Function at 0x10001c90
Capabilities:
Create pipe
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10025736
mov eax, dword fs:[0]
push eax
sub esp, 0x4d4
mov eax, dword [0x10031740]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4bc], 0x400
mov eax, dword [ebp - 0x4bc]
push eax
push 0
lea ecx, [ebp - 0x410]
push ecx
call fcn.10013500
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x428]
call fcn.10002ad0
mov dword [ebp - 4], 0
mov dword [ebp - 0x454], 0
xor eax, eax
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x454], 0xc
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0
mov ecx, dword [ebp - 0x4bc]
push ecx
lea edx, [ebp - 0x454]
push edx
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x448]
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x10001d8a
mov dword [ebp - 0x4c8], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10002b60
mov eax, dword [ebp - 0x4c8]
jmp 0x1000206b
lea ecx, [ebp - 0x428]
call fcn.10002c30
mov dword [ebp - 0x4b0], eax
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x4b0]
mov cl, byte [eax]
mov byte [ebp - 0x4aa], cl
add dword [ebp - 0x4b0], 1
cmp byte [ebp - 0x4aa], 0
jne 0x10001daa
mov edx, dword [ebp - 0x4b0]
sub edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4c4], edx
push 0
push 0
mov eax, dword [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x428]
call fcn.10002c30
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
jg 0x10001e34
mov dword [ebp - 0x4c0], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10002b60
mov eax, dword [ebp - 0x4c0]
jmp 0x1000206b
lea ecx, [ebp - 0x440]
call fcn.10002c50
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4b8]
add ecx, 0xa
push ecx
lea ecx, [ebp - 0x440]
call fcn.10002ce0
lea ecx, [ebp - 0x428]
call fcn.10002c30
mov dword [ebp - 0x4b4], eax
mov edx, dword [ebp - 0x4b4]
add edx, 1
mov dword [ebp - 0x4d0], edx
mov eax, dword [ebp - 0x4b4]
mov cl, byte [eax]
mov byte [ebp - 0x4a9], cl
add dword [ebp - 0x4b4], 1
cmp byte [ebp - 0x4a9], 0
jne 0x10001e78
mov edx, dword [ebp - 0x4b4]
sub edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d8], edx
lea ecx, [ebp - 0x440]
call fcn.10002cc0
push eax
push 0
lea ecx, [ebp - 0x440]
call fcn.10002ca0
push eax
mov eax, dword [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x428]
call fcn.10002c30
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
jg 0x10001f27
mov dword [ebp - 0x4e0], 0xfffffffd
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x440]
call fcn.10002c80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10002b60
mov eax, dword [ebp - 0x4e0]
jmp 0x1000206b
mov dword [ebp - 0x464], 0
xor ecx, ecx
mov dword [ebp - 0x460], ecx
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x458], ecx
mov dword [ebp - 0x4a8], 0
push 0x40
push 0
lea edx, [ebp - 0x4a4]
push edx
call fcn.10013500
add esp, 0xc
mov dword [ebp - 0x47c], 0x101
xor eax, eax
mov word [ebp - 0x478], ax
mov ecx, dword [ebp - 0x444]
mov dword [ebp - 0x468], ecx
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x46c], edx
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x4a8]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push 0
lea ecx, [ebp - 0x440]
call fcn.10002ca0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x10001ff4
mov dword [ebp - 0x4d4], 0xfffffffc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x440]
call fcn.10002c80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10002b60
mov eax, dword [ebp - 0x4d4]
jmp 0x1000206b
push 0xfa0
mov edx, dword [ebp - 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x464]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x460]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x4cc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x440]
call fcn.10002c80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10002b60
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000e582
mov esp, ebp
pop ebp
ret