Function at 0x1400069b0
Capabilities:
Read pipe
Write pipe

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x200c0
call fcn.1400dc9d0
sub rsp, rax
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov rax, qword [0x14019cfa0]
xor rax, rsp
mov qword [rsp + 0x200b0], rax
cmp qword [rsp + 0x200e8], 0
je 0x140006a09
mov rax, qword [rsp + 0x200e8]
mov dword [rax], 0
mov dword [rsp + 0x40], 0
mov rcx, qword [rsp + 0x200d8]
call fcn.140005290
movzx eax, al
test eax, eax
jne 0x140006d33
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], 0x2711
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x54]
mov rcx, qword [rsp + 0x200d8]
call fcn.140005420
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0x2712
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x5c]
mov rcx, qword [rsp + 0x200d8]
call fcn.140005420
mov edx, 8
lea rcx, [rsp + 0xa0]
call fcn.140004040
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x200d8]
call fcn.1400054c0
nop
lea rcx, [rsp + 0xa0]
call fcn.140006ea0
movzx eax, al
test eax, eax
jne 0x140006d26
lea rax, [rsp + 0xb0]
mov rdi, rax
xor eax, eax
mov ecx, 0x20000
rep stosb byte [rdi], al
mov dword [rsp + 0x98], 0
mov rcx, qword [rsp + 0x200d0]
call fcn.140006d50
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0xffffffffffffffff
je 0x140006cd6
lea rcx, [rsp + 0xa0]
call fcn.140004a80
inc eax
cdqe
shl rax, 1
mov dword [rsp + 0x60], eax
lea rcx, [rsp + 0xa0]
call fcn.140003a80
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x20000
lea r9, [rsp + 0xb0]
mov r8d, dword [rsp + 0x60]
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_TransactNamedPipe]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0
je 0x140006b85
cmp dword [rsp + 0x98], 0
jbe 0x140006b80
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x200e0]
call fcn.140005500
jmp 0x140006cbe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x64], eax
call fcn.140007180
test rax, rax
je 0x140006c15
call fcn.140007180
mov qword [rsp + 0x68], rax
lea rax, [0x140169a04]
mov qword [rsp + 0x20], rax
lea r9, [0x140169a10]
lea r8, [0x140169a80]
mov edx, 2
mov rcx, qword [rsp + 0x68]
call fcn.140007040
call fcn.140007180
test rax, rax
je 0x140006c15
call fcn.140007180
mov qword [rsp + 0x70], rax
lea rax, str.TransactNamedPipe_failed.
mov qword [rsp + 0x28], rax
lea rax, [0x140169a74]
mov qword [rsp + 0x20], rax
lea r9, [0x140169b40]
lea r8, [0x140169bb0]
mov edx, 2
mov rcx, qword [rsp + 0x70]
call fcn.140006f00
cmp qword [rsp + 0x200e8], 0
je 0x140006c2e
mov rax, qword [rsp + 0x200e8]
mov ecx, dword [rsp + 0x64]
mov dword [rax], ecx
call fcn.140007180
test rax, rax
je 0x140006cbe
call fcn.140007180
mov qword [rsp + 0x78], rax
lea rax, [0x140169b34]
mov qword [rsp + 0x20], rax
lea r9, [0x140169c30]
lea r8, [0x140169ca0]
mov edx, 2
mov rcx, qword [rsp + 0x78]
call fcn.140007040
call fcn.140007180
test rax, rax
je 0x140006cbe
call fcn.140007180
mov qword [rsp + 0x80], rax
lea rax, str.Could_not_send_message.
mov qword [rsp + 0x28], rax
lea rax, [0x140169ba4]
mov qword [rsp + 0x20], rax
lea r9, [0x140169d50]
lea r8, [0x140169dc0]
mov edx, 2
mov rcx, qword [rsp + 0x80]
call fcn.140006f00
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140006d26
call fcn.140007180
test rax, rax
je 0x140006d26
call fcn.140007180
mov qword [rsp + 0x88], rax
lea rax, str.Could_not_open_the_message_pipe
mov qword [rsp + 0x28], rax
lea rax, [0x140169c94]
mov qword [rsp + 0x20], rax
lea r9, str.Macrium::IPC::MessageClient::SendMessageWaitReply
lea r8, [0x140169ef0]
mov edx, 2
mov rcx, qword [rsp + 0x88]
call fcn.140006f00
nop
lea rcx, [rsp + 0xa0]
call fcn.140001910
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x200b0]
xor rcx, rsp
call fcn.1400dbfd0
add rsp, 0x200c0
pop rdi
ret