Function at 0x14006e5fc
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x170
mov rax, qword [0x1401ff510]
xor rax, rsp
mov qword [rsp + 0x160], rax
mov edx, r9d
mov rbx, rcx
xor r9d, r9d
mov ecx, 0x88
xor r8d, r8d
xor esi, esi
call fcn.1400686a4
mov rdi, rax
and qword [rax + 0x40], rsi
mov qword [rax + 0x20], rbx
mov ebx, 0x1000
and qword [rsp + 0x48], rsi
mov dword [rsp + 0x40], 0x18
mov dword [rsp + 0x50], 1
mov r9, rdi
mov dword [rsp + 0x20], esi
lea r8, str..pipe_p_u
mov edx, 0xff
lea rcx, [rsp + 0x60]
call fcn.1400010e4
lea rax, [rsp + 0x40]
mov r9d, 1
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x60]
and dword [rsp + 0x30], 0
xor r8d, r8d
mov dword [rsp + 0x28], ebx
mov edx, 0x40080001
mov dword [rsp + 0x20], ebx
inc esi
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov qword [rdi + 0x60], rax
cmp rax, 0xffffffffffffffff
je 0x14006e83e
cmp rax, 5
je 0x14006e65d
mov ebx, 0x20
mov ecx, ebx
call fcn.140164508
mov qword [rdi + 0x70], rax
test rax, rax
je 0x14006e76c
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.14015d410
xor r9d, r9d
lea edx, [rbx - 0x1f]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov rcx, qword [rdi + 0x70]
mov qword [rcx + 0x18], rax
test rax, rax
je 0x14006e7b2
and qword [rsp + 0x30], 0
lea r9, [rsp + 0x40]
mov dword [rsp + 0x28], 0x80
lea rcx, [rsp + 0x60]
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0x40000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rdi + 0x68], rax
cmp rax, 0xffffffffffffffff
je 0x14006e7f8
mov rax, rdi
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.14015bde0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xfe
lea rdx, str...microstackILibProcessPipe.c
mov edi, 0x1f3
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, edi
xor ecx, ecx
call fcn.14006ddcc
mov r8d, edi
lea rdx, str...microstackILibProcessPipe.c
lea rcx, str.CRITICALEXIT__FILE:__s__LINE:__d_r_n
call fcn.140001090
mov ecx, ebx
call fcn.14015e4d8
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xfe
lea rdx, str...microstackILibProcessPipe.c
mov edi, 0x1f5
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, edi
xor ecx, ecx
call fcn.14006ddcc
mov r8d, edi
lea rdx, str...microstackILibProcessPipe.c
lea rcx, str.CRITICALEXIT__FILE:__s__LINE:__d_r_n
call fcn.140001090
mov ecx, ebx
call fcn.14015e4d8
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xfe
lea rdx, str...microstackILibProcessPipe.c
mov edi, 0x1f8
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, edi
xor ecx, ecx
call fcn.14006ddcc
mov r8d, edi
lea rdx, str...microstackILibProcessPipe.c
lea rcx, str.CRITICALEXIT__FILE:__s__LINE:__d_r_n
call fcn.140001090
mov ecx, ebx
call fcn.14015e4d8
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xfe
lea rdx, str...microstackILibProcessPipe.c
mov edi, 0x1f0
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, edi
xor ecx, ecx
call fcn.14006ddcc
mov r8d, edi
lea rdx, str...microstackILibProcessPipe.c
lea rcx, str.CRITICALEXIT__FILE:__s__LINE:__d_r_n
call fcn.140001090
mov ecx, ebx
call fcn.14015e4d8
int3