Function at 0x14002ba10
Capabilities:
Create pipe

Disassembly:
mov r11, rsp
push r13
sub rsp, 0x130
mov rax, qword [0x1400a0f20]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x60], rdx
mov r13d, r8d
mov qword [rsp + 0x58], rcx
mov rax, rdx
cmp rcx, 0x1000
jb 0x14002be0b
movabs rdx, 0xffff800000000000
test rdx, rcx
jne 0x14002be0b
cmp rax, 0x1000
jb 0x14002be0b
test rdx, rax
jne 0x14002be0b
test r8d, 0xfffffffc
jne 0x14002be04
mov qword [r11 + 0x18], rbx
mov qword [r11 - 0x10], rbp
mov qword [r11 - 0x18], rsi
mov esi, r8d
and esi, 1
mov qword [r11 - 0x20], rdi
mov qword [r11 - 0x30], r14
xor r14d, r14d
nop dword [rax]
mov ebx, 1
lock xadd dword [0x1400a8dd0], ebx
inc ebx
call fcn.140016f20
mov r9d, eax
mov dword [rsp + 0x20], ebx
lea r8, str..pipeiprt_pipe__u__u
mov edx, 0x80
lea rcx, [rsp + 0x70]
call fcn.1400177a0
mov rbx, r14
test esi, esi
je 0x14002baf2
mov dword [rsp + 0x40], 0x18
lea rbx, [rsp + 0x40]
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x70]
mov edi, 8
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 0x10000
mov edx, 0x40080001
mov r8d, edi
mov dword [rsp + 0x20], 0x10000
lea r9d, [rdi - 7]
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14002bbcc
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x14002bb7d
mov qword [rsp + 0x38], rbx
lea r9d, [rbp + 2]
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x28], 0x10000
xor r8d, r8d
mov edx, 0x40080001
mov dword [rsp + 0x20], 0x10000
mov edi, r14d
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14002bbcc
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x14002bbc2
mov qword [rsp + 0x38], rbx
lea r9d, [rax - 0x56]
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x28], 0x10000
mov r8d, edi
mov edx, 0x40000001
mov dword [rsp + 0x20], 0x10000
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14002bbcc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x14002bc34
mov r9, r14
test r13b, 2
je 0x14002bbef
mov dword [rsp + 0x40], 0x18
lea r9, [rsp + 0x40]
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x28], 0x40000000
xor r8d, r8d
mov edx, 0x40000080
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x14002bc55
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r14d, r14d
cmp ebx, 0xe7
je 0x14002baa0
cmp ebx, 5
je 0x14002baa0
mov ecx, ebx
call fcn.14001ee80
jmp 0x14002bd67
mov qword [rsp + 0x110], r12
lea rdx, [0x140054850]
mov ecx, 0x98
mov qword [rsp + 0x100], r15
call fcn.14001ed50
mov rbx, rax
test rax, rax
je 0x14002bde6
lea rdx, [0x140054850]
mov ecx, 0x98
call fcn.14001ed50
mov rdi, rax
test rax, rax
je 0x14002bdd7
lea rcx, [rbx + 0x60]
call fcn.140030d50
mov esi, eax
test eax, eax
js 0x14002bdc5
lea rcx, [rdi + 0x60]
call fcn.140030d50
mov esi, eax
test eax, eax
js 0x14002bdbc
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rbx + 0x38], rax
test rax, rax
je 0x14002bdb3
mov edx, 1
xor r9d, r9d
mov r8d, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rdi + 0x38], rax
test rax, rax
je 0x14002bda9
mov dword [rbx], 0x19570528
mov eax, r13d
mov dword [rdi], 0x19570528
and r13b, 1
mov qword [rbx + 8], rbp
mov qword [rdi + 8], r14
mov byte [rbx + 0x10], 1
shr eax, 1
mov byte [rdi + 0x10], 0
and al, 1
mov byte [rbx + 0x11], 0
mov byte [rdi + 0x16], al
xor eax, eax
mov byte [rdi + 0x11], 0
mov qword [rbx + 0x58], rax
mov byte [rbx + 0x16], r13b
mov qword [rdi + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rax], rbx
mov rax, qword [rsp + 0x60]
mov qword [rax], rdi
xor eax, eax
mov r12, qword [rsp + 0x110]
mov r15, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x120]
mov rbp, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x150]
mov r14, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.140001250
add rsp, 0x130
pop r13
ret
mov rcx, qword [rbx + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rdi + 0x60]
call fcn.140030bb0
lea rcx, [rbx + 0x60]
call fcn.140030bb0
mov rcx, rdi
call fcn.14001ed80
mov rcx, rbx
call fcn.14001ed80
jmp 0x14002bdeb
mov rcx, rbx
mov esi, 0xfffffff8
call fcn.14001ed80
jmp 0x14002bdeb
mov esi, 0xfffffff8
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x14002bd57
mov eax, 0xfffffffe
jmp 0x14002bd8f
mov eax, 0xfffffffa
jmp 0x14002bd8f