Function at 0x1003c762
Capabilities:
Create pipe
Create thread
Create two anonymous pipes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov ebx, dword [0x100e6d59]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x100e6d59]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x100e6d59]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x100e6d59]
push 0x100e6d49
push 0x100e6d61
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1003c7f3
push 0x11c
push 0x401015c
push 6
call fcn.100abddd
add esp, 0xc
mov dword [0x100e6d5d], eax
mov ebx, dword [0x100e6d65]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x100e6d65]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x100e6d65]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x100e6d65]
push 0x100e6d71
push 0x100e6d6d
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1003c872
push 0x203
push 0x401015c
push 6
call fcn.100abddd
add esp, 0xc
mov dword [0x100e6d69], eax
cmp dword [0x100e6d6d], 0
je 0x1003c895
cmp dword [0x100e6d49], 0
je 0x1003c895
xor eax, eax
jmp 0x1003c89a
mov eax, 1
test eax, eax
je 0x1003c8a7
jmp 0x1003ca8d
mov ebx, dword [0x100e6d75]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x44
mov dword [ebp - 0xc], esp
push dword [0x100e6d75]
xor eax, eax
call dword [0x100e6ef9]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1003c8e8
push 0x31d
push 0x401015c
push 6
call fcn.100abddd
add esp, 0xc
mov ebx, dword [0x100e6d75]
add ebx, 0x3c
mov dword [ebp - 0xc], ebx
mov eax, dword [0x100e6d71]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x100e6d75]
add ebx, 0x40
mov dword [ebp - 0xc], ebx
mov eax, dword [0x100e6d71]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x100e6d75]
add ebx, 0x38
mov dword [ebp - 0xc], ebx
mov eax, dword [0x100e6d61]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x100e6d75]
add ebx, 0x30
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov ebx, dword [0x100e6d75]
add ebx, 0x2c
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x101
mov dword [ebp - 0xc], esp
push dword [0x100e6d79]
push dword [0x100e6d75]
push 0
push 0
push 0
push 1
push 0
push 0
push str.cmd.exe
push 0
xor eax, eax
call dword [0x100e6efd]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1003c9b1
push 0x43e
push 0x401015c
push 6
call fcn.100abddd
add esp, 0xc
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 0x1000
push 1
mov ebx, 0x1bc
call fcn.100acce0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [0x100e6d7d]
test ebx, ebx
je 0x1003c9ec
push ebx
call fcn.100abdd7
add esp, 4
pop eax
mov dword [0x100e6d7d], eax
mov ebx, dword [0x100e6d79]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x100e6d01], eax
mov ebx, dword [0x100e6d79]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x100e6d81], eax
mov ebx, dword [0x100e6d79]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x100e6d85], eax
mov ebx, dword [0x100e6d79]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x100e6d89], eax
mov dword [ebp - 0xc], esp
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x1003cc2e
push 0
push 0
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x1003ca8d
push 0x584
push 0x401015c
push 6
call fcn.100abddd
add esp, 0xc
mov esp, ebp
pop ebp
ret