Function at 0x1400a5124
Capabilities:
Create pipe

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x4b], dl
movzx eax, dl
mov ecx, 0x40080002
sub ecx, eax
mov dword [rsp + 0x68], ecx
xor ebx, ebx
mov dword [rsp + 0x4c], 8
lea r13, [rsp + 0x90]
lea rsi, [rsp + 0xd0]
lea r12, [rsp + 0x70]
lea rbp, [rsp + 0xb8]
xor eax, eax
mov qword [rsp + 0xa8], rax
call sub.kernel32.dll_GetCurrentProcessId
mov dword [rsp + 0x6c], eax
mov rax, qword [0x140155158]
test rax, rax
jne 0x1400a51a2
call fcn.1400a555f
xchg qword [0x140155158], rax
jmp 0x1400a5188
mov eax, 1
lock xadd qword [0x140155158], rax
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x70], rax
lea rax, [0x1400634e6]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], r13
lea rax, [fcn.14006154a]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x20], 2
mov r8d, 2
mov rcx, rsi
lea rdx, str..pipeDebugListener.
mov r9, r12
call fcn.140001ad1
mov rcx, rbp
mov rdx, rsi
call fcn.140001916
test bl, 1
je 0x1400a5225
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
call fcn.14005a6df
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x50], rax
mov r15, qword [rsp + 0xc8]
lea rax, [rcx + r15]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
and word [rsp + 0x80], 0
mov dword [rsp + 0x88], 1
mov rcx, r12
call fcn.1400843ed
test ax, ax
je 0x1400a535a
mov edi, edx
mov rcx, rsi
mov rdx, r12
call fcn.14008442f
mov rcx, qword [rsp + 0xd0]
inc rcx
mov rax, 0xffffffffffffffff
cmove rcx, rax
cmp rcx, 5
mov eax, 4
cmovb rcx, rax
call fcn.1400844c1
mov r14, rax
mov word [rax], di
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xa0], 1
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0xe0], xmm1
movaps xmmword [rsp + 0xd0], xmm0
mov ebx, 1
mov rcx, rsi
call fcn.1400843ed
cmp ax, 1
jne 0x1400a5350
mov edi, edx
cmp rbx, qword [rsp + 0x98]
jne 0x1400a533e
mov rcx, rbp
mov rdx, rsi
call fcn.14008442f
mov rdx, qword [rsp + 0xb8]
inc rdx
mov rax, 0xffffffffffffffff
cmove rdx, rax
mov rcx, r13
call fcn.140084513
mov r14, qword [rsp + 0x90]
mov word [r14 + rbx*2], di
inc rbx
mov qword [rsp + 0xa0], rbx
jmp 0x1400a52f3
mov rbp, qword [rsp + 0x98]
jmp 0x1400a5362
mov r14d, 2
xor ebp, ebp
mov eax, 0x10000
mov dword [rsp + 0x28], eax
and qword [rsp + 0x38], 0
mov dword [rsp + 0x20], eax
and dword [rsp + 0x30], 0
mov rcx, r14
mov edx, dword [rsp + 0x68]
mov r8d, dword [rsp + 0x4c]
mov r9d, 1
call sub.kernel32.dll_CreateNamedPipeW
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a548b
mov qword [rsp + 0xb0], rdi
mov rdi, r12
mov rax, qword [rsp + 0xa8]
lea r12d, [rax + 1]
call fcn.14006b867
mov r15, rax
mov qword [rsp + 0xd0], rax
mov rcx, rax
call fcn.14006c010
cmp r12d, 0xa
jge 0x1400a5452
mov ebx, eax
mov r13d, edx
mov ecx, eax
mov r8d, 1
mov r9d, 5
call fcn.1400880b0
test al, al
je 0x1400a53fc
mov eax, r12d
mov qword [rsp + 0xa8], rax
jmp 0x1400a5425
cmp dword [rsp + 0x4c], 0
je 0x1400a5452
mov ecx, ebx
mov edx, r13d
mov r8d, 1
mov r9d, 0x57
call fcn.1400880b0
mov dword [rsp + 0x4c], 0
test al, al
je 0x1400a5452
mov rcx, rsi
call fcn.1400849d8
mov rcx, r14
mov rdx, rbp
call fcn.140085884
mov bl, 1
mov r12, rdi
lea r13, [rsp + 0x90]
lea rbp, [rsp + 0xb8]
jmp 0x1400a517f
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], r15
mov qword [rax], 1
mov rcx, r14
mov rdx, rbp
call fcn.140085884
mov rsi, 0xffffffffffffffff
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0xb0]
jmp 0x1400a550f
mov rcx, r14
mov rdx, rbp
call fcn.140085884
lea r8, [rsp + 0xd0]
and qword [r8 + 0x10], 0
and dword [r8], 0
and qword [r8 + 0x1c], 0
and word [r8 + 0x24], 0
mov al, byte [rsp + 0x4b]
mov byte [r8 + 0x21], al
xor al, 1
mov byte [r8 + 0x20], al
and dword [r8 + 0x18], 0
mov dword [rsp + 0x70], 0x18
and qword [rsp + 0x78], 0
mov dword [rsp + 0x80], 1
mov qword [r8 + 8], r12
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
mov rdx, r15
call fcn.14009dc1e
test rax, rax
je 0x1400a553a
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], rdx
mov qword [rax], 1
mov rsi, rdi
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.14005a6df
cmp rdi, 0xffffffffffffffff
je 0x1400a5525
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
nop
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdx
and qword [rax], 0
mov rcx, rbx
mov rdx, qword [rsp + 0x50]
call fcn.14005a6df
jmp 0x1400a5525