Function at 0x140017fa0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
cmp byte [0x14032ee84], 0
jne 0x1400181ce
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r14
xor r14d, r14d
mov esi, r14d
mov qword [rax - 0x10], rbx
mov qword [rsp + 0x30], r14
lea rcx, str..pipeComputeShareManagement
mov dword [rsp + 0x28], 0x40000000
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140018171
call fcn.14005fdd0
mov r8d, eax
mov qword [rbp - 0x11], r14
mov eax, 0x214d0215
xor r9d, r9d
imul r8d
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x7b
lea edx, [r9 + 1]
sub r8d, ecx
xor ecx, ecx
inc r8d
mov dword [rbp + 0x77], r8d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 7], rax
lea r9, [rbp - 0x19]
lea rax, [rbp - 0x11]
mov r8d, 4
lea rdx, [rbp + 0x77]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rbp + 7]
mov edx, 0xbb8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor r9d, r9d
mov dword [rbp + 0x67], r14d
lea r8, [rbp + 0x67]
mov rcx, rdi
lea rdx, [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x140018151
cmp dword [rbp + 0x67], 4
jne 0x140018151
xor r9d, r9d
mov qword [rbp + 0xf], r14
xorps xmm0, xmm0
mov dword [rbp + 0x7f], r14d
xor r8d, r8d
xor ecx, ecx
movdqu xmmword [rbp + 0x17], xmm0
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp + 0x27], rax
lea r9, [rbp - 0x15]
lea rax, [rbp + 0xf]
mov r8d, 4
lea rdx, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, qword [rbp + 0x27]
mov edx, 0xbb8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor r9d, r9d
mov dword [rbp + 0x6f], r14d
lea r8, [rbp + 0x6f]
mov rcx, rdi
lea rdx, [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x140018148
cmp dword [rbp + 0x6f], 4
jne 0x140018148
mov eax, dword [rbp + 0x77]
imul eax, eax
cmp dword [rbp + 0x7f], eax
jne 0x140018135
mov ebx, r14d
jmp 0x140018162
lea rcx, str.MESSAGECRC_error_reading_from_management_service_
call fcn.140019a70
mov ebx, reloc.WS2_32.dll_socket
jmp 0x140018162
lea rcx, str.MESSAGETimed_out_reading_from_management_service
jmp 0x140018158
lea rcx, str.MESSAGETimed_out_writing_to_management_service_
call fcn.140019a70
mov ebx, 0x102
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400181ae
jmp 0x140018176
mov ebx, 0xe9
lea rcx, str.MESSAGEImmediately_exiting_due_to_failure_with_management_service
call fcn.140019a70
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jl 0x140017fd2
test ebx, ebx
je 0x1400181ae
lea rcx, str.MESSAGEImmediately_exiting_due_to_failure_with_management_service
call fcn.140019a70
mov dword [0x14032ee80], ebx
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x98]
mov r14, qword [rsp + 0x90]
add rsp, 0xb0
pop rbp
ret