Function at 0x1003cf70
Capabilities:
Create pipe
Write file on windows
Write pipe

Disassembly:
push ebp
lea ebp, [esp - 0xc60]
sub esp, 0xc60
push 0xffffffffffffffff
push 0x100eec88
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x10144930]
xor eax, ebp
mov dword [ebp + 0xc5c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0xc68]
mov dword [ebp - 0x2c], edi
mov esi, dword [ebp + 0xc6c]
mov dword [ebp - 0x20], esi
mov eax, dword [ebp + 0xc70]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp + 0xc78]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xd
xor ebx, ebx
mov dword [ebp + 0x24c], ebx
mov dword [ebp + 0x250], ebx
mov dword [ebp + 0x254], ebx
push 0x200
push ebx
lea ecx, [ebp + 0x258]
push ecx
call fcn.100c7d20
add esp, 0xc
mov dword [ebp + 0x458], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 4], ebx
cmp esi, ebx
je 0x1003d60f
mov eax, esi
lea edx, [eax + 2]
jmp 0x1003d030
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1003d030
sub eax, edx
sar eax, 1
je 0x1003d60f
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x1003d60f
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1003d053
sub eax, edx
sar eax, 1
je 0x1003d60f
push 0x200
push ebx
lea edx, [ebp + 0x65c]
push edx
call fcn.100c7d20
add esp, 0xc
mov esi, dword [ebp - 0x18]
cmp esi, ebx
je 0x1003d0b5
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1003d090
sub eax, edx
sar eax, 1
je 0x1003d0b5
push 0xff
push esi
push 0x100
lea eax, [ebp + 0x65c]
push eax
jmp 0x1003d0cb
push 0xff
push str.public
push 0x100
lea ecx, [ebp + 0x65c]
push ecx
call fcn.100c6041
add esp, 0x10
lea ecx, [edi + 0x120f8]
mov edx, dword [ebp - 0x20]
call fcn.10046d00
mov esi, eax
mov dword [ebp - 0x14], esi
cmp esi, ebx
je 0x1003d10d
push str.Load_Script_files_fail__
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
mov dword [ebp - 0x4c], esi
push 0x1012ac78
lea edx, [ebp - 0x4c]
push edx
call fcn.100c80ad
push 0x200
push ebx
lea eax, [ebp + 0xa5c]
push eax
call fcn.100c7d20
add esp, 0xc
push 0xff
cmp dword [ebp + 0xc74], ebx
je 0x1003d142
push str.CI2_WSP
push 0x100
lea ecx, [ebp + 0xa5c]
push ecx
jmp 0x1003d153
push str.PSU_WSP
push 0x100
lea edx, [ebp + 0xa5c]
push edx
call fcn.100c6041
add esp, 0x10
mov eax, dword [ebp - 0x30]
cmp eax, ebx
je 0x1003d1bc
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1003d165
sub eax, edx
sar eax, 1
je 0x1003d1bc
lea eax, [ebp + 0xa5c]
push eax
push ebx
lea eax, [edi + 0x120f8]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
call fcn.10047190
mov esi, eax
mov dword [ebp - 0x14], esi
cmp esi, ebx
je 0x1003d205
push str.Init_Registry_fail__
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
mov dword [ebp - 0x50], esi
push 0x1012ac78
lea ecx, [ebp - 0x50]
push ecx
call fcn.100c80ad
lea edx, [ebp + 0xa5c]
push edx
push str.Easy_Wireless_Setup
lea eax, [edi + 0x120f8]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x28]
call fcn.10047190
mov esi, eax
mov dword [ebp - 0x14], esi
cmp esi, ebx
je 0x1003d205
push str.Init_Registry_fail__
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
mov dword [ebp - 0x54], esi
push 0x1012ac78
lea eax, [ebp - 0x54]
push eax
call fcn.100c80ad
mov esi, dword [ebp - 0x1c]
lea ecx, [edi + 0x1e2d8]
mov dword [edi + 0x1fb24], ecx
push 0x200
push ebx
lea edx, [ebp + 0x85c]
push edx
call fcn.100c7d20
add esp, 0xc
cmp esi, ebx
je 0x1003d257
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x1003d232
sub eax, edx
sar eax, 1
je 0x1003d257
push 0xff
push esi
push 0x100
lea eax, [ebp + 0x85c]
push eax
jmp 0x1003d26d
push 0xff
push 0x1010a75c
push 0x100
lea ecx, [ebp + 0x85c]
push ecx
call fcn.100c6041
add esp, 0x10
lea edx, [ebp]
push edx
call fcn.1000f900
mov byte [ebp - 4], 1
push 0x10108140
lea ecx, [ebp - 0x18]
call fcn.10007ed0
mov byte [ebp - 4], 2
lea esi, [edi + 0x120f8]
mov ecx, esi
lea edx, [ebp]
call fcn.1000fb20
mov eax, dword [ebp + 0x20]
push eax
lea ecx, [ebp]
call fcn.1000fef0
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp]
push edx
call fcn.1003b890
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x18]
call fcn.10007cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.10007e70
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x1003d308
push eax
push str.MUI_Language_:___s_
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 8
mov eax, dword [ebp - 0x20]
push eax
push edi
mov edx, dword [ebp - 0x18]
lea ecx, [ebp + 0x65c]
call fcn.1003ec10
mov ecx, dword [ebp - 0x18]
jmp 0x1003d324
mov eax, dword [ebp - 0x20]
push eax
push edi
lea edx, [ebp + 0x85c]
lea ecx, [ebp + 0x65c]
call fcn.1003ec10
lea ecx, [ebp + 0x85c]
push 0xff
push ecx
push 0x100
lea edx, [ebp + 0x45c]
push edx
call fcn.100c6041
add esp, 0x10
lea eax, [ebp + 0x45c]
push eax
mov edx, dword [ebp - 0x20]
mov ecx, esi
call fcn.10046fd0
mov esi, eax
mov dword [ebp - 0x14], esi
cmp esi, ebx
je 0x1003d37b
push str.Load_String_files_fail__
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
mov dword [ebp - 0x34], esi
push 0x1012ac78
lea ecx, [ebp - 0x34]
push ecx
call fcn.100c80ad
lea eax, [edi + 0x1fb28]
lea ecx, [edi + 0x1fb2c]
push 0x1000
push ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x1003d3d6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x14], esi
push str.Create_Flow_Pipe
mov ecx, esi
mov edx, 0x10152dd8
call fcn.1003f2f0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.10007e70
mov byte [ebp - 4], bl
lea ecx, [ebp]
call fcn.1000fa90
mov eax, esi
jmp 0x1003d680
lea esi, [edi + 0x1faec]
mov dword [esi + 4], edi
lea eax, [edi + 0x120f8]
mov dword [esi + 8], eax
push esi
call fcn.10008fc0
mov dword [ebp + 0x24c], esi
lea ecx, [edi + 0x120f8]
mov dword [ebp + 0x254], ecx
mov edx, 2
xor eax, eax
call fcn.10046cb0
mov dword [ebp + 0x250], eax
mov edx, dword [edi + 0x1fb2c]
mov dword [ebp + 0x458], edx
push 0xff
cmp dword [ebp + 0xc74], ebx
je 0x1003d43e
push str.WSP_FLOW_CI2
push 0x100
lea eax, [ebp + 0x258]
push eax
jmp 0x1003d44f
push str.WSP_FLOW_PSU
push 0x100
lea ecx, [ebp + 0x258]
push ecx
call fcn.100c6041
add esp, 0x10
push ebx
push ebx
push ebx
push ebx
lea edx, [ebp + 0x24c]
push edx
push 0x1003e090
call fcn.100c08c5
mov esi, eax
mov dword [ebp - 0x1c], esi
cmp esi, ebx
jne 0x1003d4a0
push str.Init_Flow_Thread_fail___
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
mov eax, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], eax
push 0x1012ac78
lea eax, [ebp - 0x38]
push eax
call fcn.100c80ad
call fcn.100bf0c6
mov eax, dword [eax + 8]
mov ecx, dword [edi + 0x1fb24]
mov ecx, dword [ecx]
mov dword [edi + 0x3f0bc], ecx
mov dword [edi + 0x3f0c0], edi
mov dword [edi + 0x3f0c4], edi
mov dword [edi + 0x3f0c8], eax
call fcn.100bf0c6
mov eax, dword [eax + 8]
mov ecx, dword [edi + 0x1fb24]
mov ecx, dword [ecx]
mov edx, dword [edi]
push ebx
push eax
push str.WSP_WIZARD
push ebx
push ebx
push ecx
push edi
mov eax, dword [edx + 0x168]
call eax
mov dword [ebp - 0x14], eax
cmp eax, ebx
jne 0x1003d5b7
mov ecx, edi
call fcn.1003df10
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 0x144]
call eax
cmp eax, 1
jne 0x1003d5ae
mov dword [ebp - 0x14], ebx
lea esi, [edi + 0x3f0dc]
push 0x800
push ebx
push esi
call fcn.100c7d20
add esp, 0xc
push str.IPADDRESS
push str.InstallingWSPCurrent
mov ecx, dword [edi + 0x1fb24]
push ecx
mov eax, 0x400
mov edx, esi
call fcn.10008b50
test eax, eax
jne 0x1003d560
push esi
push str.Wireless_Printer_IP_is___s_
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 8
mov esi, dword [ebp - 0x1c]
mov eax, dword [edi + 0x1fb28]
cmp eax, ebx
je 0x1003d5e4
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], ebx
call fcn.1001c790
push ebx
lea edx, [ebp - 0x48]
push edx
push 0xc
lea ecx, [ebp - 0x44]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1003d5cb
push str.WriteFile_of_Flow_Pipe_Data
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edx, 0x10152dd8
call fcn.1003f2f0
add esp, 4
jmp 0x1003d5d0
mov dword [ebp - 0x14], 0x4c7
jmp 0x1003d563
push str.Set_Wizard_fail__
mov ecx, 0x10152dd8
call fcn.1003f430
add esp, 4
jmp 0x1003d563
call fcn.1001c790
cmp dword [esi + 0x2c], ebx
je 0x1003d5e4
push 0x1388
mov edx, dword [esi + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [edi + 0x1fb24]
call fcn.10044e10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.10007e70
mov byte [ebp - 4], bl
lea ecx, [ebp]
call fcn.1000fa90
mov dword [ebp - 4], 0xffffffff
jmp 0x1003d64d
mov eax, 0xd
jmp 0x1003d680
mov dword [ebp - 4], 5
mov eax, dword [edi + 0x1fb28]
cmp eax, ebx
je 0x1003d665
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [edi + 0x1fb2c]
cmp edi, ebx
je 0x1003d676
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xc5c]
xor ecx, ebp
call fcn.100c59be
add ebp, 0xc60
mov esp, ebp
pop ebp
ret 0x14