Function at 0x14000c930
Capabilities:
Check os version
Create thread
Read file on windows
Read pipe

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
push rbp
sub rsp, 0x158
xor ebp, ebp
mov rbx, rcx
cmp dword [reloc.WS2_32.dll_accept], ebp
je 0x14000c9e1
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x11c
call qword [sym.imp.ntdll.dll_RtlGetVersion]
mov eax, dword [rsp + 0x34]
cmp eax, 0xa
ja 0x14000c99b
jne 0x14000c989
cmp dword [rsp + 0x3c], 0x55f0
jae 0x14000c99b
mov dword [0x14005e128], 0xa
lea rcx, str.msvcrt.dll
jmp 0x14000c9ac
mov dword [0x14005e128], eax
xor eax, eax
add rsp, 0x158
pop rbp
pop rbx
ret
mov dword [0x14005e128], 0xb
lea rcx, str.ucrtbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.exit
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x14000c850]
mov ecx, 1
mov qword [0x14005e130], rax
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov dword [reloc.WS2_32.dll_accept], ebp
mov ecx, dword [rbx]
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x150], rdi
call qword [sym.imp.WS2_32.dll_ntohl]
mov eax, eax
add rbx, rax
mov rax, 0xffffffffffffffff
cmp byte [rbx + rax + 0xd], bpl
lea rax, [rax + 1]
jne 0x14000ca05
lea eax, [rax*2 + 2]
movsxd rcx, eax
call fcn.140028a64
mov rdi, rax
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rbx + rax + 0xc], bpl
jne 0x14000ca30
inc eax
lea r8, [rbx + 0xc]
mov dword [rsp + 0x28], eax
mov r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x20], rdi
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x14000ca77
lea rcx, str.MultiByteToWideChar_failed
call fcn.14002ae14
mov rcx, rdi
call fcn.140028a50
mov rdi, rbp
lea rax, [rsp + 0x180]
mov r9, rdi
mov qword [rsp + 0x28], rax
lea r8, [0x14000c8c0]
xor edx, edx
mov dword [rsp + 0x20], ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
mov edx, 0xffffffff
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x14005e160]
lea rax, [rsp + 0x178]
mov qword [rsp + 0x28], rbp
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rsp + 0x178], ebp
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov eax, dword [rsp + 0x178]
test eax, eax
je 0x14000cbab
lea ecx, [rax + 1]
call fcn.140028a64
mov r8d, dword [rsp + 0x178]
xor edx, edx
inc r8d
mov rcx, rax
mov rbx, rax
call fcn.140022720
mov r8d, dword [rsp + 0x178]
lea r9, [rsp + 0x188]
mov rcx, qword [0x14005e160]
mov rdx, rbx
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [0x14005c344], 1
jne 0x14000cb7d
mov rax, qword [0x14005c350]
cmp word [rax + 0x1c0], 2
jne 0x14000cb7d
movsxd rcx, dword [rax + 0x1c8]
test ecx, ecx
je 0x14000cb7d
movsxd r10, dword [rsp + 0x178]
mov r8d, 0x1e
mov rdx, r10
cmp r10, rcx
ja 0x14000cb70
lea r9d, [r8 - 0x1d]
jmp 0x14000cb8c
mov rdx, rbx
mov ecx, r10d
call fcn.140009a20
jmp 0x14000cb94
movsxd rdx, dword [rsp + 0x178]
xor r9d, r9d
lea r8d, [r9 + 0x1e]
mov rcx, rbx
call fcn.140009930
mov rdx, rbx
lea rcx, [0x14004bcc8]
call fcn.140005ff0
mov rcx, rbx
call fcn.140028a50
mov rcx, rdi
call fcn.140028a50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14005e160]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14005e168]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0x150]
xor eax, eax
mov rsi, qword [rsp + 0x170]
add rsp, 0x158
pop rbp
pop rbx
ret