Function at 0x41db46
Capabilities:
Create pipe

Disassembly:
push 4
mov eax, 0x42f596
call fcn.004225fb
mov ebx, ecx
mov dword [ebp - 0x10], ebx
mov dword [ebx], vtable.WinNamedPipe.0
xor ecx, ecx
mov dword [ebx + 4], vtable.pt_mp_c.0
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
lea eax, [ebx + 0xe4]
mov dword [ebp - 4], ecx
mov dword [eax], vtable.ptsync_pin_c.0
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov esi, 0x434038
mov byte [ebp - 4], 1
lea edi, [ebx + 0x38]
push 4
pop edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, byte [ebx + 0x39]
lea edi, [ebx + 0x4c]
mov word [ebx + 0x30], cx
add ax, dx
mov dword [ebx + 0x34], 0xc0000000
mov esi, 0x43402c
shl ax, 2
mov word [ebx + 0x32], ax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, byte [ebx + 0x4d]
lea edi, [ebx + 0x60]
add ax, dx
mov word [ebx + 0x44], 1
shl ax, 2
mov esi, 0x434020
mov word [ebx + 0x46], ax
mov dword [ebx + 0x48], 0x10000000
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, byte [ebx + 0x61]
lea edi, [ebx + 0x74]
add ax, dx
mov word [ebx + 0x58], cx
shl ax, 2
mov esi, 0x434044
mov word [ebx + 0x5a], ax
mov eax, dword [ebp + 0xc]
and al, dl
movsx eax, al
neg eax
sbb eax, eax
and eax, 0xc0000000
mov dword [ebx + 0x5c], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movzx eax, byte [ebx + 0x75]
mov esi, 0xc0000000
add ax, dx
mov word [ebx + 0x6c], cx
shl ax, 2
test byte [ebp + 0xc], 1
mov word [ebx + 0x6e], ax
lea eax, [ebx + 0x8c]
mov dword [ebx + 0x70], esi
push eax
je 0x41dc47
call fcn.0041dfad
jmp 0x41dc4c
call fcn.0041dfe1
movzx eax, byte [ebx + 0x8d]
pop ecx
push 4
pop ecx
add ax, cx
mov dword [ebx + 0x88], esi
shl ax, 2
lea esi, [ebx + 0x28]
push 5
push esi
mov word [ebx + 0x84], 0
mov word [ebx + 0x86], ax
call fcn.0041e630
lea ecx, [ebx + 0x14]
xor eax, eax
mov edi, ecx
push 4
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ecx + 0x10], esi
lea esi, [ebx + 0xd0]
mov byte [ecx], 1
mov edi, esi
pop eax
push dword [ebp + 8]
mov word [ecx + 2], ax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [esi], 0xc
mov dword [ebx + 0xd4], ecx
mov dword [ebx + 0xdc], 1
mov dword [ebx + 0xe0], edi
call fcn.00413a90
add esp, 0xc
test eax, eax
je 0x41dcd6
mov eax, edi
jmp 0x41dcea
push dword [ebp + 8]
lea eax, [ebx + 4]
push str..pipe
push eax
call fcn.0041468e
add esp, 0xc
or dword [ebx + 0x100], 0xffffffff
mov dword [ebx + 0x10], eax
mov dword [ebx + 0xfc], edi
call fcn.0040fa17
mov dword [ebx + 0xf8], eax
test eax, eax
je 0x41dd18
lea ecx, [ebx + 0xe4]
push ecx
push eax
call fcn.0040f97f
pop ecx
pop ecx
cmp dword [ebx + 0xf8], edi
je 0x41dd5f
cmp dword [ebx + 0x10], edi
je 0x41dd5f
push esi
push 0x1388
mov eax, 0x8000
push eax
push eax
push 0xff
push edi
push 0x40080003
push dword [ebx + 0x10]
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebx + 0x100], eax
cmp eax, 0xffffffff
jne 0x41dd69
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 0xe0], eax
jmp 0x41dd69
mov dword [ebx + 0xe0], 0xe
mov eax, ebx
call fcn.004225d8
ret 8