Function at 0x18000d8d0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov esi, dword [rsp + 0x98]
lea ebp, [r8 - 0x4bb]
mov ebx, dword [rsp + 0x90]
lea eax, [rbp + 0xd79]
add esi, 0xfffff092
lea r14d, [rdx + 0xe00]
xor ebx, 0xab0
lea r13d, [r9 - 0xf6e]
lea r12, [0x180026010]
mov rdi, rcx
mov r15d, esi
cmp r14d, eax
jge 0x18000da29
mov rax, qword [section..data]
lea r9d, [rbp + 0xaa]
mov edx, ebx
mov qword [rsp + 0x20], rax
xor esi, 0xc87
lea r8d, [r13 + 0x165c]
xor edx, 0x14d8
mov ecx, esi
call fcn.18000e2d0
add dword [rdi + 0x94], 0x13f138
lea r8d, [rbx - 0xe00]
mov r9d, eax
mov dword [rsp + 0x20], r8d
mov r8, r12
lea edx, [rbx + 0x271]
lea ecx, [rax - 0x9c]
xor r9d, 0x720
mov esi, eax
call fcn.18000dce0
cmp dword [rdi + 0xe0], 0xc5a3
mov ebp, eax
jne 0x18000d9c1
mov ecx, dword [rdi + 0xa8]
add ecx, dword [rdi + 0x50]
xor ecx, dword [rdi + 0x2c]
xor ecx, 0x2eab1
mov dword [rdi + 0x2c], ecx
jmp 0x18000d9d2
mov eax, dword [0x1800260a4]
add eax, 0x116969b2
mov dword [0x180026014], eax
add ebx, 0x4df
sub ebp, 0x5ff
add r14d, 0x781
cmp dword [rdi + 0x50], 0xca29
je 0x18000d9f5
mov dword [rdi + 0x18], 0x2a0190c1
xor ebp, 0x126
cmp dword [rdi + 0x2c], 0x9126
jbe 0x18000da14
mov eax, dword [rdi + 0x9c]
add eax, 0xeb80
mov dword [rdi + 0x44], eax
jmp 0x18000da29
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xdc]
sub eax, 0xf648
xor dword [rcx + 0x50], eax
mov eax, r13d
xor eax, 0xab3
cmp esi, eax
je 0x18000da70
cmp dword [0x180026120], 0x3a91
je 0x18000da54
mov ecx, dword [rdi + 0x14]
mov rax, qword [section..data]
add ecx, 0x3f877705
mov dword [rax + 0x5c], ecx
mov eax, dword [0x180026024]
xor eax, dword [0x180026118]
sub eax, 0x3487c0
mov dword [rdi + 0xe8], eax
jmp 0x18000dcb7
mov r8, qword [section..data]
mov eax, ebp
and eax, 0x10e0
xor eax, dword [rdi]
cmp dword [r8 + 0xd4], eax
jae 0x18000dc87
mov eax, dword [r8 + 0x90]
or eax, ebx
xor eax, 0x182c
cmp esi, eax
jae 0x18000dc06
mov eax, esi
sub eax, r14d
xor eax, r15d
cmp esi, eax
je 0x18000dc06
mov r9d, dword [r8 + 0x34]
mov edx, dword [rdi + 0x100]
xor r9d, 0x912
and r9d, dword [r8 + 0x54]
or edx, r13d
add edx, dword [r8 + 0xe0]
mov r8d, ebp
mov ecx, dword [rdi + 0x60]
sub r8d, r13d
add ecx, 0x3d2
mov qword [rsp + 0x20], r12
and ecx, 0x5f0
call fcn.18000e2d0
mov r10d, dword [0x1800260a0]
mov edx, eax
add r10d, dword [rdi + 0x108]
mov ecx, r14d
mov r9d, dword [rdi + 0x94]
mov r11d, r13d
mov r8d, dword [rdi + 0x110]
xor r11d, ebx
or r9d, dword [0x1800260ac]
and r11d, 0x142e
mov dword [rsp + 0x30], r10d
xor r8d, 0xb5d
imul edx, eax
mov r15d, eax
imul ecx, ebp
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r11d
xor edx, 0x182c
call sym.zpodb664uz4.dll_MmiiJHu18
mov ecx, dword [rdi + 0xdc]
or ecx, dword [rdi + 0x4c]
call qword [sym.imp.KERNEL32.dll_ExitThread]
lea eax, [r14 + r13]
movsxd rcx, eax
call qword [sym.imp.KERNEL32.dll_CreateActCtxA]
mov rax, qword [section..data]
xor r14d, 0x150d
mov ebx, dword [0x1800260e4]
mov r8d, dword [rdi + 0x48]
and ebx, 0x165c
mov r11d, dword [0x1800260ac]
sub esi, dword [rax + 0x78]
lea edx, [r14 - 0x644]
mov r10d, dword [rdi + 0x64]
or r11d, r15d
mov r9d, dword [rdi + 0x84]
sub esi, 0x150d
mov ecx, dword [rdi + 0x28]
sub r10d, ebp
mov qword [rsp + 0x38], rbx
xor r9d, ebp
mov dword [rsp + 0x30], r11d
imul r8d, ebp
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r10d
sub r8d, dword [rax + 0x28]
mov eax, ebp
and rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x18000dcb7
mov eax, dword [rdi + 0x2c]
sub eax, dword [rdi + 8]
mov ecx, dword [rdi + 0x108]
cmp ecx, eax
jae 0x18000dcb7
mov eax, dword [rdi + 0x28]
sub eax, dword [0x180026010]
cmp ecx, eax
ja 0x18000dcb7
mov eax, dword [r8 + 0xe0]
add eax, dword [rdi + 0x64]
add eax, dword [0x18002604c]
sub r15d, eax
mov rbx, qword [rsp + 0x70]
lea eax, [r15 + 0x1a1d]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret