Function at 0x1000e070
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
lea ecx, [eax + 0x330]
push edi
mov edi, eax
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x18], ecx
cmp eax, ecx
ja 0x1000e361
nop
cmp edi, 0x7ba1
ja 0x1000e2ff
je 0x1000e2e1
cmp edi, 0x4ecc
ja 0x1000e2af
je 0x1000e29e
mov eax, edi
sub eax, 0x4e44
je 0x1000e1e7
sub eax, 0x44
jne 0x1000e372
mov eax, dword [ebp + 0xc]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000e0d0
mov ecx, dword [ebp + 8]
sub eax, edx
cmp eax, dword [ecx]
je 0x1000e1dc
xor esi, esi
lea edi, [esi + 6]
lea esp, [esp]
cmp esi, 0xcd
ja case.0x1000e103.1
movzx edx, byte [esi + 0x1000e3c0]
jmp dword [edx*4 + 0x1000e3a4]
mov dword [ebp - 0xc], 0x66
jmp case.0x1000e103.1
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
jne 0x1000e12e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 1], 0
jmp case.0x1000e103.1
cmp byte [ebp - 1], 0
je case.0x1000e103.1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x1000e103.1
push 0
push 0
push 0x200
push 0x200
push 0xff
push 6
push 3
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x14], eax
jmp case.0x1000e103.1
push 2
lea ecx, [ebp - 0x2e]
push 0x10162224
push ecx
call fcn.100fdf85
add esp, 0xc
jmp case.0x1000e103.1
mov byte [ebp - 1], 1
mov dword [ebp - 0x14], 0xffffffff
jmp case.0x1000e103.1
push 0xe
lea edx, [ebp - 0x54]
push 0x10162228
push edx
call fcn.100fdb50
push 2
lea eax, [ebp - 0x48]
push 0x10162238
push eax
call fcn.100fdf85
push 9
lea ecx, [ebp - 0x54]
push 0x1016223c
push ecx
call fcn.100fe1b7
push 8
lea edx, [ebp - 0x34]
push 0x10162250
push edx
call fcn.100fdb50
add esp, 0x30
add esi, 0x29
dec edi
jne 0x1000e0f0
mov edi, dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
jmp 0x1000e372
mov eax, dword [ebp + 8]
cmp dword [ebp + 0xc], 0
mov dword [eax], 0
sete al
mov dword [ebp - 0xc], 0x64
test al, al
je 0x1000e372
mov ebx, 0x525d
jmp 0x1000e210
mov eax, ebx
sub eax, 0x525d
je 0x1000e28a
sub eax, 3
jne 0x1000e28a
mov esi, 0x6b1
mov eax, esi
sub eax, 0x6b1
je 0x1000e25f
sub eax, 0x44
jne 0x1000e278
push 4
lea ecx, [ebp - 0x1e]
push 0x10162210
push ecx
call fcn.100fdb50
lea edi, [ebp - 0x28]
add esp, 0xc
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1000e248
mov dx, word [0x10162214]
mov word [edi], dx
mov edi, dword [ebp - 0x10]
jmp 0x1000e278
push 9
lea eax, [ebp - 0x28]
push str.ebugBreak
push eax
mov word [ebp - 0x28], 0x44
call fcn.100fda10
add esp, 0xc
add esi, 0x44
cmp esi, 0x6f5
jbe 0x1000e223
mov dword [ebp - 0xc], 0x65
add ebx, 3
cmp ebx, 0x5260
jbe 0x1000e210
jmp 0x1000e372
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
jmp 0x1000e372
cmp edi, 0x4f10
je 0x1000e361
cmp edi, 0x7b5d
jne 0x1000e372
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
cmp eax, 0xc
je 0x1000e38b
cmp eax, 0x1d
sete byte [ebp - 2]
jmp 0x1000e372
cmp byte [ebp - 2], 0
jne 0x1000e397
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0x13
jne 0x1000e372
pop edi
pop esi
mov eax, 0x10002560
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x7c6d
ja 0x1000e353
je 0x1000e33f
mov eax, edi
sub eax, 0x7be5
je 0x1000e32b
sub eax, 0x44
jne 0x1000e372
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 0x17
jne 0x1000e372
pop edi
pop esi
mov eax, 0x10003bf0
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0x10
jne 0x1000e372
pop edi
pop esi
mov eax, 0x10003590
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
cmp dword [eax], 7
jne 0x1000e372
pop edi
pop esi
mov eax, 0x10001e30
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, edi
sub eax, 0x7cb1
je 0x1000e36b
sub eax, 0x44
jne 0x1000e372
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], 0
add edi, 0x44
mov dword [ebp - 0x10], edi
cmp edi, dword [ebp - 0x18]
jbe 0x1000e090
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0x10004480
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 0x10009790
pop ebx
mov esp, ebp
pop ebp
ret