Function at 0x11011e0d0
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12d, r8d
mov rdi, rcx
xor r13d, r13d
mov r15d, r13d
test rcx, rcx
jne 0x11011e127
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
call sym.msvcrt.dll__errno
mov dword [rax], 0x16
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.msvcrt.dll__invalid_parameter
or eax, 0xffffffff
jmp 0x11011e3b8
or ebx, 0xffffffff
mov dword [rcx + 4], ebx
mov dword [rcx], ebx
test r12d, 0xffff3f7f
je 0x11011e166
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
call sym.msvcrt.dll__errno
mov dword [rax], 0x16
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.msvcrt.dll__invalid_parameter
mov eax, ebx
jmp 0x11011e3b8
mov eax, r12d
mov ecx, 0xc000
and eax, ecx
cmp eax, ecx
je 0x11011e138
mov dword [rsp + 0x58], 0x18
mov qword [rsp + 0x60], r13
mov eax, r12d
and eax, 0x80
mov dword [rsp + 0x30], eax
mov eax, r13d
sete al
mov dword [rsp + 0x68], eax
mov r9d, edx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_namedpipe_l1_1_0.dll_CreatePipe]
test eax, eax
jne 0x11011e1c2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, eax
call fcn.110107d48
jmp 0x11011e15f
call fcn.11011c720
movsxd r14, eax
mov dword [rsp + 0xa0], r14d
cmp r14d, ebx
je 0x11011e370
mov rax, r14
mov r13, r14
sar r13, 5
lea rdx, [sym.msvcrt.dll___pioinfo]
and eax, 0x1f
imul rcx, rax, 0x38
mov qword [rsp + 0x50], rcx
mov rax, qword [rdx + r13*8]
mov byte [rcx + rax + 8], 0x89
mov rax, qword [rdx + r13*8]
and dword [rcx + rax + 0xc], 0xfffffffc
mov rax, qword [rdx + r13*8]
and dword [rcx + rax + 0xc], 0xfffffff7
mov ecx, r14d
call fcn.11011cc84
call fcn.11011c720
movsxd rsi, eax
mov dword [rsp + 0xb8], esi
cmp esi, ebx
je 0x11011e356
and dword [rsp + 0xa0], 0
mov rax, rsi
mov rcx, rsi
sar rcx, 5
mov qword [rsp + 0x38], rcx
and eax, 0x1f
mov qword [rsp + 0x50], rax
imul r13, rax, 0x38
lea rdx, [sym.msvcrt.dll___pioinfo]
mov rax, qword [rdx + rcx*8]
mov byte [rax + r13 + 8], 0x89
mov rax, qword [rdx + rcx*8]
and dword [rax + r13 + 0xc], 0xfffffffc
mov rax, qword [rdx + rcx*8]
and dword [rax + r13 + 0xc], 0xfffffff7
mov ecx, esi
call fcn.11011cc84
lea rcx, [rsp + 0xa0]
call sym.msvcrt.dll__get_fmode
test eax, eax
je 0x11011e2a7
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.11012bc8c
mov eax, 0x8000
test eax, r12d
jne 0x11011e2c1
bt r12d, 0xe
jb 0x11011e2f3
cmp dword [rsp + 0xa0], eax
jne 0x11011e2f3
mov rdx, r14
sar rdx, 5
mov rax, r14
and eax, 0x1f
imul rcx, rax, 0x38
lea r9, [sym.msvcrt.dll___pioinfo]
mov rax, qword [r9 + rdx*8]
and byte [rax + rcx + 8], 0x7f
mov rdx, qword [rsp + 0x38]
mov rax, qword [r9 + rdx*8]
and byte [rax + r13 + 8], 0x7f
jmp 0x11011e2ff
lea r9, [sym.msvcrt.dll___pioinfo]
mov rdx, qword [rsp + 0x38]
mov r8, r14
xor r13d, r13d
cmp dword [rsp + 0x30], r13d
je 0x11011e333
mov rax, r14
sar rax, 5
and r8d, 0x1f
imul rcx, r8, 0x38
mov rax, qword [r9 + rax*8]
or byte [rax + rcx + 8], 0x10
imul rcx, qword [rsp + 0x50], 0x38
mov rax, qword [r9 + rdx*8]
or byte [rax + rcx + 8], 0x10
mov rdx, qword [rsp + 0x40]
mov ecx, r14d
call fcn.11011cbcc
mov rdx, qword [rsp + 0x48]
mov ecx, esi
call fcn.11011cbcc
call sym.msvcrt.dll__errno
mov dword [rax], r13d
jmp 0x11011e37d
lea rdx, [sym.msvcrt.dll___pioinfo]
mov rax, qword [rdx + r13*8]
mov rcx, qword [rsp + 0x50]
xor r13d, r13d
mov byte [rcx + rax + 8], r13b
jmp 0x11011e377
mov esi, dword [rsp + 0xb8]
mov r15d, 1
test r15d, r15d
je 0x11011e3b0
call sym.msvcrt.dll__errno
mov dword [rax], 0x18
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
jmp 0x11011e15f
mov dword [rdi], r14d
mov dword [rdi + 4], esi
xor eax, eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret