Function at 0x100ba2d5
Capabilities:
Delete file
Read file on windows
Write file on windows

Disassembly:
jmp 0x100ba2d5
push ebp
lea ebp, [esp - 0x3c4]
sub esp, 0x444
mov eax, dword [0x10178af8]
xor eax, ebp
mov dword [ebp + 0x3c0], eax
mov eax, dword [ebp + 0x3cc]
mov ecx, dword [ebp + 0x3d8]
push ebx
push esi
mov dword [ebp - 0x64], eax
mov eax, dword [eax + 8]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp + 0x3dc]
push edi
mov esi, 0x1017ebd8
xor ebx, ebx
push esi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x5c], eax
call sym.CoreFoundation.dll___CFSpinLock
mov eax, dword [0x1017ebdc]
xor edi, edi
pop ecx
mov dword [ebp - 0x54], edi
cmp eax, ebx
je 0x100ba343
push dword [ebp - 0x5c]
push eax
call sym.CoreFoundation.dll_CFDictionaryGetValue
pop ecx
pop ecx
mov edi, eax
mov dword [ebp - 0x54], eax
push esi
call sym.CoreFoundation.dll___CFSpinUnlock
pop ecx
cmp edi, ebx
jne 0x100ba3d8
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push str._p__d___s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
test byte [ebp + 0x3d0], 1
mov edi, eax
mov eax, str.send
jne 0x100ba391
mov eax, str.receive
push eax
push str.In_the_middle_of_windows_msg_to__s_a_message__I_had_an_invalid_pipe_n
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
mov esi, eax
push esi
push edi
push 0x101400b8
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push edi
call sym.CoreFoundation.dll_CFRelease
push esi
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, 0x10000004
jmp 0x100bac09
push 0x600
push 0x400
lea eax, [ebp - 0x40]
push eax
push dword [edi + 0x10]
call sym.CoreFoundation.dll_CFStringGetCString
add esp, 0x10
test byte [ebp + 0x3d0], 1
je 0x100bac27
mov edi, str._p__d___s_
mov esi, 0x101400b8
cmp dword [0x1017ebe8], ebx
je 0x100ba485
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
push str.windows_msg_sending__d_bytes_to_pipe__x__named__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push eax
push dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x44]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x64]
test dword [eax], 0x80000000
je 0x100ba662
call dword [0x10181024]
push eax
mov eax, dword [ebp - 0x64]
push 0x1013ff94
add eax, 0x28
push 0x10
push eax
call dword [0x10181004]
add esp, 0x10
cmp dword [0x1017ebe8], ebx
je 0x100ba529
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x64]
add esp, 0x18
add eax, 0x28
push eax
push str.Creating_a_OOL_file_with_name__s
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x44]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
call fcn.100b9757
push eax
call fcn.10128470
add eax, 0x11
pop ecx
mov dword [ebp - 0x48], eax
call fcn.10128360
mov eax, dword [ebp - 0x64]
add eax, 0x28
mov dword [ebp - 0x4c], esp
push eax
call fcn.100b9757
push eax
push str._s_s
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call dword [0x10181004]
add esp, 0x14
push ebx
push 0x100
push 2
push ebx
push 5
push 0x40000000
push dword [ebp - 0x4c]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x44], eax
cmp eax, 0xffffffff
jne 0x100ba5fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x44], eax
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x44]
push dword [ebp - 0x4c]
push str.windows_msg___Error_creating_out_of_line_file_at__s:__d_n
mov edi, eax
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
mov ebx, eax
push ebx
push edi
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push edi
call sym.CoreFoundation.dll_CFRelease
push ebx
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x44]
jmp 0x100bac09
push ebx
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x64]
push dword [eax + 0x1c]
mov dword [ebp - 0x60], ebx
push dword [eax + 0x18]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x100ba659
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x44], eax
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x44]
push dword [ebp - 0x4c]
push str.windows_msg___Error_writing_to_out_of_line_file_at__s:__d_n
jmp 0x100ba5bf
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x1017ebe8], ebx
je 0x100ba6d9
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_about_to_get_write_lock_for_write__pipe_name__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x44]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x54]
add eax, 0x54
push eax
mov dword [ebp - 0x58], eax
call sym.CoreFoundation.dll___CFSpinLock
mov eax, dword [ebp - 0x54]
pop ecx
add eax, 0x1c
push eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
push eax
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x100babfd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4c], eax
cmp eax, 0xe8
jne 0x100ba7e6
mov dword [ebp - 0x4c], 0xa
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x4c]
test eax, eax
jle 0x100babfd
cmp dword [0x1017ebe8], ebx
je 0x100ba7a4
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
push str.This_is_CFWindowsNamedPipe_attempting_to_resend_data_on_the_first_write_to_a_pipe
mov dword [ebp - 0x54], eax
call sym.CoreFoundation.dll___CFStringMakeConstantString
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x28
push eax
push dword [ebp - 0x54]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x54]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x44]
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
push eax
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x100babfd
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
sete al
cmp al, bl
je 0x100ba72a
jmp 0x100babfd
cmp dword [ebp - 0x4c], 0x3e5
jne 0x100bab91
test byte [ebp + 0x3d0], 0x10
jne 0x100ba906
cmp dword [0x1017ebe8], ebx
je 0x100ba877
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_about_to_GetOverlappedResult_for_write__pipe_name__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x4c]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x4c]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
push 1
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x44]
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
cmp dword [0x1017ebe8], ebx
je 0x100ba8f8
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov edi, eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_Got_GetOverlappedResult_for_write__pipe_name__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
mov ebx, eax
push ebx
push edi
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push edi
call sym.CoreFoundation.dll_CFRelease
push ebx
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x54]
add dword [eax + 0x24], ecx
jmp 0x100babfd
cmp dword [0x1017ebe8], ebx
je 0x100ba980
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_about_to_spin_over_GetOverlappedResult_for_write__pipe_name__s__for__d_milliseconds
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push eax
push dword [ebp - 0x4c]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x4c]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x78]
imul eax, eax, 0x2710
mov edx, dword [ebp - 0x74]
add ecx, eax
adc edx, ebx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
cmp dword [0x1017ebe8], ebx
je 0x100baa1a
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_once_through_the_loop__trying_to_GetOverlappedResult_for_write__pipe_name__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
push ebx
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x44]
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x100ba889
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x4c], eax
cmp eax, 0x3e4
jne 0x100baaea
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jg 0x100ba9a3
cmp dword [0x1017ebe8], ebx
je 0x100baade
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
mov edi, eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_Timed_Out_trying_to_GetOverlappedResult_for_write__pipe_name__s_
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
mov ebx, eax
push ebx
push edi
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push edi
call sym.CoreFoundation.dll_CFRelease
push ebx
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov dword [ebp - 0x70], 0x10000004
jmp 0x100babfd
cmp dword [0x1017ebe8], ebx
je 0x100bab60
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
push dword [ebp - 0x5c]
push str.windows_msg_pipe__x_Error_getting_overlapped_result_for_named_pipe:__d_n
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x48], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov edi, dword [ebp - 0x4c]
add esp, 0x18
push edi
push str.windows_msg___Error_getting_overlapped_result_for_named_pipe:__d_n
jmp 0x100babc0
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov edi, dword [ebp - 0x4c]
add esp, 0x18
push edi
push str.windows_msg___Error_writing_to_named_pipe:__d_n
mov dword [ebp - 0x50], eax
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
mov ebx, eax
push ebx
push dword [ebp - 0x50]
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push ebx
call sym.CoreFoundation.dll_CFRelease
mov dword [ebp - 0x70], edi
add esp, 0x18
push dword [ebp - 0x58]
call sym.CoreFoundation.dll___CFSpinUnlock
pop ecx
mov eax, dword [ebp - 0x70]
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3c0]
xor ecx, ebp
call fcn.10128342
add ebp, 0x3c4
leave
ret
mov al, byte [edi + 4]
test al, 0x20
je 0x100bb06c
lea eax, [edi + 0x50]
push eax
call sym.CoreFoundation.dll___CFSpinLock
test byte [edi + 4], 0x10
pop ecx
je 0x100bac4c
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
mov dword [ebp - 0x44], eax
jmp 0x100bac4f
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x54]
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionaryGetValue
pop ecx
pop ecx
mov dword [ebp - 0x4c], eax
mov edi, str._p__d___s_
mov esi, 0x101400b8
cmp eax, ebx
jne 0x100bad1e
push 0x14
call dword [0x10181090]
pop ecx
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x4c]
push ecx
push dword [ebp - 0x44]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionarySetValue
add esp, 0xc
cmp dword [0x1017ebe8], ebx
je 0x100bad1e
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4c]
add esp, 0x18
push dword [eax + 0x10]
push str.Created_read_handle__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x58]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
push 1
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x4c]
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x100badb3
cmp dword [ebp - 0x60], ebx
je 0x100badb3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x58], eax
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x60]
mov dword [ebp - 0x50], eax
push dword [ebp - 0x58]
push str.GetOverlappedResult_failed_with_error__lu_and_numBytesRead__lu_n
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x58]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov dword [ebp - 0x60], ebx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x60]
add dword [eax + 8], ecx
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x54]
push dword [eax + 0x14]
push dword [ebp - 0x64]
call dword [0x10181084]
mov eax, dword [ebp - 0x54]
add eax, 0x50
push eax
call sym.CoreFoundation.dll___CFSpinUnlock
add esp, 0x10
cmp dword [ebp - 0x48], ebx
je 0x100badea
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
cmp dword [0x1017ebe8], ebx
je 0x100bae60
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x5c]
mov dword [ebp - 0x48], eax
push dword [ebp - 0x60]
push str.windows_msg_received__d_bytes_from_pipe__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x14
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x58], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x58]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x64]
test dword [eax], 0x80000000
je 0x100bb15c
mov byte [ebp - 0x69], bl
call fcn.100b9757
push eax
call fcn.10128470
add eax, 0x11
pop ecx
mov dword [ebp - 0x58], eax
call fcn.10128360
mov eax, dword [ebp - 0x64]
add eax, 0x28
mov dword [ebp - 0x44], esp
push eax
call fcn.100b9757
push eax
push str._s_s
push dword [ebp - 0x58]
push dword [ebp - 0x44]
call dword [0x10181004]
add esp, 0x14
mov dword [ebp - 0x4c], ebx
push ebx
push ebx
push 3
push ebx
push 2
push bind
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x50], eax
cmp eax, 0xffffffff
jne 0x100baf73
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
cmp eax, 0x20
jne 0x100bafea
cmp dword [ebp - 0x4c], 0x14
jae 0x100bafea
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x4c]
add esp, 0x18
push dword [eax + 0x1016dcc8]
push str.windows_msg___Got_ERROR_SHARING_VIOLATION__sleeping_for__d_ms
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x58], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x58]
call sym.CoreFoundation.dll_CFRelease
mov eax, dword [ebp - 0x4c]
add esp, 0x18
push dword [eax + 0x1016dcc8]
call dword [sym.imp.KERNEL32.dll_Sleep]
add dword [ebp - 0x4c], 4
jmp 0x100baf77
mov byte [ebp - 0x69], 1
cmp byte [ebp - 0x69], bl
je 0x100baeb0
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x1c]
push eax
mov dword [ebp - 0x58], eax
call dword [0x10181090]
pop ecx
mov ecx, dword [ebp - 0x64]
push ebx
mov dword [ecx + 0x18], eax
lea ecx, [ebp - 0x60]
push ecx
push dword [ebp - 0x58]
push eax
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x100bb055
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x48]
push str.windows_msg___Error_reading_from_named_pipe:__d_n
jmp 0x100bb018
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x48]
push str.windows_msg___Error_creating_pipe:__d_n
mov edi, eax
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
mov ebx, eax
push ebx
push edi
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 4
call sym.CoreFoundation.dll_CFLog
push edi
call sym.CoreFoundation.dll_CFRelease
push ebx
call sym.CoreFoundation.dll_CFRelease
mov eax, dword [ebp - 0x48]
add esp, 0x18
jmp 0x100bac09
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x100bb15c
test al, 0x10
je 0x100bb07a
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
mov dword [ebp - 0x44], eax
jmp 0x100bb07d
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x54]
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionaryGetValue
pop ecx
pop ecx
mov dword [ebp - 0x70], eax
mov edi, str._p__d___s_
mov esi, 0x101400b8
cmp eax, ebx
jne 0x100bb14c
push 0x14
call dword [0x10181090]
pop ecx
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x70], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x70]
push ecx
push dword [ebp - 0x44]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionarySetValue
add esp, 0xc
cmp dword [0x1017ebe8], ebx
je 0x100bb14c
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x70]
add esp, 0x18
push dword [eax + 0x10]
push str.Created_read_handle__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x58], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x58]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x70]
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
or dword [ebp - 0x70], 0xffffffff
mov eax, dword [ebp - 0x54]
mov al, byte [eax + 4]
test al, 0x10
je 0x100bb388
test al, 0x20
jne 0x100bb388
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x58], eax
cmp eax, ebx
je 0x100bb388
mov eax, dword [ebp - 0x54]
push ebx
lea ecx, [eax + 0x3c]
push ecx
push dword [eax + 0x38]
push dword [eax + 0x10]
push dword [sym.CoreFoundation.dll_kCFAllocatorSystemDefault]
call sym.CoreFoundation.dll_CFWindowsNamedPipeCreateWithName
mov ecx, dword [ebp - 0x54]
push dword [ecx + 0x34]
mov dword [ebp - 0x4c], eax
push eax
call sym.CoreFoundation.dll_CFWindowsNamedPipeSetInvalidationCallBack
push ebx
push dword [ebp - 0x4c]
push dword [sym.CoreFoundation.dll_kCFAllocatorSystemDefault]
call sym.CoreFoundation.dll_CFWindowsNamedPipeCreateRunLoopSource
mov dword [ebp - 0x50], eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
mov dword [ebp - 0x48], eax
call sym.CoreFoundation.dll_CFRunLoopCopyAllModes
push eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x64], ebx
call sym.CoreFoundation.dll_CFArrayGetCount
add esp, 0x30
test eax, eax
jle 0x100bb229
push dword [ebp - 0x64]
push dword [ebp - 0x44]
call sym.CoreFoundation.dll_CFArrayGetValueAtIndex
push eax
push dword [ebp - 0x58]
mov dword [ebp - 0x74], eax
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRunLoopContainsSource
add esp, 0x14
test al, al
je 0x100bb218
push dword [ebp - 0x74]
push dword [ebp - 0x50]
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRunLoopAddSource
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x10
push dword [ebp - 0x44]
inc dword [ebp - 0x64]
call sym.CoreFoundation.dll_CFArrayGetCount
pop ecx
cmp dword [ebp - 0x64], eax
jl 0x100bb1de
cmp dword [0x1017ebe8], ebx
je 0x100bb388
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4c]
add esp, 0x18
test byte [eax + 4], 0x10
je 0x100bb271
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
mov dword [ebp - 0x44], eax
jmp 0x100bb274
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionaryGetValue
pop ecx
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
jne 0x100bb339
push 0x14
call dword [0x10181090]
pop ecx
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x64], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x64]
push ecx
push dword [ebp - 0x44]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionarySetValue
add esp, 0xc
cmp dword [0x1017ebe8], ebx
je 0x100bb339
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x64]
add esp, 0x18
push dword [eax + 0x10]
push str.Created_read_handle__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x74]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x10]
mov ecx, dword [ebp - 0x64]
push dword [ecx + 0x10]
push dword [eax + 0xc]
push eax
push str.cloned_a_new_pipe__x_with_handle__x_with_read_event__x__to_serve_name___
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x1c
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x74], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x50]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x74]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
mov eax, dword [ebp - 0x54]
or byte [eax + 4], 0x20
cmp dword [0x1017ebe8], ebx
je 0x100bb405
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x5c]
mov dword [ebp - 0x48], eax
push str.Scheduling_a_read_for_pipe_with_handle__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x74]
call sym.CoreFoundation.dll_CFRelease
mov eax, dword [ebp - 0x54]
add esp, 0x18
test byte [eax + 4], 0x10
je 0x100bb415
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
mov dword [ebp - 0x44], eax
jmp 0x100bb418
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x54]
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionaryGetValue
pop ecx
pop ecx
mov dword [ebp - 0x4c], eax
cmp eax, ebx
jne 0x100bb4dd
push 0x14
call dword [0x10181090]
pop ecx
push ebx
push ebx
push ebx
push ebx
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x4c]
push ecx
push dword [ebp - 0x44]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], ebx
push dword [eax + 0x18]
call sym.CoreFoundation.dll_CFDictionarySetValue
add esp, 0xc
cmp dword [0x1017ebe8], ebx
je 0x100bb4dd
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x4c]
add esp, 0x18
push dword [eax + 0x10]
push str.Created_read_handle__x
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
push eax
push dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
push esi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push 7
call sym.CoreFoundation.dll_CFLog
push dword [ebp - 0x48]
call sym.CoreFoundation.dll_CFRelease
push dword [ebp - 0x74]
call sym.CoreFoundation.dll_CFRelease
add esp, 0x18
push dword [ebp - 0x4c]
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x54]
push 0xa000
push dword [eax + 0x14]
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x100bac06
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x44], eax
cmp eax, 0x3e5
je 0x100bac06
cmp eax, 0x6d
je 0x100ba5f4
call sym.CoreFoundation.dll__CFGetProgname
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call sym.CoreFoundation.dll_CFRunLoopGetCurrent
push eax
push edi
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x18
push dword [ebp - 0x44]
mov edi, eax
push str.Unable_to_read_from_named_pipe__error___d_n
call sym.CoreFoundation.dll___CFStringMakeConstantString
pop ecx
push eax
push ebx
push ebx
call sym.CoreFoundation.dll_CFStringCreateWithFormat
add esp, 0x10
jmp 0x100ba5d2