Function at 0x41a3f3
Capabilities:
Create pipe

Disassembly:
push ecx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ecx, edx
push ebx
push ebp
lea ebp, [eax - 0x317e]
xor ecx, 0x137
lea ebx, [eax + 0xa8]
mov dword [esp + 0x10], ebp
lea ebp, [eax + 0x5db]
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x20]
xor edx, 0x161
push esi
mov esi, dword [esp + 0x20]
add eax, 0xffffc8b4
push edi
mov edi, dword [esp + 0x2c]
add esi, 0xffffce82
mov dword [esp + 0x24], eax
xor edi, 0x405c
lea eax, [ebx + 0xe36]
mov dword [esp + 0x2c], esi
cmp esi, eax
mov dword [esp + 0x20], edx
mov esi, dword [esp + 0x30]
jge 0x41a5fc
mov eax, dword [0x70c18c]
xor edx, edx
push 0x10
xor edi, 0x317e
sub ebp, 0x624
mov dword [eax + 4], 1
xor eax, eax
inc eax
mov dword [esi + 0x2c], edx
mov dword [esi + 0x44], eax
mov dword [esi + 0xc], edx
mov dword [esi + 0x24], 0xe
mov dword [esi + 0x30], edx
mov dword [esi + 0x38], 0x61
mov dword [0x72a228], edx
mov dword [esi + 0x60], 0x42
mov dword [0x72a240], 2
mov dword [esi + 0x74], eax
mov dword [0x72a24c], edx
mov dword [esi + 0x80], edx
pop eax
mov dword [0x72a254], eax
mov dword [esi + 0x94], eax
xor eax, eax
inc eax
mov dword [esi + 0x8c], edx
mov dword [esi + 0x9c], 0x46
mov dword [esi + 0xa4], edx
mov dword [0x72a284], edx
mov dword [esi + 0xc0], eax
mov dword [esi + 0xf8], eax
mov dword [esi + 0xfc], eax
mov dword [esi + 0xd8], edx
mov dword [esi + 0xe4], 0xd
mov dword [esi + 0xe8], edx
mov eax, dword [0x70c18c]
mov dword [eax + 0x100], 0x4c
xor eax, eax
inc eax
mov dword [esi + 0x10c], edx
mov dword [0x72a2e0], 0x13
cmp dword [esi + 0x2c], 0x15341
mov dword [esi + 0x120], eax
mov dword [esi + 0x128], edx
mov dword [esi + 0x134], eax
jne 0x41a565
mov eax, dword [esi + 0xf8]
xor eax, dword [esi + 0x74]
xor eax, 0x16776
mov dword [esi + 0x74], eax
jmp 0x41a576
mov eax, dword [esi + 0xd8]
add eax, 0x15ed16
xor dword [0x72a244], eax
mov eax, dword [0x70c18c]
cmp dword [eax + 0xf8], 0x1b39
jae 0x41a595
mov eax, dword [eax + 0xb4]
add eax, 0x1ba8b7
xor dword [esi + 0x44], eax
mov eax, ebp
xor eax, 0x31b
push eax
lea eax, [edi + 0x5ce]
push eax
lea eax, [ebp + 0xf1]
push eax
push ecx
push esi
call fcn.0040c240
mov edi, eax
mov eax, ebx
xor eax, 0xa29
push eax
lea eax, [ebx + 0x5e9]
push eax
lea eax, [edi - 0x6c4]
push eax
lea eax, [ebp + 0x80b]
push eax
mov eax, dword [esp + 0x3c]
add eax, 0x356d
push eax
mov eax, dword [esp + 0x38]
add eax, 0x682
push eax
push dword [0x70c18c]
call fcn.0041c428
mov edx, dword [esp + 0x50]
add esp, 0x30
jmp 0x41a6c6
mov eax, dword [esp + 0x2c]
add eax, ecx
cmp ecx, eax
je 0x41a6c6
mov eax, dword [esp + 0x18]
add eax, 0xffffc516
cmp dword [0x72a250], eax
jbe 0x41a6c6
mov eax, ebp
imul eax, ecx
push eax
mov eax, dword [esi + 0xe4]
and eax, 0x374c
push eax
mov eax, dword [esi + 4]
xor eax, 0x356d
sub eax, 0x32fb
push eax
mov eax, ebx
xor eax, 0x32fb
push eax
mov eax, edx
mov edx, 0x3226
or eax, edx
push eax
mov eax, dword [esp + 0x2c]
xor eax, edx
imul eax, eax, 0x3aea
push eax
mov eax, dword [0x72a2c8]
sub eax, ecx
push eax
mov eax, dword [0x70c18c]
mov eax, dword [eax + 0x74]
and eax, dword [esi + 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov eax, dword [esi + 0x84]
xor eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
and eax, edx
or ebp, eax
mov eax, dword [0x70c18c]
mov eax, dword [eax + 0x120]
xor eax, dword [esi + 0x64]
xor eax, ebx
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x24]
imul eax, dword [esi + 0x8c]
sub dword [esi + 0x110], eax
mov eax, dword [esi + 0x44]
xor eax, 0x3940
mov dword [esi + 0x74], eax
mov eax, dword [esp + 0x24]
or eax, ebx
add eax, dword [esi + 0x2c]
xor edx, eax
mov eax, ebp
xor eax, 0x313
cmp edx, eax
jl 0x41a70b
mov eax, dword [esp + 0x18]
push ebp
push esi
push ebp
add eax, 0x3efe
push eax
lea eax, [edi + 0x5d]
xor edi, 0x1b2
push eax
push edi
call fcn.0040f8c0
add esp, 0x18
add ebx, 0x659
cmp dword [0x72a264], 0x49ba
ja 0x41a70b
mov ecx, dword [esi]
sub dword [0x72a298], ecx
pop edi
pop esi
xor ebx, 0x901
pop ebp
mov eax, ebx
pop ebx
pop ecx
ret