Function at 0x1400b6730
Capabilities:
Connect pipe
Create pipe

Disassembly:
push r15
push r14
push r13
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc0
movaps xmmword [rsp + 0xb0], xmm6
mov qword [rsp + 0x48], rcx
mov rax, qword [0x14030f948]
xor rax, rsp
mov qword [rsp + 0xa8], rax
lea r15, str..pipechrome.nacl.
lea rdi, [rsp + 0x70]
xorps xmm6, xmm6
lea r13, [rsp + 0x50]
xor r14d, r14d
mov esi, 0x1000
mov rbp, qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov ebx, 1
lock xadd dword [0x1403482b0], ebx
inc ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov edx, gethostbyname
mov rcx, rdi
lea r8, str._s_u._lu
mov r9, r15
call fcn.1400b6a65
mov rcx, rdi
call fcn.1401a6660
mov rbx, rax
movaps xmmword [rsp + 0x50], xmm6
mov qword [rsp + 0x60], 0
movabs rax, 0x7fffffffffffffef
cmp rbx, rax
ja 0x1400b6a55
cmp rbx, 0xb
jae 0x1400b67f7
mov byte [rsp + 0x67], bl
mov rax, r13
test rbx, rbx
jne 0x1400b683c
jmp 0x1400b6852
mov rsi, r15
lea r15, [rbx + 8]
and r15, 0xfffffffffffffff8
js 0x1400b6a5f
lea rcx, [r15 + r15]
call fcn.14018360c
mov qword [rsp + 0x50], rax
movabs rcx, 0x7fffffffffffffef
add rcx, 0x11
or rcx, r15
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x58], rbx
mov r15, rsi
xor r14d, r14d
mov esi, 0x1000
xor ecx, ecx
movsx edx, byte [rsp + rcx + 0x70]
mov word [rax], dx
add rax, 2
inc rcx
cmp rbx, rcx
jne 0x1400b683e
mov word [rax], 0
cmp byte [rsp + 0x67], r14b
mov rcx, r13
jns 0x1400b6866
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x3e8
mov edx, 0x80003
xor r8d, r8d
mov r9d, 1
call rbp
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
cmp byte [rsp + 0x67], r14b
jns 0x1400b68b0
mov rcx, qword [rsp + 0x50]
call fcn.140183668
mov rax, qword [rsp + 0x48]
mov rax, qword [rax]
cmp rax, 0xffffffffffffffff
jne 0x1400b68d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x1400b68d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xe7
jne 0x1400b6a24
mov rax, qword [rsp + 0x48]
cmp qword [rax], 0xffffffffffffffff
je 0x1400b6783
lea rcx, [rsp + 0x70]
call fcn.1401a6660
mov rdi, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
movabs rax, 0x7fffffffffffffef
cmp rdi, rax
ja 0x1400b6a55
cmp rdi, 0xb
jae 0x1400b6928
lea rax, [rsp + 0x50]
mov byte [rax + 0x17], dil
test rdi, rdi
jne 0x1400b695f
jmp 0x1400b6975
lea rbx, [rdi + 8]
and rbx, 0xfffffffffffffff8
js 0x1400b6a5f
lea rcx, [rbx + rbx]
call fcn.14018360c
mov qword [rsp + 0x50], rax
movabs rcx, 0x7fffffffffffffef
add rcx, 0x11
or rcx, rbx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x58], rdi
xor ecx, ecx
movsx edx, byte [rsp + rcx + 0x70]
mov word [rax], dx
add rax, 2
inc rcx
cmp rdi, rcx
jne 0x1400b6961
mov word [rax], 0
xor edi, edi
cmp byte [rsp + 0x67], dil
jns 0x1400b698a
mov rcx, qword [rsp + 0x50]
jmp 0x1400b698f
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x110000
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, qword [rsp + 0x48]
mov qword [rcx + 8], rax
cmp byte [rsp + 0x67], dil
jns 0x1400b69dc
mov rcx, qword [rsp + 0x50]
call fcn.140183668
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 8]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx]
cmp rax, 0xffffffffffffffff
je 0x1400b6a1e
xor edi, edi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
jne 0x1400b6a29
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x217
je 0x1400b6a29
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsi]
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rdi
mov rcx, qword [rsi + 8]
call rdi
jmp 0x1400b6a24
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 0xffffffff
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.140183a80
mov eax, edi
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc0
pop rbx
pop rbp
pop rdi
pop rsi
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x50]
call fcn.140064d6c
call fcn.140199d54
int3