Function at 0x18003f380
Capabilities:
Create pipe
Generate random numbers via winapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov qword [rsp + 0xa8], rcx
mov byte [rsp + 0x47], dl
movzx eax, dl
mov ecx, 0x40080002
sub ecx, eax
mov dword [rsp + 0xb8], ecx
xor eax, eax
mov qword [rsp + 0xe8], rax
mov ebx, 8
mov dil, 1
xorps xmm6, xmm6
nop dword [rax]
call sub.KERNEL32.dll_GetCurrentProcessId
mov dword [rsp + 0xc4], eax
jmp 0x18003f3ec
mov rax, qword [rsp + 0x70]
xchg qword [0x1803e10d8], rax
mov rax, qword [0x1803e10d8]
test rax, rax
jne 0x18003f420
movaps xmmword [rsp + 0x70], xmm6
xor ecx, ecx
lea rdx, [rsp + 0x70]
mov r8d, 0x10
mov r9d, 2
call sub.bcrypt.dll_BCryptGenRandom
test eax, eax
jns 0x18003f3e0
call fcn.1800405f0
jmp 0x18003f3e5
mov eax, 1
lock xadd qword [0x1803e10d8], rax
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xc4]
mov qword [rsp + 0xc8], rax
lea rax, [0x180009b40]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0xd8], rax
lea rax, [fcn.180007d80]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x70], 0
lea rax, str..pipe__rust_anonymous_pipe1__.
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 2
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 2
lea rcx, [rsp + 0xf8]
lea rdx, [rsp + 0x70]
call fcn.1800078a0
movups xmm0, xmmword [rsp + 0xf8]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0x108]
cmp qword [rsp + 0x50], 0
mov qword [rsp + 0x80], rax
sete al
or dil, al
test dil, 1
jne 0x18003f504
mov rcx, qword [rsp + 0x58]
mov edx, 1
call fcn.1800058e0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x50], xmm0
mov rsi, qword [rsp + 0x58]
lea rcx, [rsi + rax]
mov qword [rsp + 0xb0], rcx
test rax, rax
movabs rdi, 0x3ffffffffffffffe
mov dword [rsp + 0xc0], ebx
je 0x18003f550
movzx r13d, byte [rsi]
test r13b, r13b
js 0x18003f570
inc rsi
jmp 0x18003f5cf
xor r12d, r12d
xor r13d, r13d
xor ebp, ebp
xor esi, esi
xor r15d, r15d
jmp 0x18003f600
mov eax, r13d
and eax, 0x1f
movzx edx, byte [rsi + 1]
and edx, 0x3f
cmp r13b, 0xdf
jbe 0x18003f5c3
movzx ecx, byte [rsi + 2]
shl edx, 6
and ecx, 0x3f
or ecx, edx
cmp r13b, 0xf0
jb 0x18003f93a
movzx r13d, byte [rsi + 3]
add rsi, 4
and eax, 7
shl eax, 0x12
shl ecx, 6
and r13d, 0x3f
or r13d, ecx
or r13d, eax
cmp r13d, 0xffff
jbe 0x18003f5cf
jmp 0x18003f953
add rsi, 2
shl eax, 6
or eax, edx
mov r13d, eax
xor r12d, r12d
mov r15, qword [rsp + 0xb0]
sub r15, rsi
add r15, 3
mov rax, 0xffffffffffffffff
cmovb r15, rax
shr r15, 2
cmp r12w, 1
sbb r15, 0xffffffffffffffff
inc r15
mov bp, 1
cmp r15, 4
mov eax, 3
cmovb r15, rax
cmp r15, rdi
ja 0x18003fafc
inc r15
lea rbx, [r15 + r15]
mov edx, 2
mov rcx, rbx
call fcn.180005850
test rax, rax
je 0x18003fb03
mov rcx, rax
mov rax, qword [rsp + 0xe8]
inc eax
mov dword [rsp + 0xbc], eax
mov word [rcx], r13w
mov ebx, 1
mov rax, r15
mov qword [rsp + 0x48], rcx
jmp 0x18003f678
mov r14, r15
mov rax, r15
xor ebp, ebp
mov r13d, r12d
mov word [rcx + rbx*2], dx
inc rbx
mov r15, r14
mov r12d, r13d
test rsi, rsi
je 0x18003f6e0
test r12w, r12w
je 0x18003f6c0
xor r13d, r13d
cmp rbx, rax
jne 0x18003f880
mov r14, qword [rsp + 0xb0]
sub r14, rsi
add r14, 3
mov rax, 0xffffffffffffffff
cmovb r14, rax
shr r14, 2
cmp r13w, 1
sbb r14, 0xffffffffffffffff
cmp bp, 1
sbb r14, 0xffffffffffffffff
jmp 0x18003f702
cmp rsi, qword [rsp + 0xb0]
je 0x18003f6e0
movzx r12d, byte [rsi]
test r12b, r12b
js 0x18003f7bf
inc rsi
jmp 0x18003f683
cmp bp, 1
jne 0x18003f890
xor esi, esi
xor edx, edx
cmp rbx, r15
jne 0x18003f660
mov r13d, r12d
xor ebp, ebp
xor r12d, r12d
xor r14d, r14d
inc r14
add r14, rbx
jb 0x18003faee
lea rax, [r15 + r15]
cmp rax, r14
cmova r14, rax
cmp r14, 5
jae 0x18003f725
mov r14d, 4
lea rcx, [rdi + 1]
xor r8d, r8d
cmp r14, rcx
setbe r8b
lea rdx, [r14 + r14]
add r8, r8
test r15, r15
je 0x18003f755
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov eax, 2
jmp 0x18003f757
xor eax, eax
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0xc8]
lea r9, [rsp + 0x70]
call fcn.18000e140
cmp qword [rsp + 0xc8], 0
mov rcx, qword [rsp + 0xd0]
je 0x18003f7b2
mov rdx, qword [rsp + 0xd8]
movabs rax, 0x8000000000000001
cmp rdx, rax
jne 0x18003fae9
mov r14, r15
mov rax, r15
mov edx, r12d
mov rcx, qword [rsp + 0x48]
jmp 0x18003f66b
mov qword [rsp + 0x48], rcx
mov rax, r14
jmp 0x18003f883
mov edx, r12d
and edx, 0x1f
movzx edi, byte [rsi + 1]
and edi, 0x3f
cmp r12b, 0xdf
jbe 0x18003f806
movzx r9d, byte [rsi + 2]
shl edi, 6
and r9d, 0x3f
or r9d, edi
cmp r12b, 0xf0
jb 0x18003f821
movzx r12d, byte [rsi + 3]
add rsi, 4
and edx, 7
shl edx, 0x12
shl r9d, 6
and r12d, 0x3f
or r12d, r9d
or r12d, edx
jmp 0x18003f82e
add rsi, 2
shl edx, 6
or edx, edi
mov r12d, edx
movabs rdi, 0x3ffffffffffffffe
jmp 0x18003f683
add rsi, 3
shl edx, 0xc
or r9d, edx
mov r12d, r9d
movabs rdi, 0x3ffffffffffffffe
cmp r12d, 0xffff
jbe 0x18003f683
add r12d, 0xffff0000
mov edx, r12d
shr edx, 0xa
or edx, 0xd800
and r12d, 0x3ff
or r12d, 0xdc00
mov r13d, r12d
mov r12d, edx
cmp rbx, rax
je 0x18003f68f
nop word cs:[rax + rax]
mov r14, r15
mov edx, r12d
jmp 0x18003f66b
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000
mov dword [rsp + 0x20], 0x10000
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov edx, dword [rsp + 0xb8]
mov ebx, dword [rsp + 0xc0]
mov r8d, ebx
mov r9d, 1
call sub.KERNEL32.dll_CreateNamedPipeW
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x18003f9f3
call sub.KERNEL32.dll_GetLastError
mov ecx, dword [rsp + 0xbc]
cmp ecx, 0xa
jge 0x18003f97e
cmp eax, 5
jne 0x18003f910
mov eax, ecx
mov qword [rsp + 0xe8], rax
jmp 0x18003f91b
test ebx, ebx
je 0x18003f97e
xor ebx, ebx
cmp eax, 0x57
jne 0x18003f97e
xor edi, edi
test r15, r15
je 0x18003f3d0
mov edx, 2
mov rcx, rsi
call fcn.1800058e0
xor edi, edi
jmp 0x18003f3d0
add rsi, 3
shl eax, 0xc
or ecx, eax
mov r13d, ecx
cmp r13d, 0xffff
jbe 0x18003f5cf
add r13d, 0xffff0000
mov eax, r13d
shr eax, 0xa
or eax, 0xd800
and r13d, 0x3ff
or r13d, 0xdc00
mov r12d, r13d
mov r13d, eax
jmp 0x18003f5d2
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0xa8]
mov qword [rcx + 8], rax
mov qword [rcx], 1
mov rbx, 0xffffffffffffffff
test r15, r15
je 0x18003f9b2
mov edx, 2
mov rcx, rsi
call fcn.1800058e0
cmp qword [rsp + 0x50], 0
je 0x18003f9c9
mov rcx, qword [rsp + 0x58]
mov edx, 1
call fcn.1800058e0
cmp rdi, 0xffffffffffffffff
je 0x18003f9d7
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test r15, r15
je 0x18003fa05
mov edx, 2
mov rcx, rsi
call fcn.1800058e0
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x90], 0
mov word [rsp + 0x94], 0
movzx eax, byte [rsp + 0x47]
mov byte [rsp + 0x91], al
xor al, 1
mov byte [rsp + 0x90], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov dword [rsp + 0xc8], 0x18
mov qword [rsp + 0xd0], 0
mov dword [rsp + 0xd8], 1
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x70], rax
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
mov rcx, rsi
call fcn.180031c60
test rax, rax
je 0x18003fab4
mov rax, qword [rsp + 0xa8]
mov qword [rax + 8], rdx
mov qword [rax], 1
mov rbx, rdi
cmp qword [rsp + 0x50], 0
jne 0x18003f9ba
jmp 0x18003f9c9
mov rax, qword [rsp + 0xa8]
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdx
mov qword [rax], 0
cmp qword [rsp + 0x50], 0
je 0x18003f9d7
mov edx, 1
mov rcx, rsi
call fcn.1800058e0
jmp 0x18003f9d7
test rdx, rdx
jne 0x18003faf5
call fcn.180007500
jmp 0x18003fb10
call fcn.180007550
jmp 0x18003fb10
call fcn.180007500
jmp 0x18003fb10
mov edx, 2
mov rcx, rbx
call fcn.180007550
ud2