsp + 0x20], r10d
call fcn.140001bc0
mov rdx, qword [0x1400cd170]
mov rcx, qword [0x1400cd160]
mov dword [rbp - 0x10], eax
call qword [0x1400cd0a8]
mov dword [0x1400cd154], eax
xor dword [rbp + 0x20], 0x8a
jmp 0x140010e9b
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0xc]
add ecx, 0xffffe2c4
cmp eax, ecx
jle 0x140010e5b
mov esi, dword [rbp - 0x18]
mov rax, qword [section..data]
mov ecx, dword [0x1400cd0e0]
or ecx, 0x1d3c
imul esi, ecx
mov ecx, dword [rbp - 0x14]
mov edx, dword [rbp + 0x20]
add ecx, dword [rax + 0x12c]
mov eax, dword [rbp - 0x10]
add edx, ecx
mov r8d, dword [rbp + 0x20]
mov ecx, esi
mov edi, dword [rbp - 0x1c]
xor eax, dword [0x1400cd0e0]
mov r10d, dword [rbp - 0x14]
imul ebx, dword [0x1400cd15c], 0x194b
mov r9d, dword [0x1400cd150]
imul r8d, eax
add r9d, 0x57b
mov eax, dword [0x1400cd030]
xor eax, dword [0x1400cd034]
and edi, eax
mov rax, qword [section..data]
mov r11d, dword [rax + 0x8c]
mov eax, dword [rbp + 0x20]
sub r10d, eax
or r11d, dword [0x1400cd10c]
imul r11d, dword [0x1400cd158]
movsxd rax, r10d
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov rax, qword [section..data]
imul ecx, dword [rax + 0x54], 0x1e1f
or dword [rbp + 0x20], ecx
mov eax, dword [0x1400cd028]
mov rdx, qword [section..data]
imul eax, eax
imul ecx, eax, 0x1a59
mov eax, dword [rbp + 0x20]
mov r8d, dword [rbp - 0x14]
and eax, dword [0x1400cd10c]
xor r8d, eax
mov eax, dword [rbp - 0x10]
mov r9d, dword [rbp - 0xc]
sub eax, dword [0x1400cd104]
mov r10d, dword [rbp - 0x14]
or r9d, eax
mov eax, dword [0x1400cd018]
mov r11d, dword [0x1400cd10c]
add eax, 0xffffe1eb
xor r11d, dword [0x1400cd100]
add r10d, eax
mov eax, dword [0x1400cd0cc]
or eax, dword [0x1400cd038]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
call fcn.140010834
mov dword [rbp - 0x10], eax
mov eax, dword [rbp - 0xc]
or eax, dword [0x1400cd10c]
and eax, 0x1e2e
cmp dword [0x1400cd0e0], eax
je 0x140010e9b
mov ebx, dword [rbp - 0xc]
jmp 0x140010e90
mov ecx, dword [0x1400cd09c]
and ecx, dword [0x1400cd0f4]
mov eax, dword [rbp - 8]
sub ecx, eax
call qword [sym.imp.KERNEL32.dll_HeapLock]
add ebx, 2
mov eax, dword [rbp - 0x18]
cmp ebx, dword [0x1400cd02c]
ja 0x140010e76
mov ecx, dword [0x1400cd154]
call qword [sym.imp.KERNEL32.dll_ExitProcess]