220.127.116.11 Application Requests Writing to a Named Pipe
A client can write to a named pipe by issuing an SMB_COM_TRANSACTION request with the subcommand TRANS_WRITE_NMPIPE. The application MUST provide a Client.Open indicating the open named pipe to which data is to be written.
Named pipes can be in raw mode or message mode (see TRANS_SET_NMPIPE_STATE). If the named pipe is in raw mode, as indicated by a Client.Open.NamedPipeMessageMode value of FALSE, it can be written to using any of several Write operations (see section 18.104.22.168). If the pipe is in message mode, as indicated by a Client.Open.NamedPipeMessageMode value of TRUE, TRANS_WRITE_NMPIPE MUST be used to write discrete messages.
The client MUST construct the TRANS_WRITE_NMPIPE request message and MUST send it to the server as specified in section 22.214.171.124.