Function at 0x180005460
Capabilities:
Create mailslot

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800750b0]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov r14, rcx
mov qword [rbp - 0x39], 7
xor r15d, r15d
mov qword [rbp - 0x41], r15
mov word [rbp - 0x51], r15w
xor r8d, r8d
lea rdx, [0x180061134]
lea rcx, [rbp - 0x51]
call fcn.180008eb0
nop
mov edi, 1
mov r8d, edi
lea rdx, [rbp - 0x51]
mov rcx, r14
call fcn.180004b10
test eax, eax
jne 0x1800054ee
lea rdx, str.amq7rjinpkZg5VVRbSuMf48fFeOgksBXjrYFqoZlx8zaQitgfONWywTMejLgxtSraWc3jz
xor ecx, ecx
call fcn.1800124b0
mov edi, r15d
jmp 0x180005790
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x21], r15
mov word [rbp - 0x31], r15w
xor r8d, r8d
lea rdx, [0x180061134]
lea rcx, [rbp - 0x31]
call fcn.180008eb0
nop
lea rdx, [rbp - 0x31]
mov rcx, r14
call fcn.180004c90
test eax, eax
jne 0x180005539
lea rdx, str.40_1bGlpPZIp5kk39piB4QHbvzmBNpwRaOUpCRHPksJXwfwvdoaxNFqsVdDSb5GCV3jTXT6NYA
xor ecx, ecx
call fcn.1800124b0
mov edi, r15d
jmp 0x18000576f
mov qword [rbp + 7], 7
mov qword [rbp - 1], r15
mov word [rbp - 0x11], r15w
xor r8d, r8d
lea rdx, [0x180061134]
lea rcx, [rbp - 0x11]
call fcn.180008eb0
nop
mov r8d, edi
lea rdx, [rbp - 0x11]
mov rcx, r14
call fcn.180004e10
test eax, eax
jne 0x180005584
lea rdx, str.4EVaLZ0t8F0s0aeY52iXgGLQHq4WYsIYRkiy_44c6dgydqWwDl65fpmWKv_KHlLXUFI2rH1yuA
xor ecx, ecx
call fcn.1800124b0
jmp 0x18000574b
mov qword [rbp - 0x61], 7
mov qword [rbp - 0x69], r15
mov word [rbp - 0x79], r15w
or rbx, 0xffffffffffffffff
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x79]
call fcn.180008820
lea rcx, [r14 + 0xa8]
lea rdx, [rbp - 0x79]
call fcn.180002940
test eax, eax
jne 0x1800055d3
lea rdx, str.lW5_tIUjr9Mx2VbeU1v3aa15dyYY7JI4ollqkTmxK8bRgAlpDG0mkOs5SaRQjJ5n_sN4dd9VW314qUk
xor ecx, ecx
call fcn.1800124b0
jmp 0x18000574b
mov edx, edi
lea rcx, [rbp + 0xf]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x1800055f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.EqkQv7QoWDKFo0hua4wFSpuLEbLAINlx3lNVoTa3ClQoAuCgh6wAXpJVm449uZdHUNNKfWsRminaV3Cr67HyUo2XPMoUqglL8AddeZ2tzE7_nD1O6CTO
jmp 0x180005744
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, [rbp + 0xf]
call qword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x180005623
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.7p45brZAvYM7g49RYOVPbCNCpzzeQAvupIPOG8zSC48nnBhk5AZASJabxk_HyzBjnKoIf6BTlNNm96VffdpcWnOPGDPdkVJFqq3RU9bifNdFeEn8
jmp 0x180005744
mov ecx, 0x18
call fcn.18001b058
mov rsi, rax
test rax, rax
je 0x18000574b
mov dword [rax], 0x18
lea rax, [rbp + 0xf]
mov qword [rsi + 8], rax
mov dword [rsi + 0x10], edi
lea rcx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rcx, qword [rbp - 0x51]
mov r9, rsi
or r8d, 0xffffffff
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov qword [r14 + 0xf8], rax
mov rcx, rsi
cmp rax, 0xffffffffffffffff
jne 0x180005691
call fcn.18001af28
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.wEirkA1LhEiMqCO4l21ixAMEHqkWIsKcTkWy_44c58s80mwdrjzdSQvupaMdFcG0MoPHIO4a9kJ8zXrkN381AeazDhJarFQ9g
jmp 0x180005744
call fcn.18001af28
mov dword [r14 + 0x100], edi
lea rcx, [r14 + 0x108]
mov qword [rcx + 0x10], r15
cmp qword [rcx + 0x18], 8
jb 0x1800056b4
mov rax, qword [rcx]
jmp 0x1800056b7
mov rax, rcx
mov word [rax], r15w
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rdx, qword [rbp - 0x51]
cmp word [rdx], 0
jne 0x1800056d4
mov r8, r15
jmp 0x1800056eb
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x1800056e0
call fcn.1800086b0
lea rcx, [r14 + 0x128]
mov qword [rcx + 0x10], r15
cmp qword [rcx + 0x18], 8
jb 0x180005707
mov rax, qword [rcx]
jmp 0x18000570a
mov rax, rcx
mov word [rax], r15w
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
cmp word [rdx], 0
jne 0x180005730
mov rbx, r15
jmp 0x18000573a
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x180005730
mov r8, rbx
call fcn.1800086b0
jmp 0x18000574e
xor ecx, ecx
call fcn.1800124b0
mov edi, r15d
cmp qword [rbp + 7], 8
jb 0x18000575e
mov rcx, qword [rbp - 0x11]
call fcn.18001af28
mov qword [rbp + 7], 7
mov qword [rbp - 1], r15
mov word [rbp - 0x11], r15w
cmp qword [rbp - 0x19], 8
jb 0x18000577f
mov rcx, qword [rbp - 0x31]
call fcn.18001af28
mov qword [rbp - 0x19], 7
mov qword [rbp - 0x21], r15
mov word [rbp - 0x31], r15w
cmp qword [rbp - 0x39], 8
jb 0x1800057a0
mov rcx, qword [rbp - 0x51]
call fcn.18001af28
mov eax, edi
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.18001a000
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret