Function at 0x10009e70
Capabilities:
Create pipe

Disassembly:
mov eax, 0x1005dc84
call fcn.1005d528
sub esp, 0xc4
push ebx
push esi
mov dword [ebp - 0x4c], ecx
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x18], 0x9519
push edi
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x10], 0x3b2c57e7
push 2
mov dword [ebp - 0x20], 0x18144871
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x10], ecx
pop ebx
jmp 0x10009ec0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], 0x2b441a62
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10009eb2
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
test eax, eax
je 0x10009ef3
mov eax, dword [ebp - 0x18]
mov eax, 0x6840eb44
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
je 0x10009ef3
xor eax, eax
inc eax
jmp 0x10009ef5
mov eax, ecx
xor ecx, ecx
cmp eax, 0x56c37fc0
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
push 0
setl dl
add edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
pop eax
setl dl
sub edx, 0x193208af
neg edx
sbb edx, edx
inc edx
setns al
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x10009f80
mov dword [ebp - 0x1c], 0xfffffffb
cmp dword [ebp - 0x1c], 0
jne 0x10009f5c
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp eax, 0x5e60d1f
mov eax, dword [ebp - 0x20]
setne cl
inc eax
add eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x10009fb5
mov dword [ebp - 0x20], 0x11e745c5
mov dword [ebp - 0x10], 0
jmp 0x10009faf
mov dword [ebp - 0x28], 0xdbc8b697
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe8
je 0x10009f90
call fcn.100059d8
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.1000ae79
and dword [ebp - 4], 0
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x1c], 0xbb002891
mov dword [ebp - 0x14], 0x6b8e
cmp dword [ebp - 0x14], 0x6e5f
jle 0x1000a046
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, esi
lea ecx, [ebp - 0x70]
cdq
idiv ebx
lea eax, [edi + edx]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a009
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.1000aac7
inc ebx
cmp ebx, 0xa4f
jl 0x10009fec
inc esi
cmp esi, 0x64f3
jl 0x10009fea
inc edi
cmp edi, 0x362d
jl 0x10009fe8
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
push 2
pop ebx
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x14], 0x6af4
jge 0x1000a061
push str.qdyatzi_iywclwnbb_daxoxrh_lxxocpqt_ztdqp_avmpinx_bkhyekwjc_stndd_yucyfu_buazz_qgtp_zpa
call fcn.10046acc
pop ecx
and dword [ebp - 4], 0
mov dword [ebp - 0x28], 0xc68ab8ac
mov dword [ebp - 0x20], 0xfffe
mov dword [ebp - 0x20], 0x4e2b
cmp dword [ebp - 0x20], 0x4f44
jle 0x1000a0d6
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [ebp - 0xb8]
or eax, esi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a0a3
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.1000aac7
inc edi
cmp edi, 0x17f7
jl 0x1000a087
inc esi
cmp esi, 0x520
jl 0x1000a085
push 0x210b
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 0x10], 0xffffffff
jmp 0x1000a1e0
push 3
lea ecx, [ebp - 0x58]
call fcn.1000a704
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x14], 0x800ff68e
mov dword [ebp - 0x14], 0
jmp 0x1000a11a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov dword [eax + ecx*4], 0xbfb3a4d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000a10a
mov esi, dword [ebp - 0x10]
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
mov dword [edi + 4], esi
setne dl
xor eax, eax
add edx, dword [ebp - 0x18]
cmp esi, edx
setg al
sub eax, dword [ebp - 0x10]
jne 0x1000a15e
cmp dword [ebp - 0x18], eax
je 0x1000a161
xor eax, eax
inc eax
xor edx, edx
test eax, eax
sets dl
xor ecx, ecx
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
neg edx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x1c]
jl 0x1000a180
mov eax, dword [ebp - 0x10]
mov eax, dword [edi + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c], 0
jne 0x1000a1a5
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
xor edx, edx
add eax, 0x13783312
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x7b400765
lea ecx, [ebp - 0x58]
setl al
mov dword [ebp - 0x28], eax
call fcn.1000a787
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe9
jge 0x1000a0e2
cmp dword [ebp - 0x20], 0x4af6
jge 0x1000a1fe
push str.lggy_hgnxq_rjrol
call fcn.10046acc
pop ecx
and dword [ebp - 4], 0
mov edx, dword [ebp - 0x48]
mov ecx, edx
mov esi, dword [ebp - 0x2c]
add esi, 0xfffffafa
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000a23e
cmp dword [eax + 0x10], esi
jge 0x1000a223
mov eax, dword [eax + 8]
jmp 0x1000a227
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000a219
cmp ecx, edx
je 0x1000a23e
cmp esi, dword [ecx + 0x10]
jl 0x1000a23e
mov dword [ebp - 0x3c], ecx
lea esi, [ebp - 0x3c]
jmp 0x1000a244
mov dword [ebp - 0x40], edx
lea esi, [ebp - 0x40]
mov eax, dword [0x1007d464]
mov esi, dword [esi]
test al, 1
jne 0x1000a27b
and dword [0x1007d44c], 0
or eax, 1
mov dword [0x1007d464], eax
xor eax, eax
push 0x1005efa6
mov dword [0x1007d450], 7
mov word [0x1007d43c], ax
call fcn.10046aa2
pop ecx
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], 8
jmp 0x1000a2df
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x2c], 0xd2d1a4e6
cmp dword [ebp - 0x10], 0
je 0x1000a2ac
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
je 0x1000a2ac
xor edi, edi
inc edi
jmp 0x1000a2ae
xor edi, edi
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle dl
sub edi, edx
mov dword [ebp - 0x2c], edi
mov byte [ebp - 0x21], 0
cmp byte [ebp - 0x21], 0
je 0x1000a2dc
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffed
jge 0x1000a28b
mov dword [ebp - 0x2c], 0x13a5
cmp dword [ebp - 0x2c], 0x173a
jle 0x1000a34c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
xor edi, edi
xor ebx, ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x88]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a321
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.1000aac7
inc ebx
cmp ebx, 0x2c2f
jl 0x1000a303
inc edi
cmp edi, 0x4e99
jl 0x1000a301
push 2
pop ebx
cmp esi, dword [ebp - 0x48]
je 0x1000a36c
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0xd0]
call fcn.10001adf
pop ecx
xor ebx, ebx
mov byte [ebp - 4], 5
inc ebx
jmp 0x1000a383
push 0x1007d43c
lea ecx, [ebp - 0xa0]
call fcn.1000a601
mov dword [ebp - 4], 6
mov esi, dword [ebp - 0x4c]
mov ecx, esi
push eax
mov dword [ebp - 0x30], ebx
call fcn.1000a601
or ebx, 4
test bl, 2
je 0x1000a3ab
push 0
push 1
lea ecx, [ebp - 0xa0]
and ebx, 0xfffffffd
call fcn.1000ae2f
test bl, 1
je 0x1000a3bf
push 0
push 1
lea ecx, [ebp - 0xd0]
call fcn.1000ae2f
lea ecx, [ebp - 0x48]
call fcn.1000a7c9
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret