Function at 0x180046cd4
Capabilities:
Read pipe
Write pipe

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r14d, dword [rsp + 0x90]
mov r13d, edx
mov ebp, r14d
xor r13d, 0x2d71
xor ebp, 0x79c9
mov rdi, r9
lea ecx, [r14 - 0x3b18]
lea esi, [r14 + 0x456]
lea eax, [rbp - 0x594]
lea r15d, [r14 + 0x225]
cmp ecx, eax
jge 0x1800470e8
lea eax, [rsi + 0x32c]
cmp r15d, eax
je 0x180046f80
mov rax, qword [section..data]
mov ecx, dword [r9 + 0x44]
add ecx, 0x155c9cb
add dword [rax], ecx
mov eax, dword [r9 + 0x44]
xor eax, dword [0x18011e048]
xor eax, 0x34879d2e
mov dword [r9 + 0x10], eax
cmp dword [0x18011e084], 0x4cf0
jb 0x180046d8e
mov ecx, dword [0x18011e0d8]
sub ecx, dword [0x18011e100]
mov rax, qword [section..data]
xor ecx, 0x12b3b7
mov dword [rax + 0x4c], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x74]
mov eax, dword [0x18011e0a4]
sub ecx, 0xb327ecc
xor dword [0x18011e100], ecx
add eax, 0x3d04d045
mov ecx, dword [0x18011e04c]
add ecx, eax
mov dword [r9 + 0x50], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0xc0]
sub ecx, dword [r9 + 0x40]
add ecx, 0x1f5fdd
mov dword [r9 + 0xb8], ecx
mov rdx, qword [section..data]
mov r8d, dword [rdx + 0x4c]
cmp r8d, dword [0x18011e060]
ja 0x180046e44
mov eax, dword [rdx + 0x38]
add dword [0x18011e104], eax
mov eax, dword [0x18011e048]
mov ecx, dword [r9 + 0xc]
add eax, 0x1313cc
add ecx, eax
or dword [r9 + 0x38], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x20]
sub ecx, dword [r9 + 0x94]
mov eax, dword [r9 + 0x30]
xor ecx, 1
imul eax, ecx
mov dword [r9 + 0x30], eax
mov eax, r8d
imul eax, r8d
add dword [r9 + 0xb8], eax
mov rdx, qword [section..data]
inc r8d
jmp 0x180046de4
mov ecx, dword [rdx + 0xbc]
mov eax, dword [rdx + 0xb8]
sub ecx, 0x16bcc2
imul eax, ecx
mov dword [rdx + 0xb8], eax
mov rcx, qword [section..data]
mov eax, dword [0x18011e040]
cmp dword [rcx + 0x94], eax
je 0x180046e84
mov eax, dword [0x18011e0c8]
mov dword [rcx + 0x78], eax
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x30]
cmp dword [0x18011e030], eax
jbe 0x180046e9d
mov eax, dword [0x18011e0d0]
add dword [rcx + 0x94], eax
jmp 0x180046ea6
mov eax, dword [0x18011e010]
sub dword [rcx + 0x78], eax
mov ecx, dword [r9 + 0xb8]
mov r9, qword [section..data]
mov dword [0x18011e0c4], ecx
mov eax, dword [rdi + 0xc0]
cmp dword [0x18011e06c], eax
jb 0x180046ed3
add ecx, dword [rdi + 0x10]
mov dword [0x18011e0c4], ecx
jmp 0x180046ee5
mov eax, dword [r9 + 0x3c]
add eax, dword [rdi + 0x68]
xor eax, 0x3323
sub dword [0x18011e104], eax
mov eax, dword [0x18011e034]
mov ecx, 0x780
mov edx, dword [0x18011e0c0]
cmp dword [rdi + 0xbc], edx
cmova eax, ecx
mov dword [0x18011e034], eax
mov eax, dword [0x18011e0d0]
cmp dword [r9 + 0x68], eax
jb 0x180046f24
mov eax, dword [0x18011e054]
add eax, 0xffecdcc1
or edx, eax
mov dword [0x18011e0c0], edx
mov r8d, r15d
lea edx, [rbp + 0x53c]
xor r15d, 0x7fa7
mov dword [rsp + 0x20], edx
mov ecx, r15d
xor r8d, 0x4d5
call sym.rnlvgrl250sn3.dll_ImMjNs
mov eax, dword [0x18011e100]
sub eax, dword [rdi + 0x44]
mov rcx, qword [section..data]
add eax, 0x27be3b
add dword [rcx + 0x64], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0xc]
add ecx, 0xffff54fe
add ecx, dword [rdi + 0xb0]
xor dword [0x18011e074], ecx
jmp 0x180047190
mov rcx, qword [section..data]
mov ebx, dword [rcx + 0x48]
jmp 0x1800470cf
mov r12d, dword [0x18011e030]
mov eax, r14d
and eax, dword [rdi + 0xd0]
cmp r12d, eax
jae 0x1800470cc
lea eax, [rsi + 0x2d71]
and eax, r15d
mov ebx, eax
mov ecx, dword [rdi + 0x8c]
sub ecx, dword [0x18011e098]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [rsi + r13]
movsxd rcx, eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rdx, qword [section..data]
lea r8d, [r14 - 0x3b18]
mov eax, dword [0x18011e0d0]
mov r9d, ebx
imul r8d, ebp
xor eax, r13d
mov dword [rsp + 0x20], eax
mov ecx, dword [rdx + 0x90]
add ecx, dword [0x18011e100]
xor r8d, 0x3d58
call fcn.18004073c
mov r13d, eax
lea eax, [r14 + 1]
imul eax, ebp
cmp ebp, eax
jle 0x1800470a8
mov rax, qword [section..data]
mov ecx, dword [rax + 0xbc]
xor rcx, r14
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov eax, dword [rdi + 0xf4]
lea edx, [rbp - 0x3d3d]
mov ecx, dword [rdi + 0x48]
or rdx, rax
mov eax, dword [0x18011e064]
xor rcx, rax
xor rcx, 0x2d71
call qword [sym.imp.KERNEL32.dll_ActivateActCtx]
imul eax, dword [0x18011e048], 0x3d58
imul ecx, dword [0x18011e07c], 0x2d71
xor ebp, eax
mov rax, qword [section..data]
mov r13d, dword [rax + 0xc8]
or r13d, r15d
mov eax, r13d
imul eax, ebp
movsxd rdx, eax
xor rdx, 0x39e8
call qword [sym.imp.KERNEL32.dll_ActivateActCtx]
mov ecx, dword [rdi + 0x20]
sub ecx, dword [0x18011e030]
call qword [sym.imp.KERNEL32.dll_ReleaseActCtx]
mov eax, r14d
add r12d, 2
and eax, dword [rdi + 0xd0]
cmp r12d, eax
jb 0x180046fb3
mov rcx, qword [section..data]
mov ebx, dword [rsp + 0x90]
add ebx, 3
mov eax, dword [rcx + 0x74]
or eax, esi
mov dword [rsp + 0x90], ebx
cmp ebx, eax
je 0x180046f8f
jmp 0x180047190
mov eax, dword [0x18011e04c]
or eax, esi
imul eax, dword [0x18011e0dc]
cmp ebp, eax
jae 0x180047190
mov rdx, qword [section..data]
mov ecx, dword [0x18011e084]
add ecx, ebp
cmp dword [rdx + 8], ecx
jne 0x180047190
mov ebx, dword [rdx + 0x40]
mov eax, r14d
mov r8d, dword [rdx + 0xbc]
sub eax, r13d
mov r11d, dword [r9 + 0x58]
sub ebx, r14d
mov r9d, dword [rdx + 0x48]
mov ecx, dword [0x18011e078]
imul r8d, dword [0x18011e0d0]
xor r9, rcx
imul r11d, dword [0x18011e01c]
mov edx, dword [0x18011e0c0]
movsxd r10, eax
xor rdx, 0x429a
mov qword [rsp + 0x30], rbx
add r8d, ecx
mov qword [rsp + 0x28], r10
mov ecx, dword [0x18011e100]
or r11d, 0x39e8
sub ecx, r14d
mov dword [rsp + 0x20], r11d
call qword [sym.imp.KERNEL32.dll_TransactNamedPipe]
or ebp, r14d
sub ebp, dword [0x18011e064]
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea r11, [rsp + 0x40]
xor esi, 0xe3b
mov rbx, qword [r11 + 0x30]
mov eax, esi
mov rsi, qword [r11 + 0x48]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret