Function at 0x418a60
Capabilities:
Connect pipe
Encode data using xor

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x10]
push ebx
push ebp
mov ebp, dword [esp + 0x20]
lea ebx, [eax + 0x74f]
push edi
lea edx, [eax - 0x10b2]
add ecx, 0x51d
lea edi, [ebp - 0x1e54]
mov eax, edi
xor eax, 0x190b
cmp ebx, eax
jg 0x418cdf
mov eax, edx
xor eax, 0xf7d
push esi
cmp ebx, eax
jle 0x418c56
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0xb8]
mov dword [0x4ae10c], ecx
mov edx, dword [eax + 0xe0]
sub edx, dword [eax + 0x9c]
mov ecx, dword [0x4ac344]
xor edx, 0xffe2f460
mov dword [ecx + 0xfc], edx
mov ecx, dword [0x4ac344]
mov edx, dword [eax + 0xf4]
sub edx, 0x411cdd9c
xor ebp, ebp
mov dword [ecx + 0x5c], edx
mov dword [eax + 0xa4], 0x41f190
nop word [eax + eax]
mov edx, dword [0x4ac344]
mov ecx, dword [edx + 0xa4]
mov esi, dword [ecx + ebp]
add ebp, 4
mov ecx, dword [eax + 0x10]
add ecx, dword [eax + 0x1c]
xor ecx, dword [edx + 0x2c]
xor ecx, 2
mov dword [edx + 0x2c], ecx
mov ecx, dword [eax + 0xf0]
sub ecx, 0x25
imul ecx, dword [0x4ae120]
mov dword [0x4ae120], ecx
mov ecx, dword [0x4ac344]
mov edx, dword [ecx + 0xb4]
mov ecx, dword [eax + 0xb0]
add edx, 0xff93bb26
add ecx, edx
add dword [eax + 0x48], ecx
mov edx, dword [eax + 0x5c]
mov ecx, dword [0x4ae0f0]
add ecx, 0xffeaf9b4
imul edx, esi
add dword [eax + 0x50], ecx
mov ecx, dword [0x4ac344]
mov dword [esp + 0x14], edx
mov ebx, edx
mov edx, dword [ecx + 0x60]
mov ecx, dword [0x4ae10c]
shr ebx, 8
mov byte [ecx + edx], bl
mov ecx, dword [0x4ac344]
mov ebx, dword [esp + 0x14]
inc dword [ecx + 0x60]
mov edx, dword [0x4ac344]
mov ecx, dword [edx + 0x80]
inc ecx
imul ecx, dword [edx + 0xb4]
mov dword [edx + 0xb4], ecx
mov edx, dword [0x4ae0c0]
mov ecx, dword [0x4ae10c]
mov byte [edx + ecx], bl
mov ecx, 0x18cd5b
inc dword [0x4ae0c0]
sub ecx, dword [eax + 0xf4]
add dword [eax + 0x74], ecx
mov ecx, dword [eax + 0x9c]
mov edx, dword [0x4ac344]
add ecx, 0x1d0b9f
xor dword [edx + 0x48], ecx
mov edx, dword [0x4ac344]
mov ecx, dword [edx + 0x3c]
add dword [edx + 0xa8], ecx
mov edx, dword [0x4ae0ac]
lea ecx, [edx - 1]
xor dword [0x4ae114], ecx
mov ecx, dword [0x4ae110]
sub ecx, dword [0x4ae0e0]
sub ecx, 0x539ab4
xor edx, ecx
mov ecx, dword [0x4ae0c4]
add ecx, dword [0x4ae100]
sub dword [0x4ae0d4], ecx
mov dword [0x4ae0ac], edx
cmp ebp, 0x1d6b8
jl 0x418b00
mov ecx, dword [eax + 8]
sub ecx, dword [eax + 0xf0]
xor ecx, 0xffffeaac
pop esi
mov dword [eax + 0x5c], ecx
lea eax, [edi + 0xbea]
pop edi
pop ebp
pop ebx
ret
mov eax, dword [0x4ae158]
mov esi, dword [esp + 0x1c]
or eax, 0x1668
and eax, ecx
cmp dword [esi + 0x90], eax
jbe 0x418cde
mov eax, dword [esi + 0x44]
or eax, dword [esi + 8]
or eax, ebx
or dword [esi + 0xe0], eax
lea eax, [ecx + 0x1d6b]
or eax, 0x180a
imul eax, dword [esi + 0x7c]
mov dword [esi + 0x7c], eax
mov eax, dword [0x4ac344]
mov ecx, dword [esi + 0x4c]
mov eax, dword [eax + 0x64]
sub eax, edx
push eax
mov eax, dword [esi + 0x30]
add eax, 0x190b
add eax, ecx
push eax
mov eax, dword [0x4ae06c]
add eax, ebx
push ecx
push eax
mov eax, ebx
xor eax, 0xbea
or eax, dword [esi + 0xf8]
push eax
lea eax, [edi + edi]
or eax, ebp
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
imul eax, dword [esi + 0x4c], 0x1801
push eax
mov eax, dword [esi + 0x48]
and eax, ebx
push eax
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
pop esi
lea eax, [edi + 0xbea]
pop edi
pop ebp
pop ebx
ret