Function at 0x1400b81a0
Capabilities:
Create pipe
Generate random numbers via winapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
movaps xmmword [rsp + 0x100], xmm6
mov qword [rsp + 0x98], rcx
mov byte [rsp + 0x4f], dl
movzx eax, dl
mov ecx, 0x40080002
sub ecx, eax
mov dword [rsp + 0xa0], ecx
xor eax, eax
mov qword [rsp + 0xb0], rax
mov r14d, 8
mov sil, 1
xorps xmm6, xmm6
lea r15, [rsp + 0x60]
mov rdi, qword [sym.imp.bcrypt.dll_BCryptGenRandom]
nop word [rax + rax]
call qword [sym.imp.kernel32.dll_GetCurrentProcessId]
mov dword [rsp + 0xac], eax
mov rax, qword [0x1401521f0]
test rax, rax
je 0x1400b8238
jmp 0x1400b826c
call fcn.1400b9030
xchg qword [0x1401521f0], rax
mov rax, qword [0x1401521f0]
test rax, rax
jne 0x1400b826c
movaps xmmword [rsp + 0x60], xmm6
xor ecx, ecx
mov rdx, r15
mov r8d, 0x10
mov r9d, 2
call rdi
test eax, eax
js 0x1400b8220
mov rax, qword [rsp + 0x60]
xchg qword [0x1401521f0], rax
mov rax, qword [0x1401521f0]
test rax, rax
je 0x1400b8238
mov eax, 1
lock xadd qword [0x1401521f0], rax
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0xac]
mov qword [rsp + 0xb8], rax
lea rax, [0x14003c340]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xc8], rax
lea rax, [fcn.14003f880]
mov qword [rsp + 0xd0], rax
lea rax, str..pipe__rust_anonymous_pipe1__.
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 2
mov qword [rsp + 0x80], 0
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0xe8]
mov rdx, r15
call fcn.140037130
cmp qword [rsp + 0x58], 0
sete al
or sil, al
test sil, 1
jne 0x1400b832d
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, qword [rsp + 0x50]
call qword [sym.imp.kernel32.dll_HeapFree]
mov r9, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov r10, qword [rsp + 0xf8]
lea rbx, [r8 + r10]
mov esi, 4
mov edi, 8
test r10, r10
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], r9
mov dword [rsp + 0xa8], r14d
mov qword [rsp + 0xd8], r10
je 0x1400b8390
movzx ebp, byte [r8]
test bpl, bpl
js 0x1400b83a0
lea r12, [r8 + 1]
jmp 0x1400b83fb
xor r13d, r13d
xor r14d, r14d
xor ebp, ebp
xor r12d, r12d
jmp 0x1400b8449
mov eax, ebp
and eax, 0x1f
movzx edx, byte [r8 + 1]
and edx, 0x3f
cmp bpl, 0xdf
jbe 0x1400b83f0
movzx ecx, byte [r8 + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp bpl, 0xf0
jb 0x1400b86b8
lea r12, [r8 + 4]
movzx ebp, byte [r8 + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and ebp, 0x3f
or ebp, ecx
or ebp, eax
cmp ebp, 0xffff
jbe 0x1400b83fb
jmp 0x1400b86cf
lea r12, [r8 + 2]
shl eax, 6
or eax, edx
mov ebp, eax
xor r13d, r13d
xor eax, eax
mov rcx, rbx
sub rcx, r12
add rcx, 3
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
shr rcx, 2
add rcx, rax
mov r14w, 1
cmp rcx, 2
jb 0x1400b8449
movabs rax, 0x3ffffffffffffffe
cmp rcx, rax
jae 0x1400b887f
lea rdi, [rcx*2 + 4]
add rcx, 2
mov rsi, rcx
movzx eax, byte [0x140152279]
xor ecx, ecx
mov rdx, rdi
call fcn.1400baaa0
test rax, rax
je 0x1400b8872
mov rcx, qword [rsp + 0xb0]
inc ecx
mov dword [rsp + 0xa4], ecx
mov word [rax], bp
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov edi, 1
jmp 0x1400b84bf
xor ecx, ecx
mov esi, r13d
cmp rdi, qword [rsp + 0x60]
je 0x1400b856a
mov r13d, ecx
mov word [rax + rdi*2], si
inc rdi
mov qword [rsp + 0x70], rdi
test r12, r12
je 0x1400b84e0
test r13w, r13w
jne 0x1400b84a0
cmp r12, rbx
je 0x1400b84e0
movzx esi, byte [r12]
test sil, sil
js 0x1400b850e
inc r12
xor ecx, ecx
jmp 0x1400b84a5
mov rbp, qword [rsp + 0x60]
cmp r14w, 1
jne 0x1400b8600
xor r14d, r14d
mov r12d, 0
mov esi, 0
mov r8d, 0
cmp rdi, rbp
jne 0x1400b84b3
jmp 0x1400b8597
mov ecx, esi
and ecx, 0x1f
movzx r8d, byte [r12 + 1]
and r8d, 0x3f
cmp sil, 0xdf
jbe 0x1400b85af
movzx edx, byte [r12 + 2]
shl r8d, 6
and edx, 0x3f
or edx, r8d
cmp sil, 0xf0
jb 0x1400b85c2
movzx esi, byte [r12 + 3]
add r12, 4
and ecx, 7
shl ecx, 0x12
shl edx, 6
and esi, 0x3f
or esi, edx
or esi, ecx
cmp esi, 0xffff
add byte [rdi + 0x72], dh
xor ecx, ecx
jmp 0x1400b84a5
mov r8, rbx
sub r8, r12
add r8, 3
mov rax, 0xffffffffffffffff
invalid
invalid
invalid
dec dword [rdi + rcx + 0x42]
ror byte [rcx - 0x3f], 0xe8
add ah, byte [rsi - 0x7d]
stc
add dword [rcx - 0x7d], ecx
fdivr st(7)
cmp r14w, 1
sbb r8, 0xffffffffffffffff
mov r13d, ecx
inc r8
mov rcx, r15
mov rdx, rdi
call fcn.1400f0bc0
mov rax, qword [rsp + 0x68]
jmp 0x1400b84b3
add r12, 2
shl ecx, 6
or ecx, r8d
mov esi, ecx
xor ecx, ecx
jmp 0x1400b84a5
add r12, 3
shl ecx, 0xc
or edx, ecx
mov esi, edx
cmp esi, 0xffff
jbe 0x1400b8563
lea edx, [rsi + 0xff0000]
shr edx, 0xa
or edx, 0xd800
and esi, 0x3ff
or esi, 0xdc00
mov ecx, esi
mov esi, edx
jmp 0x1400b84a5
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov rcx, rbx
mov edx, dword [rsp + 0xa0]
mov r14d, dword [rsp + 0xa8]
mov r8d, r14d
mov r9d, 1
call qword [sym.imp.kernel32.dll_CreateNamedPipeW]
pop rcx
pushfq
add eax, dword [rax]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400b873b
call qword [sym.imp.kernel32.dll_GetLastError]
mov ecx, dword [rsp + 0xa4]
cmp ecx, 0xa
jge 0x1400b86f9
cmp eax, 5
jne 0x1400b8680
mov eax, ecx
mov qword [rsp + 0xb0], rax
jmp 0x1400b868d
test r14d, r14d
je 0x1400b86f9
xor r14d, r14d
cmp eax, 0x57
jne 0x1400b86f9
xor esi, esi
test rbp, rbp
mov rdi, qword [sym.imp.bcrypt.dll_BCryptGenRandom]
je 0x1400b8200
mov rcx, qword [0x1401521d8]
xor esi, esi
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400b8200
lea r12, [r8 + 3]
shl eax, 0xc
or ecx, eax
mov ebp, ecx
cmp ebp, 0xffff
jbe 0x1400b83fb
lea ecx, [rbp + 0xff0000]
shr ecx, 0xa
or ecx, 0xd800
and ebp, 0x3ff
or ebp, 0xdc00
add byte [rax], al
mov eax, 1
mov r13d, ebp
mov ebp, ecx
jmp 0x1400b8400
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x98]
mov qword [rcx + 8], rax
mov qword [rcx], 1
mov r14, 0xffffffffffffffff
test rbp, rbp
je 0x1400b87f4
mov rcx, qword [0x1401521d8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400b87f4
test rbp, rbp
je 0x1400b8752
mov rcx, qword [0x1401521d8]
mov ecx, 2
mov rdx, rdi
call fcn.1400ef8e0
call fcn.140036c60
int3