Function at 0x14004f080
Capabilities:
Create pipe
Create thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x1400d0400]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14d, ecx
xor r12d, r12d
mov edx, ecx
lea rcx, [rbp - 0x19]
call fcn.140053be0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x12
lea rdx, str..pipeLUNA_HOOK
lea rcx, [rbp - 0x59]
call fcn.140014920
nop
mov r9, rbx
lea r8, [rbp - 0x59]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140023dd0
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rcx, qword [rbp - 0x39]
lea rdi, [0x1400d6290]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0xffffffff
mov dword [rsp + 0x28], 0xc350
mov dword [rsp + 0x20], r12d
mov edx, 1
mov r9d, 0xff
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov r15, rax
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14004f184
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f17f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f668
call fcn.140074c44
movdqa xmm0, xmmword [0x1400a7d10]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14004f1d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f1d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f66e
call fcn.140074c44
nop
mov rdx, qword [rbp - 1]
cmp rdx, 7
jbe 0x14004f217
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f212
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f674
call fcn.140074c44
mov edx, r14d
lea rcx, [rbp - 0x19]
call fcn.140053be0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x12
lea rdx, str..pipeLUNA_HOST
lea rcx, [rbp - 0x59]
call fcn.140014920
nop
mov r9, rbx
lea r8, [rbp - 0x59]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140023dd0
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rcx, qword [rbp - 0x39]
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], 0xffffffff
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0xc350
mov edx, 2
mov r9d, 0xff
mov r8d, 6
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov rsi, rax
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14004f2e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f2de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f67a
call fcn.140074c44
movdqa xmm0, xmmword [0x1400a7d10]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14004f336
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f330
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f680
call fcn.140074c44
nop
mov rdx, qword [rbp - 1]
cmp rdx, 7
jbe 0x14004f376
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f371
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f686
call fcn.140074c44
mov edx, r14d
lea rcx, [rbp - 0x19]
call fcn.140053be0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x13
lea rdx, str.LUNA_PIPE_AVAILABLE
lea rcx, [rbp - 0x59]
call fcn.140014920
nop
mov r9, rbx
lea r8, [rbp - 0x59]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140023dd0
lea r9, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova r9, qword [rbp - 0x39]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rdi, rax
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14004f41f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f41a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f68c
call fcn.140074c44
movdqa xmm0, xmmword [0x1400a7d10]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x39], r12w
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14004f479
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f46c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f692
call fcn.140074c44
movdqa xmm0, xmmword [0x1400a7d10]
mov rdx, qword [rbp - 1]
cmp rdx, 7
jbe 0x14004f4c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f4b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f698
call fcn.140074c44
movdqa xmm0, xmmword [0x1400a7d10]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r12w
mov edx, r14d
lea rcx, [rbp + 7]
call fcn.140053be0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x13
lea rdx, str.LUNA_PIPE_AVAILABLE
lea rcx, [rbp - 0x59]
call fcn.140014920
nop
mov r9, rbx
lea r8, [rbp - 0x59]
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140023dd0
lea rcx, [rsp + 0x48]
call fcn.14004ec90
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14004f562
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f55c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f69e
call fcn.140074c44
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 7
jbe 0x14004f5a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f59d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f6a4
call fcn.140074c44
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rbp - 0x59], r15
mov qword [rbp - 0x51], rsi
mov qword [rbp - 0x49], rdi
mov ecx, 0x18
call fcn.140074c08
test rax, rax
je 0x14004f5d9
movups xmm0, xmmword [rbp - 0x59]
movups xmmword [rax], xmm0
movsd xmm1, qword [rbp - 0x49]
movsd qword [rax + 0x10], xmm1
jmp 0x14004f5dc
mov rax, r12
mov qword [rbp - 0x59], rax
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14004ba40]
xor edx, edx
xor ecx, ecx
call fcn.140087e14
mov qword [rbp - 0x39], rax
test rax, rax
je 0x14004f659
cmp dword [rbp - 0x31], 0
je 0x14004f64e
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x59], xmm0
lea rcx, [rbp - 0x59]
call fcn.140056714
test eax, eax
jne 0x14004f64e
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140074d60
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 1
call fcn.14005644c
nop
mov dword [rbp - 0x31], r12d
mov ecx, 6
call fcn.14005644c
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
nop
call fcn.14007b488
int3