Function at 0x44d06e
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4afb71
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x74
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x38], 0x4fe2
mov dword [ebp - 0x5c], str.xnwwofbcy_yjutk_ekcnv_ndfwzjju_kfa
cmp dword [ebp - 0x38], 0x515a
jle 0x44d110
and dword [ebp - 0x1c], 0
jmp 0x44d0b4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x7ce9
jge 0x44d110
and dword [ebp - 0x20], 0
jmp 0x44d0ca
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x25d1
jge 0x44d10e
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x20]
cdq
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
push dword [ebp - 0x60]
push dword [ebp - 0x64]
lea ecx, [ebp - 0x84]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x84]
call fcn.00409baf
jmp 0x44d0c3
jmp 0x44d0ad
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x44d252
lea eax, [ebp + 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [eax]
test eax, eax
je 0x44d237
mov dword [ebp - 0x34], 0x203d
mov dword [ebp - 0x40], str.ojwbjvs_jcparfvor_obfybmf_wykgd_rxu_xzevqri_ylywfssg_xqgg
cmp dword [ebp - 0x34], 0x20e9
jle 0x44d1e0
push 0x254f
push 0x1ded
call dword [sym.imp.USER32.dll_GetWindow]
and dword [ebp - 0x24], 0
jmp 0x44d168
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x7d30
jge 0x44d1e0
and dword [ebp - 0x28], 0
jmp 0x44d17e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x17d2
jge 0x44d1de
and dword [ebp - 0x2c], 0
jmp 0x44d194
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x4858
jge 0x44d1dc
and dword [ebp - 0x30], 0
jmp 0x44d1aa
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x7cf4
jge 0x44d1da
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
xor ecx, dword [ebp - 0x30]
or eax, ecx
cdq
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x44d1a3
jmp 0x44d18d
jmp 0x44d177
jmp 0x44d161
push 0x1aae
push 0x21e8
push 0x956
call dword [sym.imp.USER32.dll_SetWindowLongA]
and dword [ebp - 4], 0
cmp dword [ebp - 0x34], 0x1fc4
jge 0x44d20f
mov edx, dword [ebp - 0x40]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x44d22b
or dword [ebp - 4], 0xffffffff
jmp 0x44d235
jmp 0x44d24d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x44d2d5
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x48], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [eax]
test eax, eax
je 0x44d2bb
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
jmp 0x44d29c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 2
jge 0x44d2b9
mov eax, dword [ebp - 0x18]
push dword [eax]
mov ecx, dword [ebp - 0x58]
call fcn.00409fe1
mov dword [eax], 0xfcf42757
jmp 0x44d291
jmp 0x44d2d5
mov byte [ebp - 0x11], 0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x44d2d5
push 0x3735
push 0
call fcn.0042a293
pop ecx
pop ecx
mov dword [ebp - 4], 2
cmp dword [ebp - 0x38], 0x4f5b
jge 0x44d2ee
push dword [ebp - 0x5c]
call fcn.00499a27
pop ecx
jmp 0x44d30a
or dword [ebp - 4], 0xffffffff
jmp 0x44d314
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret