Function at 0x10029b93
Capabilities:
Accept command line arguments
Create pipe
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008df21
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x12c
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002a09d
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x2c], 0x9229a275
mov dword [ebp - 0x3c], 0x217c
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x50], 0x50b7f45b
mov dword [ebp - 0x58], 0xfffffff9
mov dword [ebp - 0xcc], 0xfffffffa
mov dword [ebp - 0x110], 1
push 2
lea ecx, [ebp - 0x138]
call fcn.10019c20
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 0xffff
mov dword [ebp - 0x4c], 0x96fb6c71
mov dword [ebp - 0x40], 0
jmp 0x10029c31
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10029c4d
push dword [ebp - 0x40]
lea ecx, [ebp - 0x138]
call fcn.10019cac
mov dword [eax], 1
jmp 0x10029c2a
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x2c], eax
jne 0x10029c67
mov dword [ebp - 0xd4], 1
jmp 0x10029c6e
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd4], eax
jne 0x10029c82
mov dword [ebp - 0x64], 1
jmp 0x10029c86
and dword [ebp - 0x64], 0
cmp dword [ebp - 0x64], 0xffffffff
jne 0x10029c98
mov dword [ebp - 0xb0], 1
jmp 0x10029c9f
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x10029cc0
cmp dword [ebp - 0x24], 0
jne 0x10029cc0
cmp dword [ebp - 0x2c], 0
jne 0x10029cc0
and dword [ebp - 0x6c], 0
jmp 0x10029cc7
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x2585
je 0x10029ce5
cmp dword [ebp - 0x2c], 0
jne 0x10029ce5
and dword [ebp - 0xdc], 0
jmp 0x10029cef
mov dword [ebp - 0xdc], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x124], eax
mov eax, 0xfff6
cmp eax, 0xfe24
jbe 0x10029d19
mov dword [ebp - 0xb8], 1
jmp 0x10029d20
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
je 0x10029d40
mov eax, 0xa88f
test eax, eax
je 0x10029d40
mov dword [ebp - 0x74], 1
jmp 0x10029d44
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x74], eax
jle 0x10029d58
mov dword [ebp - 0xc0], 1
jmp 0x10029d5f
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xc0]
jle 0x10029d73
mov dword [ebp - 0x7c], 1
jmp 0x10029d77
and dword [ebp - 0x7c], 0
cmp dword [ebp - 0x7c], 0
jne 0x10029d89
mov dword [ebp - 0x10c], 1
jmp 0x10029d90
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x10029db4
cmp dword [ebp - 0x30], 0
jne 0x10029db4
and dword [ebp - 0xc8], 0
jmp 0x10029dbe
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jne 0x10029ddc
cmp dword [ebp - 0x10], 0
jne 0x10029ddc
and dword [ebp - 0xe8], 0
jmp 0x10029de6
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x12c], eax
mov eax, 0xdbf12959
sub eax, 0xc67a9553
cmp eax, dword [ebp - 0x10]
jg 0x10029e0a
mov dword [ebp - 0x84], 1
jmp 0x10029e11
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0xf8], 0x4fd57eca
jne 0x10029e45
mov dword [ebp - 0xd0], 1
jmp 0x10029e4c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xd0], eax
jg 0x10029e63
mov dword [ebp - 0x8c], 1
jmp 0x10029e6a
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0xe0]
jg 0x10029ea0
mov dword [ebp - 0xbc], 1
jmp 0x10029ea7
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x24], eax
jle 0x10029ebb
mov dword [ebp - 0xd8], 1
jmp 0x10029ec2
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xd8]
je 0x10029ed9
mov dword [ebp - 0x94], 1
jmp 0x10029ee0
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x94], eax
jl 0x10029ef4
mov dword [ebp - 0x5c], 1
jmp 0x10029ef8
and dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0x7488f575
jge 0x10029f0d
mov dword [ebp - 0x9c], 1
jmp 0x10029f14
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xb150
jge 0x10029f32
mov dword [ebp - 0xa4], 1
jmp 0x10029f39
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xa4]
add ecx, 0x7a5e2b19
imul eax, ecx
neg eax
mov dword [ebp - 0xcc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.10019ca7
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xac], 0xba339924
mov dword [ebp - 0x48], 0xffffffe4
jmp 0x10029f92
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe6
jge 0x10029fb7
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x10029fb5
push 0
push 0
push 0x1979
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
jmp 0x10029f8b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x44], 0
jmp 0x10029fe7
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffffe
jle 0x1002a023
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1002a021
push 0
push 0x3e8
push 0x1090
push 0x2240
push 0x18da
push 0x236e
push 0xe31
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x10029fe0
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x1002a03b
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov eax, dword [ebp - 0xec]
movzx eax, byte [eax]
test eax, eax
je 0x1002a098
mov dword [ebp - 0x114], 0xfffffff9
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x1002a06d
push 0
push 0x260f
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1002a083
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
push 0
push 0x1600
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x1002a30e
mov dword [ebp - 0x14], 0x15a13695
mov dword [ebp - 0x1c], 0x59229a27
mov dword [ebp - 0x38], 0xfff7
mov dword [ebp - 0x88], 0x98ba832a
mov dword [ebp - 0x28], 0x4adb5d23
mov dword [ebp - 0x34], 0
jmp 0x1002a0d3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1002a0e9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x108], 1
jmp 0x1002a0cc
cmp dword [ebp - 0x14], 0
jne 0x1002a2ac
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14], eax
jle 0x1002a10e
mov dword [ebp - 0xa0], 1
jmp 0x1002a115
and dword [ebp - 0xa0], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x108], 6
push 6
pop eax
test eax, eax
jne 0x1002a146
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jne 0x1002a146
and dword [ebp - 0xc4], 0
jmp 0x1002a150
mov dword [ebp - 0xc4], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc4], eax
jl 0x1002a167
mov dword [ebp - 0xb4], 1
jmp 0x1002a16e
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xb4], eax
jg 0x1002a18b
mov eax, 0xd4f5
test eax, eax
jne 0x1002a18b
and dword [ebp - 0xf4], 0
jmp 0x1002a195
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x14], 0x7293cc9d
jg 0x1002a1c0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jne 0x1002a1c0
and dword [ebp - 0x90], 0
jmp 0x1002a1ca
mov dword [ebp - 0x90], 1
cmp dword [ebp - 0x90], 1
jne 0x1002a1ef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x1002a1ef
mov dword [ebp - 0x98], 1
jmp 0x1002a1f6
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x98], eax
jne 0x1002a20d
mov dword [ebp - 0xfc], 1
jmp 0x1002a214
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0xa0]
cmp eax, 0xffffffff
jne 0x1002a238
mov dword [ebp - 0xa8], 1
jmp 0x1002a23f
and dword [ebp - 0xa8], 0
imul eax, dword [ebp - 0xa8], 0x8967
cmp eax, dword [ebp - 0x14]
je 0x1002a257
mov dword [ebp - 0x60], 1
jmp 0x1002a25b
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x60], eax
jge 0x1002a26c
mov dword [ebp - 0x68], 1
jmp 0x1002a270
and dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 1
jl 0x1002a27f
mov dword [ebp - 0x70], 1
jmp 0x1002a283
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x70], eax
jne 0x1002a294
mov dword [ebp - 0x78], 1
jmp 0x1002a298
and dword [ebp - 0x78], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x38]
test eax, eax
jne 0x1002a2ac
and dword [ebp - 0x80], 0
jmp 0x1002a2b3
mov dword [ebp - 0x80], 1
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0
jmp 0x1002a2d5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x17
jg 0x1002a304
mov dword [ebp - 0x28], 2
jmp 0x1002a2eb
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002a302
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x108], 0
je 0x1002a300
jmp 0x1002a302
jmp 0x1002a2e4
jmp 0x1002a2ce
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret