Function at 0x1001b35
Capabilities:
Connect pipe
Create pipe
Link many functions at runtime
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x488
mov eax, dword [0x1006034]
or dword [ebp - 0x458], 0xffffffff
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
xor edi, edi
push 0x10011ec
push eax
mov dword [ebp - 0x470], edi
mov dword [ebp - 0x460], edi
mov dword [ebp - 0x468], edi
mov dword [ebp - 0x46c], edi
call esi
cmp eax, edi
mov dword [ebp - 0x47c], eax
je 0x1001e06
push ebx
push 0x10011e0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x10011c4
push eax
mov dword [ebp - 0x45c], eax
call esi
mov ebx, eax
cmp ebx, edi
je 0x1001dbe
push 0x10011ac
push dword [ebp - 0x45c]
call esi
cmp eax, edi
mov dword [ebp - 0x488], eax
je 0x1001dbe
push 0x100118c
push dword [ebp - 0x45c]
call esi
cmp eax, edi
mov dword [ebp - 0x478], eax
je 0x1001dbe
push 0x100116c
push dword [ebp - 0x45c]
call esi
cmp eax, edi
mov dword [ebp - 0x480], eax
je 0x1001dbe
push 0x1001154
push dword [ebp - 0x45c]
call esi
cmp eax, edi
mov dword [ebp - 0x474], eax
je 0x1001dbe
push 0x1001140
push dword [ebp - 0x45c]
call esi
cmp eax, edi
mov dword [ebp - 0x484], eax
je 0x1001dbe
push 0x1001128
push edi
push 2
call dword [sym.imp.KERNEL32.dll_OpenEventA]
cmp eax, edi
mov dword [ebp - 0x460], eax
je 0x1001dbe
push edi
push 0x2bf20
mov esi, 0x208
push esi
push esi
push 1
push 6
push 1
push 0x100110c
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
push dword [ebp - 0x460]
mov dword [ebp - 0x458], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [ebp - 0x458], 0xffffffff
je 0x1001dbe
push edi
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
je 0x1001dbe
push edi
push edi
call ebx
cmp eax, 0xffffffff
mov dword [ebp - 0x464], eax
je 0x1001dbe
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
jmp 0x1001d09
lea eax, [ebp - 0x228]
push eax
push edi
push edi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x464]
mov dword [ebp - 0x228], 0x1c
call dword [ebp - 0x488]
test eax, eax
je 0x1001d2b
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x464]
call dword [ebp - 0x47c]
test eax, eax
je 0x1001d09
mov dword [ebp - 0x46c], 1
push edi
lea eax, [ebp - 0x470]
push eax
push esi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x458]
call ebx
test eax, eax
jne 0x1001cbe
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x46c], edi
je 0x1001dbe
mov esi, dword [ebp - 0x464]
lea eax, [ebp - 0x228]
push eax
xor ebx, ebx
mov dword [ebp - 0x228], 0x1c
push edi
jmp 0x1001d9b
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x228]
push eax
push esi
mov dword [ebp - 0x454], 0x22c
call dword [ebp - 0x480]
test eax, eax
je 0x1001d92
test byte [ebp - 0x44f], 1
jne 0x1001d88
test byte [ebp - 0x450], 0x80
je 0x1001d92
mov dword [ebp - 0x468], 1
lea eax, [ebp - 0x228]
inc ebx
push eax
push ebx
push esi
call dword [ebp - 0x474]
test eax, eax
jne 0x1001d53
push esi
call dword [ebp - 0x478]
cmp dword [ebp - 0x468], edi
je 0x1001dbe
push edi
push edi
push edi
call dword [ebp - 0x484]
cmp dword [ebp - 0x45c], edi
pop ebx
je 0x1001dd3
push dword [ebp - 0x45c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x458], 0xffffffff
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x1001df6
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
push dword [ebp - 0x458]
call esi
cmp dword [ebp - 0x460], edi
je 0x1001e06
push dword [ebp - 0x460]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
call fcn.01001f9a
leave
ret 4