Function at 0x1001e9b2
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1005e3cb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
cmp byte [ebp + 0x10], 0
mov eax, ecx
push ebx
push esi
mov esi, edx
mov dword [esp + 0x28], eax
push edi
mov dword [esp + 0x30], esi
je 0x1001eb72
cmp byte [ebp + 0x18], 0
je 0x1001ea76
mov esi, dword [ebp + 0x14]
xor ebx, ebx
mov dword [esi], ebx
jmp 0x1001ea6c
mov dword [esp + 0x30], 0xfffffff6
lea ecx, [esp + 0x3c]
mov dword [esp + 0x30], 0x66a756a3
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], 0xc39ba095
push 1
call fcn.1000580e
lea eax, [esp + 0x3c]
mov dword [esp + 0x84], ebx
push eax
lea eax, [esp + 0x3c]
mov dword [esp + 0x28], 5
push eax
push ecx
mov edx, 0x1e59
xor cl, cl
call fcn.1001dfce
lea edx, [esp + 0x30]
call fcn.1001ef3c
or dword [esp + 0x90], 0xffffffff
lea ecx, [esp + 0x48]
add esp, 0xc
call fcn.1000586b
dec dword [esi]
cmp dword [esi], 0xfffffff1
jne 0x1001e9fc
jmp 0x1001ec1b
mov dword [esi], 0xfffffff5
cmp dword [esi], 0x12
jge 0x1001ec1b
xor ebx, ebx
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001eb62
mov dword [esp + 0x20], 0x7aeb
cmp dword [esp + 0x20], 0x7bdc
jle 0x1001eb3f
mov dword [esp + 0x14], ebx
mov esi, ebx
mov dword [esp + 0x1c], ebx
mov edi, ebx
mov dword [esp + 0x18], ebx
mov eax, esi
mov ecx, edi
mov esi, dword [esp + 0x14]
mov edi, ebx
shl eax, cl
mov dword [esp + 0x2c], eax
or eax, edi
lea ecx, [esp + 0x48]
or eax, esi
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001eae5
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x50]
call fcn.10005d35
mov eax, dword [esp + 0x2c]
inc edi
cmp edi, 0x71a
jl 0x1001eacb
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
inc edi
mov dword [esp + 0x18], edi
cmp edi, 0x2bb6
jl 0x1001eabb
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x77b
jl 0x1001eab5
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x30c5
jl 0x1001eaaf
mov esi, dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [esp + 0x20], 0x7a7b
jge 0x1001eb5a
push str.eruhe_zgrbus_fzfqgf_kzmo_fzbtnzoy_jnjmixzei_evun_lhhyiluv_orbmnetb_gho_orr_upaxizd_isrrjcsmt
call fcn.1004699c
pop ecx
or dword [esp + 0x84], 0xffffffff
inc dword [esi]
cmp dword [esi], 0x12
jl 0x1001ea87
jmp 0x1001ec1b
mov dword [esp + 0x20], 0x3cf0
cmp dword [esp + 0x20], 0x3f8d
push 0
pop ebx
jle 0x1001ebcd
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [esp + 0x60]
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001eba4
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push 1
lea ecx, [esp + 0x68]
call fcn.10005d35
inc edi
cmp edi, 0x293d
jl 0x1001eb8b
inc esi
cmp esi, 0x773c
jl 0x1001eb89
mov eax, dword [esp + 0x2c]
cmp byte [ebp + 8], 0
je 0x1001ebf3
mov esi, dword [ebp + 0xc]
mov dword [esi], ebx
jmp 0x1001ebed
mov dword [esp + 0x34], 0x786f
lea ecx, [esp + 0x34]
call fcn.1001e236
dec dword [esi]
cmp dword [esi], ebx
jge 0x1001ebda
jmp 0x1001ec06
cmp byte [eax], 0
je 0x1001ec06
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
cmp dword [esp + 0x20], 0x3945
jge 0x1001ec1b
push str.lfumvmvc_kmsgk_sgj_yyzdusbx_roco_vxlannpni_zkuf_iyakf_stutvpob
call fcn.1004699c
pop ecx
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret