Function at 0x41dda0
Capabilities:
Connect pipe
Read pipe
Write pipe

Disassembly:
sub esp, 0xc
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
push ebx
mov ebx, dword [esp + 0x20]
lea ecx, [eax + 0x612]
add ebx, 0x44
push ebp
push esi
mov esi, dword [esp + 0x20]
lea ebp, [edx + 0x70e]
xor edx, 0x1de6
mov dword [esp + 0xc], ecx
lea ecx, [eax + 0x26d]
add esi, 0xfffffe0a
add eax, 0xffffe8eb
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
push edi
mov edi, dword [esp + 0x38]
lea eax, [edx - 0xad]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov eax, dword [edi + 0xc4]
add eax, dword [edi + 0xc]
xor eax, 0x11d425
sub dword [edi + 0xdc], eax
cmp dword [edi + 0xf0], 0x114d8
jb 0x41de2c
mov eax, dword [edi + 0xa8]
add eax, dword [edi + 0x14]
add dword [0x4ae100], eax
jmp 0x41de3c
imul eax, dword [edi + 0xb0], 0x14e6ad
mov dword [edi + 0xb0], eax
mov eax, dword [0x4ac344]
mov eax, dword [eax + 0x9c]
add eax, 0x18aa13
add dword [edi + 0xb4], eax
cmp dword [edi + 8], 0x170cb
jb 0x41de67
mov dword [edi + 0xf8], 0x3889
jmp 0x41de75
mov eax, dword [edi + 0x78]
xor eax, 0x11f5
mov dword [edi + 0xd4], eax
mov eax, dword [0x4ac344]
mov ecx, 0x12d146
sub ecx, dword [eax + 0x48]
add dword [edi + 0xc0], ecx
cmp ebp, edx
jge 0x41dffb
mov eax, dword [esp + 0x24]
add eax, 0x4d2
cmp esi, eax
jge 0x41def8
mov eax, dword [edi + 0xf8]
sub eax, dword [edi + 8]
sub eax, 0x11ef
add dword [edi + 0xd4], eax
lea eax, [edx + 0x26d]
push eax
mov eax, dword [esp + 0x14]
add eax, 0xfffff134
push eax
lea eax, [ebp + 0xb26]
push eax
lea eax, [ebp + 0x600]
push eax
push edi
call fcn.00405a60
mov eax, dword [0x4ac344]
add esp, 0x14
xor dword [eax + 0xf4], 0x18cd5b
xor ebx, 0x56a
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0xc
ret
mov eax, dword [0x4ac344]
mov ecx, dword [edi + 0x3c]
mov esi, dword [esp + 0x18]
mov edx, dword [edi + 0x10]
mov eax, dword [eax + 0x1c]
xor edx, dword [edi + 0xe4]
and eax, ebp
imul eax, ebp
imul ecx, esi
push eax
lea eax, [esi - 0x10b2]
sub ecx, 0x10b2
push eax
push ecx
push edx
push edi
call fcn.00418cf0
mov edx, dword [0x4ae0b0]
mov esi, eax
mov eax, dword [edi + 0xe4]
sub edx, dword [edi + 0x4c]
and eax, 0x1801
mov ebx, dword [esp + 0x34]
add eax, esi
mov ecx, dword [edi + 0xe0]
and edx, ebx
push edi
push eax
sub ebx, esi
sub ecx, 0x1668
push ebx
push ecx
push edx
call fcn.00405fc0
mov ebx, eax
add esp, 0x28
mov eax, dword [0x4ae130]
mov ecx, ebx
xor ecx, dword [esp + 0x14]
add eax, 0xffffe67e
push ecx
mov ecx, ebp
xor ecx, 0x1668
push ecx
mov ecx, dword [esp + 0x28]
and ecx, dword [esp + 0x1c]
add ecx, ebx
push ecx
mov ecx, dword [esp + 0x30]
push eax
mov eax, dword [edi + 0xb0]
sub eax, dword [0x4ae084]
push eax
mov eax, dword [edi + 0x4c]
and eax, ecx
xor ecx, 0xd19
or eax, 0x10b2
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CallNamedPipeA]
mov eax, dword [0x4ae0ac]
sub eax, dword [esp + 0x24]
push eax
mov eax, dword [edi + 0x50]
xor eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_DeactivateActCtx]
mov eax, dword [esp + 0x20]
xor ebp, esi
add eax, ebx
sub ebp, ebx
or eax, 0x1715
push eax
mov eax, dword [edi + 0x4c]
and eax, dword [esp + 0x14]
push edi
push ebp
push eax
mov eax, dword [0x4ae0a4]
imul eax, dword [esp + 0x24]
push eax
call fcn.0041a550
add esp, 0x14
pop edi
pop esi
xor ebx, 0x56a
pop ebp
mov eax, ebx
pop ebx
add esp, 0xc
ret