Function at 0x14001c730
Capabilities:
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1000]
mov eax, 0x1100
call fcn.1400ad9b0
sub rsp, rax
mov rax, qword [0x1400e9010]
xor rax, rsp
mov qword [rbp + 0xff0], rax
mov r14, r8
movzx r13d, dl
mov rcx, qword [r8 + 8]
sub rcx, qword [r8]
movabs r10, 0x7d8c42b2836ed5d3
mov rax, r10
imul rcx
sar rdx, 0xb
mov r8, rdx
shr r8, 0x3f
inc rdx
add r8, rdx
mov rcx, qword [r14 + 0x10]
sub rcx, qword [r14]
mov rax, r10
imul rcx
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r8, rdx
jbe 0x14001c7db
movabs rax, 0xfb18856506dda
cmp r8, rax
ja 0x14001ccec
mov rdx, r8
mov rcx, r14
call fcn.14001d100
mov ecx, 8
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x1400f07d8], eax
jle 0x14001c844
lea rcx, [0x1400f07d8]
call fcn.1400a64e0
cmp dword [0x1400f07d8], 0xffffffff
jne 0x14001c844
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1400f07c0], xmm0
mov qword [0x1400f07d0], rax
lea rdx, [0x1400f03d8]
call fcn.14001d530
lea rcx, [0x1400b9fa0]
call fcn.1400a63e4
nop
lea rcx, [0x1400f07d8]
call fcn.1400a6474
xorps xmm0, xmm0
movups xmmword [rbp + 0xfd0], xmm0
xor esi, esi
mov qword [rbp + 0xfe0], rsi
mov qword [rbp + 0xfe8], rsi
lea r8d, [rsi + 0x14]
lea rdx, str.Creating_named_pipes
lea rcx, [rbp + 0xfd0]
call fcn.140005910
nop
lea r8d, [rsi + 1]
lea rdx, [rbp + 0xfd0]
lea rcx, [0x1400f07c0]
call fcn.140010130
nop
lea rcx, [rbp + 0xfd0]
call fcn.1400051b0
mov r12d, esi
nop dword [rax]
xor r9d, r9d
mov edx, 1
xor ecx, ecx
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r15, rax
test rax, rax
je 0x14001cba7
mov byte [rbp - 0x80], r13b
mov rbx, rsi
mov qword [rbp + 0xf88], rbx
mov rdi, rsi
mov qword [rbp + 0xf90], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0xf98], xmm0
movups xmmword [rbp + 0xfa8], xmm0
mov rsi, 0xffffffffffffffff
mov qword [rbp + 0xfb8], rsi
xor eax, eax
mov qword [rbp + 0xfc0], rax
mov byte [rbp + 0xfc8], al
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
je 0x14001c92b
mov r8d, 0x1050
lea rdx, [rbp - 0x80]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [r14 + 8], 0x1050
jmp 0x14001c94f
lea r8, [rbp - 0x80]
mov rdx, rax
mov rcx, r14
call fcn.14001d300
mov rsi, qword [rbp + 0xfb8]
mov rdi, qword [rbp + 0xf90]
mov rbx, qword [rbp + 0xf88]
cmp rsi, 0xffffffffffffffff
je 0x14001c970
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x14001c999
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001c98c
call fcn.1400a63fc
xor eax, eax
mov qword [rbx + 8], rax
mov qword [rbx], rax
mov edx, 0x20
mov rcx, rbx
call fcn.1400a63fc
test rdi, rdi
je 0x14001c9c2
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001c9b5
call fcn.1400a63fc
xor eax, eax
mov qword [rdi + 8], rax
mov qword [rdi], rax
mov edx, 0x20
mov rcx, rdi
call fcn.1400a63fc
mov rcx, qword [rbp + 0xfb0]
test rcx, rcx
je 0x14001c9d4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [r14 + 8]
mov ecx, 0x20
call fcn.1400a6170
mov rbx, rax
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax], 0x1000
xor esi, esi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], 0x3fc00000
mov byte [rax + 0x1c], sil
mov edx, 0x1000
mov rcx, rax
call fcn.14001be90
nop
mov qword [rdi - 0x48], rbx
lea ecx, [rsi + 0x20]
call fcn.1400a6170
mov rbx, rax
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax], 0x1000
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], 0x3fc00000
mov byte [rax + 0x1c], sil
mov edx, 0x1000
mov rcx, rax
call fcn.14001be90
nop
mov qword [rdi - 0x40], rbx
cmp qword [rdi - 0x48], rsi
je 0x14001cb92
mov dword [rbp + 0xfd0], 0x18
xorps xmm0, xmm0
movups xmmword [rbp + 0xfd8], xmm0
xor r9d, r9d
lea r8, [rbp + 0xfd8]
lea edx, [rsi + 1]
lea rcx, str.D:_D_OICI_GA___NU__A_OICI_GA___AU__A_OICI_GA___BA_
call qword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
test eax, eax
je 0x14001cb81
lea rax, [rbp + 0xfd0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x1388
mov dword [rsp + 0x28], 0x1000
mov dword [rsp + 0x20], 0x6000
mov edx, 0x40000003
lea r9d, [rsi + 1]
lea r8d, [rsi + 6]
lea rcx, str..pipe_namedpipearccontrolsvc
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov qword [rdi - 0x18], rax
mov rcx, qword [rbp + 0xfd8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rdi - 0x18]
cmp rcx, 0xffffffffffffffff
je 0x14001cb65
mov qword [rdi - 0x20], r15
lea rdx, [rdi - 0x38]
movzx r9d, r13b
lea r8, [rdi - 8]
call fcn.14001c1f0
test eax, eax
jne 0x14001cb35
mov eax, esi
cmp byte [rdi - 8], sil
sete al
mov dword [rdi - 0xc], eax
inc r12
cmp r12, 1
jb 0x14001c8a0
xor eax, eax
mov rcx, qword [rbp + 0xff0]
xor rcx, rsp
call fcn.1400a6140
lea r11, [rsp + 0x1100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test r13b, r13b
jne 0x14001cc24
jmp 0x14001cb35
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14001cb35
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13b, r13b
jne 0x14001cbbd
mov eax, 8
jmp 0x14001cb35
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test r13b, r13b
jne 0x14001cc88
jmp 0x14001cb35
lea rcx, [0x1400f03d8]
call fcn.14001d760
mov rbx, rax
lea rdx, [0x1400c2ee0]
lea rcx, [rsp + 0x40]
call fcn.140005020
nop
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140010130
nop
lea rcx, [rsp + 0x40]
call fcn.140004fe0
lea r8, str.Not_enough_memory_to_request_response_buffer
mov edx, 8
lea rcx, [rsp + 0x40]
call fcn.14001c1d0
lea rdx, [0x1400e4268]
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [0x1400f03d8]
call fcn.14001d760
mov rbx, rax
lea rdx, [0x1400c2fd8]
lea rcx, [rsp + 0x40]
call fcn.140005020
nop
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140010130
nop
lea rcx, [rsp + 0x40]
call fcn.140004fe0
lea r8, str.Unable_to_create_communication_object.
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.14001c1d0
lea rdx, [0x1400e4268]
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rcx, [0x1400f03d8]
call fcn.14001d760
mov rbx, rax
lea rdx, [0x1400c2e60]
lea rcx, [rsp + 0x40]
call fcn.140005020
nop
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140010130
nop
lea rcx, [rsp + 0x40]
call fcn.140004fe0
lea r8, str.Unable_to_create_communication_event.
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.14001c1d0
lea rdx, [0x1400e4268]
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
call fcn.14000fb00
int3