Function at 0x1400209f3
Capabilities:
Create pipe

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
mov qword [rsp + 0x58], rcx
mov byte [rsp + 0x4b], dl
movzx eax, dl
mov ecx, 0x40080002
sub ecx, eax
mov dword [rsp + 0x6c], ecx
xor esi, esi
mov dword [rsp + 0x4c], 8
lea r13, [rsp + 0x90]
lea rbx, [rsp + 0x110]
lea r12, [rsp + 0x70]
lea rbp, [rsp + 0xc0]
mov r14, 0xffffffffffffffff
xor eax, eax
mov qword [rsp + 0xa8], rax
call sub.kernel32.dll_GetCurrentProcessId
mov dword [rsp + 0x90], eax
mov rax, qword [0x1414f6098]
test rax, rax
jne 0x140020a7b
call fcn.140020ed9
mov qword [0x1414f6098], rax
jmp 0x140020a61
mov eax, 1
lock xadd qword [0x1414f6098], rax
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x70], r13
lea rax, [0x14000dc2d]
mov qword [rsp + 0x78], rax
lea rax, [0x1414ebf10]
mov qword [rsp + 0xc0], rax
mov ecx, 2
mov qword [rsp + 0xc8], rcx
and qword [rsp + 0xe0], 0
mov qword [rsp + 0x80], rbx
lea rax, [0x14000f1cc]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0xf8]
mov rdx, rbp
call fcn.14001cb8b
test sil, 1
je 0x140020b13
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
call fcn.14000cf13
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x100]
mov r15, qword [rsp + 0x108]
lea rax, [rcx + r15]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
and word [rsp + 0x80], 0
mov dword [rsp + 0x88], 1
mov rcx, r12
call fcn.140015644
test ax, ax
je 0x140020c4c
mov esi, edx
mov rcx, rbp
mov rdx, r12
call fcn.140015686
mov rdx, qword [rsp + 0xc0]
inc rdx
cmove rdx, r14
cmp rdx, 5
mov eax, 4
cmovb rdx, rax
mov rcx, rbp
call fcn.1400153ae
mov rax, qword [rsp + 0xc8]
mov word [rax], si
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 1
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
mov rcx, rbp
call fcn.140015644
cmp ax, 1
jne 0x140020c3a
mov esi, edx
mov rdi, qword [rsp + 0xa0]
cmp rdi, qword [rsp + 0x90]
jne 0x140020c21
mov rcx, rbx
mov rdx, rbp
call fcn.140015686
mov rdx, qword [rsp + 0x110]
inc rdx
cmove rdx, r14
mov rcx, r13
call fcn.140015455
mov rax, qword [rsp + 0x98]
mov word [rax + rdi*2], si
inc rdi
mov qword [rsp + 0xa0], rdi
jmp 0x140020bdd
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
jmp 0x140020c53
mov esi, 2
xor edi, edi
mov eax, 0x10000
mov dword [rsp + 0x28], eax
and qword [rsp + 0x38], 0
mov dword [rsp + 0x20], eax
and dword [rsp + 0x30], 0
mov rcx, rsi
mov edx, dword [rsp + 0x6c]
mov r8d, dword [rsp + 0x4c]
mov r9d, 1
call sub.kernel32.dll_CreateNamedPipeW
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140020d9e
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xf0], r14
mov r14, rbx
mov rbx, r13
mov r13, r12
mov rax, qword [rsp + 0xa8]
lea r12d, [rax + 1]
call fcn.1400168d2
mov r15, rax
mov rcx, rax
call fcn.14001709e
cmp r12d, 0xa
jge 0x140020d5b
mov edi, eax
mov esi, edx
mov ecx, eax
mov r8d, 1
mov r9d, 5
call fcn.1400170c4
test al, al
je 0x140020cfe
mov eax, r12d
mov qword [rsp + 0xa8], rax
jmp 0x140020d26
cmp dword [rsp + 0x4c], 0
je 0x140020d5b
mov ecx, edi
mov edx, esi
mov r8d, 1
mov r9d, 0x57
call fcn.1400170c4
mov dword [rsp + 0x4c], 0
test al, al
je 0x140020d5b
mov rcx, r15
call fcn.140015bb8
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.140015e8a
mov sil, 1
mov r12, r13
mov r13, rbx
mov rbx, r14
mov r14, 0xffffffffffffffff
jmp 0x140020a55
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], r15
mov qword [rax], 1
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.140015e8a
mov rsi, 0xffffffffffffffff
mov rdi, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov r14, qword [rsp + 0xf0]
jmp 0x140020e22
mov rcx, rdi
mov rdx, rsi
call fcn.140015e8a
lea r8, [rsp + 0xc0]
and qword [r8 + 0x10], 0
and dword [r8], 0
and qword [r8 + 0x1c], 0
and word [r8 + 0x24], 0
mov al, byte [rsp + 0x4b]
mov byte [r8 + 0x21], al
xor al, 1
mov byte [r8 + 0x20], al
and dword [r8 + 0x18], 0
mov dword [rsp + 0x70], 0x18
and qword [rsp + 0x78], 0
mov dword [rsp + 0x80], 1
mov qword [r8 + 8], r12
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
mov rdx, r15
call fcn.14001adde
test rax, rax
je 0x140020e4d
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], rdx
mov qword [rax], 1
mov rsi, r14
mov rcx, qword [rsp + 0x50]
mov rdx, rdi
call fcn.14000cf13
cmp r14, 0xffffffffffffffff
je 0x140020e38
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
nop
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x58]
mov qword [rax + 8], r14
mov qword [rax + 0x10], rdx
and qword [rax], 0
mov rcx, qword [rsp + 0x50]
mov rdx, rdi
call fcn.14000cf13
jmp 0x140020e38