Function at 0x1000c0b0
Capabilities:
Connect pipe
Read pipe
Write pipe

Disassembly:
push ecx
mov eax, dword [esp + 0x1c]
mov ecx, eax
push ebx
mov ebx, dword [esp + 0xc]
xor ecx, 0x3932
mov dword [esp + 0xc], ecx
xor ebx, 0x176a
mov ecx, dword [esp + 0x14]
mov edx, ecx
push ebp
xor edx, 0x176a
lea ebp, [eax - 0x1906]
push esi
mov esi, dword [esp + 0x20]
lea eax, [ecx - 0x176a]
add esi, 0xfffffc70
mov dword [esp + 0xc], eax
lea eax, [edx + 0x176a]
mov dword [esp + 0x1c], esi
push edi
cmp esi, eax
mov dword [esp + 0x2c], edx
mov esi, dword [esp + 0x28]
lea edi, [ecx + 0x4a7]
jl 0x1000c1da
push esi
lea eax, [ecx - 0x176a]
xor eax, 0x1d51
push eax
mov eax, ebp
xor eax, 0x1c11
push eax
mov eax, dword [esp + 0x24]
xor eax, 0x3adf
push eax
mov eax, dword [esp + 0x40]
xor eax, 0x3719
push eax
call sym.bsga671te18.dll_YXkY
mov ecx, dword [esi + 0xe8]
xor edi, 0xaec
sub dword [esp + 0x2c], 0xcf
xor ecx, 0x1e05
mov dword [esi + 0xd0], ecx
mov ecx, dword [esp + 0x34]
lea edx, [eax + 0x1018]
mov eax, dword [esp + 0x24]
add ecx, 0xfffff977
push ecx
mov ecx, dword [esp + 0x30]
xor eax, 0x27f3
add ecx, 0xfffffcac
mov dword [esp + 0x44], edx
push ecx
push eax
push esi
lea eax, [edx - 0xd0d]
push eax
push edi
call fcn.10002160
mov edx, dword [esi + 0xa4]
mov edi, eax
mov ecx, dword [esi + 0x74]
add esp, 0x2c
sub dword [esp + 0x2c], 0x11b4
xor ecx, edx
add dword [esp + 0x18], 0x340
xor edx, 0x60f
add ebx, 0x291e
add ebp, 0x1d51
lea eax, [edx + 0xa3fb691]
add eax, ecx
add dword [esi + 8], eax
jmp 0x1000c23e
mov eax, dword [esi + 0x108]
or eax, dword [esi + 0x38]
add eax, 0x1dda
cmp ebx, eax
ja 0x1000c242
mov eax, edi
imul eax, edx
or eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentActCtx]
mov eax, dword [esi + 0x10c]
mov ecx, dword [esi + 0xa0]
sub eax, 0x1b7a
push eax
mov eax, dword [esi + 0x7c]
or eax, ecx
or eax, ebp
push eax
mov eax, dword [esi + 0x104]
imul eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateFiber]
mov eax, dword [esi + 0x98]
add eax, dword [esi + 0x104]
imul eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFiber]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
xor eax, 0x2034
cmp ebp, eax
je 0x1000c419
lea eax, [edi - 0xce9]
cmp ebx, eax
je 0x1000c2b5
mov eax, dword [esi + 0x64]
sub edi, 0xd72
add eax, 0x1cfb292a
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x70]
cmp eax, dword [esi + 0xd4]
jne 0x1000c28c
mov eax, dword [esi + 0xac]
sub eax, 0x1d6a8
add dword [esi + 0xa4], eax
jmp 0x1000c293
mov dword [esi + 0x28], 0x5170
mov eax, dword [esi + 0xf4]
add eax, 0x3e37f405
add eax, dword [esi + 0xfc]
xor edi, 0x3aa2
mov dword [esi + 0x4c], eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [esi + 0xb0]
sub eax, dword [esi + 0xe4]
cmp ebx, eax
jb 0x1000c419
mov ecx, dword [esi + 4]
lea eax, [ecx + 0x2ac3]
xor eax, ebp
cmp ecx, eax
ja 0x1000c404
mov eax, dword [esi + 0xc0]
sub eax, dword [esi + 0x3c]
or eax, 0x291e
cmp ebx, eax
jbe 0x1000c3b1
mov eax, dword [esi + 0xf4]
sub eax, ebp
xor eax, 0x291e
push eax
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x34]
push eax
mov eax, dword [esi + 0xa4]
imul eax, dword [esp + 0x28]
imul eax, dword [esp + 0x28]
push eax
mov eax, dword [esi + 0x74]
xor eax, ebp
or eax, 0x1c11
push eax
mov eax, dword [esp + 0x28]
add eax, ebp
xor eax, 0x1d51
push eax
mov eax, ebp
or eax, 0x1f65
push eax
mov eax, dword [esi]
and eax, 0x2034
push eax
call dword [sym.imp.KERNEL32.dll_CallNamedPipeA]
mov eax, dword [esi + 0x104]
xor eax, dword [esp + 0x30]
or eax, dword [esi + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_CreateActCtxA]
mov eax, dword [esi + 0x24]
sub ebx, dword [esi + 0x104]
add eax, edi
or eax, dword [esp + 0x10]
and ebx, 0x27f3
push eax
mov eax, ebp
xor eax, 0x2001
or eax, 0x176a
push eax
mov eax, dword [esi + 0xcc]
add eax, 0x2af
and eax, 0x1d51
push eax
mov eax, dword [esi + 0x74]
add eax, dword [esp + 0x1c]
push esi
xor eax, ebp
push ebx
push eax
call fcn.1000c430
add esp, 0x18
xor edi, 0x3aa2
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [esi]
and edx, 0x1aeb
mov ebx, dword [esp + 0x20]
and eax, ebp
mov ecx, dword [esi + 0xa4]
push eax
mov eax, dword [esi + 0x18]
add eax, ebx
push eax
mov eax, dword [esi + 0xb0]
and eax, ecx
or ecx, 0x1b7a
push eax
push ecx
lea eax, [ebx + 0x36cf]
push eax
mov eax, dword [esi + 0xac]
and eax, ebx
add eax, dword [esi + 0x38]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor edi, 0x3aa2
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [esi + 0xe8]
imul eax, dword [esi]
xor eax, 0x2a46
push eax
call dword [sym.imp.KERNEL32.dll_SwitchToFiber]
xor edi, 0x3aa2
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret