Function at 0x18003da90
Capabilities:
Create pipe
Generate random numbers via winapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov qword [rsp + 0xa8], rcx
mov byte [rsp + 0x47], dl
movzx eax, dl
mov ecx, 0x40080002
sub ecx, eax
mov dword [rsp + 0xb8], ecx
xor eax, eax
mov qword [rsp + 0xe8], rax
mov ebx, 8
mov dil, 1
xorps xmm6, xmm6
nop dword [rax]
call sub.KERNEL32.dll_GetCurrentProcessId
mov dword [rsp + 0xc4], eax
jmp 0x18003dafc
mov rax, qword [rsp + 0x70]
xchg qword [0x1803e0090], rax
mov rax, qword [0x1803e0090]
test rax, rax
jne 0x18003db30
movaps xmmword [rsp + 0x70], xmm6
xor ecx, ecx
lea rdx, [rsp + 0x70]
mov r8d, 0x10
mov r9d, 2
call sub.bcrypt.dll_BCryptGenRandom
test eax, eax
jns 0x18003daf0
call fcn.18003ed00
jmp 0x18003daf5
mov eax, 1
lock xadd qword [0x1803e0090], rax
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xc8], rax
lea rax, [0x180009250]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xd8], rax
lea rax, [fcn.180007490]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x70], 0
lea rax, str..pipe__rust_anonymous_pipe1__.
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 2
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
lea rcx, [rsp + 0xf8]
lea rdx, [rsp + 0x70]
call fcn.180006fb0
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0x108]
cmp qword [rsp + 0x50], 0
mov qword [rsp + 0x80], rax
sete al
or dil, al
test dil, 1
jne 0x18003dc14
mov rcx, qword [rsp + 0x58]
mov edx, 1
call fcn.180004ff0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x50], xmm0
mov rsi, qword [rsp + 0x58]
lea rcx, [rsi + rax]
mov qword [rsp + 0xb0], rcx
test rax, rax
movabs rdi, 0x3ffffffffffffffe
mov dword [rsp + 0xc0], ebx
je 0x18003dc60
movzx r13d, byte [rsi]
test r13b, r13b
js 0x18003dc80
inc rsi
jmp 0x18003dcdf
xor r12d, r12d
xor r13d, r13d
xor ebp, ebp
xor esi, esi
xor r15d, r15d
jmp 0x18003dd10
mov eax, r13d
and eax, 0x1f
movzx edx, byte [rsi + 1]
and edx, 0x3f
cmp r13b, 0xdf
jbe 0x18003dcd3
movzx ecx, byte [rsi + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r13b, 0xf0
jb 0x18003e04a
movzx r13d, byte [rsi + 3]
add rsi, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and r13d, 0x3f
or r13d, ecx
or r13d, eax
cmp r13d, 0xffff
jbe 0x18003dcdf
jmp 0x18003e063
add rsi, 2
shl eax, 6
or eax, edx
mov r13d, eax
xor r12d, r12d
mov r15, qword [rsp + 0xb0]
sub r15, rsi
add r15, 3
mov rax, 0xffffffffffffffff
cmovb r15, rax
shr r15, 2
cmp r12w, 1
sbb r15, 0xffffffffffffffff
inc r15
mov bp, 1
cmp r15, 4
mov eax, 3
cmovb r15, rax
cmp r15, rdi
ja 0x18003e20c
inc r15
lea rbx, [r15 + r15]
mov edx, 2
mov rcx, rbx
call fcn.180004f60
test rax, rax
je 0x18003e213
mov rcx, rax
mov rax, qword [rsp + 0xe8]
inc eax
mov dword [rsp + 0xbc], eax
mov word [rcx], r13w
mov ebx, 1
mov rax, r15
mov qword [rsp + 0x48], rcx
jmp 0x18003dd88
mov r14, r15
mov rax, r15
xor ebp, ebp
mov r13d, r12d
mov word [rcx + rbx*2], dx
inc rbx
mov r15, r14
mov r12d, r13d
test rsi, rsi
je 0x18003ddf0
test r12w, r12w
je 0x18003ddd0
xor r13d, r13d
cmp rbx, rax
jne 0x18003df90
mov r14, qword [rsp + 0xb0]
sub r14, rsi
add r14, 3
mov rax, 0xffffffffffffffff
cmovb r14, rax
shr r14, 2
cmp r13w, 1
sbb r14, 0xffffffffffffffff
cmp bp, 1
sbb r14, 0xffffffffffffffff
jmp 0x18003de12
cmp rsi, qword [rsp + 0xb0]
je 0x18003ddf0
movzx r12d, byte [rsi]
test r12b, r12b
js 0x18003decf
inc rsi
jmp 0x18003dd93
cmp bp, 1
jne 0x18003dfa0
xor esi, esi
xor edx, edx
cmp rbx, r15
jne 0x18003dd70
mov r13d, r12d
xor ebp, ebp
xor r12d, r12d
xor r14d, r14d
inc r14
add r14, rbx
jb 0x18003e1fe
lea rax, [r15 + r15]
cmp rax, r14
cmova r14, rax
cmp r14, 5
jae 0x18003de35
mov r14d, 4
lea rcx, [rdi + 1]
xor r8d, r8d
cmp r14, rcx
setbe r8b
lea rdx, [r14 + r14]
add r8, r8
test r15, r15
je 0x18003de65
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov eax, 2
jmp 0x18003de67
xor eax, eax
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0xc8]
lea r9, [rsp + 0x70]
call fcn.18000d7c0
cmp qword [rsp + 0xc8], 0
mov rcx, qword [rsp + 0xd0]
je 0x18003dec2
mov rdx, qword [rsp + 0xd8]
movabs rax, 0x8000000000000001
cmp rdx, rax
jne 0x18003e1f9
mov r14, r15
mov rax, r15
mov edx, r12d
mov rcx, qword [rsp + 0x48]
jmp 0x18003dd7b
mov qword [rsp + 0x48], rcx
mov rax, r14
jmp 0x18003df93
mov edx, r12d
and edx, 0x1f
movzx edi, byte [rsi + 1]
and edi, 0x3f
cmp r12b, 0xdf
jbe 0x18003df16
movzx r9d, byte [rsi + 2]
shl edi, 6
and r9d, 0x3f
or r9d, edi
cmp r12b, 0xf0
jb 0x18003df31
movzx r12d, byte [rsi + 3]
add rsi, 4
and edx, 7
shl edx, 0x12
shl r9d, 6
and r12d, 0x3f
or r12d, r9d
or r12d, edx
jmp 0x18003df3e
add rsi, 2
shl edx, 6
or edx, edi
mov r12d, edx
movabs rdi, 0x3ffffffffffffffe
jmp 0x18003dd93
add rsi, 3
shl edx, 0xc
or r9d, edx
mov r12d, r9d
movabs rdi, 0x3ffffffffffffffe
cmp r12d, 0xffff
jbe 0x18003dd93
add r12d, 0xffff0000
mov edx, r12d
shr edx, 0xa
or edx, 0xd800
and r12d, 0x3ff
or r12d, 0xdc00
mov r13d, r12d
mov r12d, edx
cmp rbx, rax
je 0x18003dd9f
nop word cs:[rax + rax]
mov r14, r15
mov edx, r12d
jmp 0x18003dd7b
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov edx, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc0]
mov r8d, ebx
mov r9d, 1
call sub.KERNEL32.dll_CreateNamedPipeW
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x18003e103
call sub.KERNEL32.dll_GetLastError
mov ecx, dword [rsp + 0xbc]
cmp ecx, 0xa
jge 0x18003e08e
cmp eax, 5
jne 0x18003e020
mov eax, ecx
mov qword [rsp + 0xe8], rax
jmp 0x18003e02b
test ebx, ebx
je 0x18003e08e
xor ebx, ebx
cmp eax, 0x57
jne 0x18003e08e
xor edi, edi
test r15, r15
je 0x18003dae0
mov edx, 2
mov rcx, rsi
call fcn.180004ff0
xor edi, edi
jmp 0x18003dae0
add rsi, 3
shl eax, 0xc
or ecx, eax
mov r13d, ecx
cmp r13d, 0xffff
jbe 0x18003dcdf
add r13d, 0xffff0000
mov eax, r13d
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov r12d, r13d
mov r13d, eax
jmp 0x18003dce2
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0xa8]
mov qword [rcx + 8], rax
mov qword [rcx], 1
mov rbx, 0xffffffffffffffff
test r15, r15
je 0x18003e0c2
mov edx, 2
mov rcx, rsi
call fcn.180004ff0
cmp qword [rsp + 0x50], 0
je 0x18003e0d9
mov rcx, qword [rsp + 0x58]
mov edx, 1
call fcn.180004ff0
cmp rdi, 0xffffffffffffffff
je 0x18003e0e7
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test r15, r15
je 0x18003e115
mov edx, 2
mov rcx, rsi
call fcn.180004ff0
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x90], 0
mov word [rsp + 0x94], 0
movzx eax, byte [rsp + 0x47]
mov byte [rsp + 0x91], al
xor al, 1
mov byte [rsp + 0x90], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov dword [rsp + 0xc8], 0x18
mov qword [rsp + 0xd0], 0
mov dword [rsp + 0xd8], 1
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x70], rax
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
mov rcx, rsi
call fcn.180030ba0
test rax, rax
je 0x18003e1c4
mov rax, qword [rsp + 0xa8]
mov qword [rax + 8], rdx
mov qword [rax], 1
mov rbx, rdi
cmp qword [rsp + 0x50], 0
jne 0x18003e0ca
jmp 0x18003e0d9
mov rax, qword [rsp + 0xa8]
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdx
mov qword [rax], 0
cmp qword [rsp + 0x50], 0
je 0x18003e0e7
mov edx, 1
mov rcx, rsi
call fcn.180004ff0
jmp 0x18003e0e7
test rdx, rdx
jne 0x18003e205
call fcn.180006c10
jmp 0x18003e220
call fcn.180006c60
jmp 0x18003e220
call fcn.180006c10
jmp 0x18003e220
mov edx, 2
mov rcx, rbx
call fcn.180006c60
ud2