Function at 0x11011e080
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12d, r8d
mov rdi, rcx
xor r13d, r13d
mov r15d, r13d
test rcx, rcx
jne 0x11011e0d7
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
call sym.msvcrt.dll__errno
mov dword [rax], 0x16
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.msvcrt.dll__invalid_parameter
or eax, 0xffffffff
jmp 0x11011e368
or ebx, 0xffffffff
mov dword [rcx + 4], ebx
mov dword [rcx], ebx
test r12d, 0xffff3f7f
je 0x11011e116
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
call sym.msvcrt.dll__errno
mov dword [rax], 0x16
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.msvcrt.dll__invalid_parameter
mov eax, ebx
jmp 0x11011e368
mov eax, r12d
mov ecx, 0xc000
and eax, ecx
cmp eax, ecx
je 0x11011e0e8
mov dword [rsp + 0x58], 0x18
mov qword [rsp + 0x60], r13
mov eax, r12d
and eax, 0x80
mov dword [rsp + 0x30], eax
mov eax, r13d
sete al
mov dword [rsp + 0x68], eax
mov r9d, edx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_namedpipe_l1_1_0.dll_CreatePipe]
test eax, eax
jne 0x11011e172
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, eax
call fcn.110107d08
jmp 0x11011e10f
call fcn.11011c6d0
movsxd r14, eax
mov dword [rsp + 0xa0], r14d
cmp r14d, ebx
je 0x11011e320
mov rax, r14
mov r13, r14
sar r13, 5
lea rdx, [sym.msvcrt.dll___pioinfo]
and eax, 0x1f
imul rcx, rax, 0x38
mov qword [rsp + 0x50], rcx
mov rax, qword [rdx + r13*8]
mov byte [rcx + rax + 8], 0x89
mov rax, qword [rdx + r13*8]
and dword [rcx + rax + 0xc], 0xfffffffc
mov rax, qword [rdx + r13*8]
and dword [rcx + rax + 0xc], 0xfffffff7
mov ecx, r14d
call fcn.11011cc34
call fcn.11011c6d0
movsxd rsi, eax
mov dword [rsp + 0xb8], esi
cmp esi, ebx
je 0x11011e306
and dword [rsp + 0xa0], 0
mov rax, rsi
mov rcx, rsi
sar rcx, 5
mov qword [rsp + 0x38], rcx
and eax, 0x1f
mov qword [rsp + 0x50], rax
imul r13, rax, 0x38
lea rdx, [sym.msvcrt.dll___pioinfo]
mov rax, qword [rdx + rcx*8]
mov byte [rax + r13 + 8], 0x89
mov rax, qword [rdx + rcx*8]
and dword [rax + r13 + 0xc], 0xfffffffc
mov rax, qword [rdx + rcx*8]
and dword [rax + r13 + 0xc], 0xfffffff7
mov ecx, esi
call fcn.11011cc34
lea rcx, [rsp + 0xa0]
call sym.msvcrt.dll__get_fmode
test eax, eax
je 0x11011e257
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.11012bbfc
mov eax, 0x8000
test eax, r12d
jne 0x11011e271
bt r12d, 0xe
jb 0x11011e2a3
cmp dword [rsp + 0xa0], eax
jne 0x11011e2a3
mov rdx, r14
sar rdx, 5
mov rax, r14
and eax, 0x1f
imul rcx, rax, 0x38
lea r9, [sym.msvcrt.dll___pioinfo]
mov rax, qword [r9 + rdx*8]
and byte [rax + rcx + 8], 0x7f
mov rdx, qword [rsp + 0x38]
mov rax, qword [r9 + rdx*8]
and byte [rax + r13 + 8], 0x7f
jmp 0x11011e2af
lea r9, [sym.msvcrt.dll___pioinfo]
mov rdx, qword [rsp + 0x38]
mov r8, r14
xor r13d, r13d
cmp dword [rsp + 0x30], r13d
je 0x11011e2e3
mov rax, r14
sar rax, 5
and r8d, 0x1f
imul rcx, r8, 0x38
mov rax, qword [r9 + rax*8]
or byte [rax + rcx + 8], 0x10
imul rcx, qword [rsp + 0x50], 0x38
mov rax, qword [r9 + rdx*8]
or byte [rax + rcx + 8], 0x10
mov rdx, qword [rsp + 0x40]
mov ecx, r14d
call fcn.11011cb7c
mov rdx, qword [rsp + 0x48]
mov ecx, esi
call fcn.11011cb7c
call sym.msvcrt.dll__errno
mov dword [rax], r13d
jmp 0x11011e32d
lea rdx, [sym.msvcrt.dll___pioinfo]
mov rax, qword [rdx + r13*8]
mov rcx, qword [rsp + 0x50]
xor r13d, r13d
mov byte [rcx + rax + 8], r13b
jmp 0x11011e327
mov esi, dword [rsp + 0xb8]
mov r15d, 1
test r15d, r15d
je 0x11011e360
call sym.msvcrt.dll__errno
mov dword [rax], 0x18
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
call sym.msvcrt.dll___doserrno
mov dword [rax], r13d
jmp 0x11011e10f
mov dword [rdi], r14d
mov dword [rdi + 4], esi
xor eax, eax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret