Function at 0x14011ec10
Capabilities:
Read pipe
Write pipe

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
mov rdi, r8
mov rbx, rdx
mov r14, rcx
mov rax, qword [0x1401fdbb8]
xor rax, rsp
mov qword [rsp + 0x180], rax
lea r15, [rcx + 2]
mov r12, qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
mov rbp, qword [sym.imp.KERNEL32.dll_WaitNamedPipeW]
jmp 0x14011ec6f
mov edx, 0xffffffff
call rbp
test eax, eax
je 0x14011ee0e
test byte [r14], 1
mov rcx, r15
je 0x14011ec7c
mov rcx, qword [r14 + 0x10]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x110000
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call r12
cmp rax, 0xffffffffffffffff
jne 0x14011ecc6
call r13
cmp eax, 0xe7
jne 0x14011edbf
test byte [r14], 1
mov rcx, r15
je 0x14011ec60
mov rcx, qword [r14 + 0x10]
jmp 0x14011ec60
mov rsi, rax
mov dword [rsp + 0x44], 2
lea rdx, [rsp + 0x44]
mov rcx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
test eax, eax
je 0x14011ee6b
mov dword [rsp + 0x40], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0xc
mov rcx, rsi
mov rdx, rbx
mov r8d, 0x24
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_TransactNamedPipe]
test eax, eax
je 0x14011eeba
mov dil, 1
cmp dword [rsp + 0x40], 0xc
je 0x14011ef12
mov ecx, 2
call fcn.140060510
test al, al
je 0x14011ef10
lea rdx, [0x1401d26a0]
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov r8d, 0x8c
mov r9d, 2
call fcn.1400605e0
lea rcx, [rsp + 0x58]
lea rdx, str.TransactNamedPipe:_expected
mov r8d, 0x1c
call fcn.140001af0
mov edx, 0xc
mov rcx, rax
call fcn.1400178f0
lea rdx, str.__observed
mov r8d, 0xb
mov rcx, rax
call fcn.140001af0
mov edx, dword [rsp + 0x40]
mov rcx, rax
call fcn.140017310
mov rcx, rdi
call fcn.140060b40
jmp 0x14011ef10
mov ecx, 2
call fcn.140060510
test al, al
je 0x14011ee64
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, [0x1401d26a0]
lea rsi, [rsp + 0x48]
mov rcx, rsi
mov r8d, 0x6c
mov r9d, 2
call fcn.1400619a0
lea rcx, [rsp + 0x58]
lea rdx, str.CreateFile
mov r8d, 0xa
jmp 0x14011ee57
mov ecx, 2
call fcn.140060510
test al, al
je 0x14011ee64
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, [0x1401d26a0]
lea rsi, [rsp + 0x48]
mov rcx, rsi
mov r8d, 0x71
mov r9d, 2
call fcn.1400619a0
lea rcx, [rsp + 0x58]
lea rdx, str.WaitNamedPipe
mov r8d, 0xd
call fcn.140001af0
mov rcx, rsi
call fcn.140061a90
xor edi, edi
jmp 0x14011ef1a
mov ecx, 2
call fcn.140060510
test al, al
je 0x14011ef10
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, [0x1401d26a0]
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov r8d, 0x7a
mov r9d, 2
call fcn.1400619a0
lea rcx, [rsp + 0x58]
lea rdx, [0x1401d2703]
mov r8d, 0x17
jmp 0x14011ef03
mov ecx, 2
call fcn.140060510
test al, al
je 0x14011ef10
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, [0x1401d26a0]
lea rdi, [rsp + 0x48]
mov rcx, rdi
mov r8d, 0x88
mov r9d, 2
call fcn.1400619a0
lea rcx, [rsp + 0x58]
lea rdx, [0x1401d271b]
mov r8d, 0x11
call fcn.140001af0
mov rcx, rdi
call fcn.140061a90
xor edi, edi
mov rcx, rsi
call fcn.140113210
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.140174050
mov eax, edi
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret