Function at 0x1004c4be
Capabilities:
Create pipe
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100867fa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
mov dword [esp + 0x3c], edx
xor eax, eax
push ebx
mov dword [esp + 8], 0xfcb50bf3
inc eax
push esi
or esi, 0xffffffff
mov dword [esp + 0x24], esi
mov dword [esp + 0x24], 0x7b051af7
mov dword [esp + 0x24], esi
mov dword [esp + 0x24], eax
push edi
mov edi, ecx
mov dword [esp + 0x28], 9
mov dword [esp + 0x28], eax
lea ecx, [esp + 0xb8]
mov dword [esp + 0x28], 0x6e74e800
push 3
call fcn.100289a7
xor ebx, ebx
mov dword [esp + 0xec], ebx
mov dword [esp + 0x14], 0xfffffff6
mov dword [esp + 0x40], ebx
jmp 0x1004c553
mov eax, dword [esp + 0x40]
mov dword [esp + eax*4 + 0x64], 7
inc dword [esp + 0x40]
cmp dword [esp + 0x40], 3
jl 0x1004c543
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x44]
push ebx
push eax
call fcn.1004f9d3
mov dword [esp + 0x1c], 2
add esp, 0xc
cmp dword [esp + 0x10], ebx
jl 0x1004c5f1
mov dword [esp + 0x18], 0xe864896e
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + eax*4 + 0x64]
mov eax, dword [esp + 0x10]
imul ecx, dword [esp + eax*4 + 0x64]
test ecx, ecx
jne 0x1004c5a3
mov eax, dword [esp + 0x10]
mov eax, dword [esp + eax*4 + 0x64]
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x64]
cmp eax, 0x71dfd947
sete cl
cmp ecx, esi
sbb eax, eax
neg eax
imul eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], bl
je 0x1004c5eb
push 0xb9b
push 0xa3c
push 0x27f9
push ebx
push 0x5c80
call fcn.1004f757
add esp, 0x14
dec dword [esp + 0x10]
jns 0x1004c57e
dec dword [esp + 0x14]
lea ecx, [esp + 0xb8]
mov dword [esp + 0xec], esi
call fcn.10028a59
push 0xfffffffffffffff7
mov dword [esp + 0x20], 0xe8cff0ea
lea ecx, [esp + 0x54]
pop esi
mov dword [esp + 0x20], 0x8999d94b
mov dword [esp + 0x2c], 1
mov dword [esp + 0x10], esi
push 2
call fcn.100289a7
xor edx, edx
inc edx
mov dword [esp + 0xec], edx
mov dword [esp + 0x24], 0x38140a97
mov dword [esp + 0x28], 0xa600
mov dword [esp + 0x18], ebx
jmp 0x1004c665
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x50]
mov dword [eax + ecx*4], 0x5741311e
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x1004c652
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x1c], esi
jne 0x1004c696
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1004c689
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
je 0x1004c676
xor edx, edx
inc edx
cmp dword [esp + 0x1c], ebx
jne 0x1004c71b
cmp dword [esp + 0x20], ebx
jne 0x1004c6a6
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x10], ebx
jne 0x1004c71b
mov dword [esp + 0x24], ebx
jmp 0x1004c6e3
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x50]
cmp dword [eax + ecx*4], ebx
jne 0x1004c6e9
inc dword [esp + 0x24]
cmp dword [esp + 0x24], edx
jle 0x1004c6d2
xor esi, esi
mov dword [esp + 0x20], ebx
inc esi
cmp dword [esp + 0x20], edx
jg 0x1004c87a
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [esp + 0x20]
cmp dword [esp + 0x20], esi
jle 0x1004c6fa
jmp 0x1004c87a
mov dword [esp + 0x18], 0x846b51f0
lea ecx, [esp + 0x88]
mov dword [esp + 0x14], 0x336
push edx
call fcn.100289a7
xor edx, edx
mov dword [esp + 0x10], ebx
inc edx
jmp 0x1004c757
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x88]
mov dword [eax + ecx*4], 0x9242039c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1004c741
mov dword [esp + 0x10], edx
cmp dword [esp + 0x10], ebx
jl 0x1004c7d5
mov dword [esp + 0x1c], 8
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, dword [eax + ecx*4]
xor ecx, ecx
mov dword [edx + esi*4], eax
mov eax, dword [esp + 0x18]
cmp eax, 0x2803
setge cl
imul ecx, dword [edx + esi*4]
test ecx, ecx
je 0x1004c7a6
cmp dword [esp + 0x14], ebx
je 0x1004c7a6
xor edx, edx
inc edx
jmp 0x1004c7a8
mov edx, ebx
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
cmp edx, eax
setge cl
mov dword [esp + 0x1c], ecx
dec dword [esp + 0x10]
jns 0x1004c767
mov ecx, dword [esp + 0x14]
xor edx, edx
mov eax, dword [esp + 0x18]
cmp ecx, eax
setne dl
mov dword [esp + 0x1c], edx
xor edx, edx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
cmp esi, ecx
mov eax, dword [esp + 0x88]
setg dl
mov dword [eax], esi
mov eax, dword [esp + 0x50]
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [esp + 0x18]
cmp edx, eax
setle cl
add ecx, dword [esp + 0x2c]
add ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
neg ecx
mov dword [esp + 0x2c], ecx
xor ecx, ecx
cmp dword [esp + 0x2c], eax
mov eax, dword [esp + 0x14]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor esi, esi
imul ecx, dword [esp + 0x24]
inc esi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
dec dword [esp + 0x24]
cmp eax, ecx
mov eax, esi
jne 0x1004c86a
mov eax, ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x20], eax
call fcn.10028a59
or dword [esp + 0xec], 0xffffffff
lea ecx, [esp + 0x50]
call fcn.10028a59
cmp dword [edi + 0x10], ebx
jne 0x1004c897
xor al, al
jmp 0x1004cef5
lea eax, [esp + 0x48]
mov edx, 0x511
push eax
push ebx
mov ecx, 0x37d5
call fcn.1004bf71
pop ecx
mov dword [esp + 0x1c], 0xfffffff8
pop ecx
mov dword [esp + 0x18], ebx
jmp 0x1004c918
push esi
lea ecx, [esp + 0xb0]
call fcn.100289a7
mov dword [esp + 0x60], 8
mov dword [esp + 0x14], ebx
jmp 0x1004c8ed
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], 0xaa9ac70c
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1004c8d7
mov eax, dword [esp + 0xac]
lea ecx, [esp + 0xac]
or dword [esp + 0xec], 0xffffffff
mov dword [eax], 0xffffffe9
call fcn.10028a59
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffffe
jge 0x1004c8bc
mov dword [esp + 0x20], 0xfb0b0297
mov dword [esp + 0x18], esi
mov dword [esp + 0x28], 0xb817
mov dword [esp + 0x14], ebx
jmp 0x1004c949
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x30], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1004c939
mov dword [esp + 0x20], ebx
jmp 0x1004cb2a
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], 0xfffffff9
mov dword [esp + 0x14], 0x734bd47c
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x20]
imul ecx, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x20]
sub ecx, dword [esp + eax*4 + 0x30]
add ecx, 0xd606
mov dword [esp + 0x24], ecx
xor ecx, ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp eax, 0xe215
mov eax, 0xf1a969ac
setge cl
cmp eax, ecx
mov eax, dword [esp + 0x20]
sbb ecx, ecx
neg ecx
imul ecx, dword [esp + eax*4 + 0x30]
xor eax, eax
cmp ecx, 0x237f
setne al
xor edx, edx
add eax, 0x17a84e60
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0x30]
cmp dword [esp + 0x28], eax
mov eax, dword [esp + 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
neg ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x20]
inc ecx
imul ecx, dword [esp + eax*4 + 0x30]
mov eax, dword [esp + 0x20]
add ecx, dword [esp + eax*4 + 0x30]
je 0x1004caa5
mov dword [esp + 0x2c], 0x1a6f
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jl 0x1004ca98
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], ebx
jmp 0x1004ca84
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x28], 0x6ac39b39
mov dword [esp + 0x10], ebx
jmp 0x1004ca76
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1004ca72
call dword [sym.imp.USER32.dll_WaitMessage]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jle 0x1004ca61
inc dword [esp + 0x2c]
inc dword [esp + 0x24]
cmp dword [esp + 0x24], ebx
jle 0x1004ca4b
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], eax
dec dword [esp + 0x18]
jns 0x1004ca41
mov dword [esp + 0x24], 0xfffffff8
jmp 0x1004cb26
push dword [esp + 0x60]
movdqa xmm0, xmmword [0x10008140]
lea eax, [esp + 0xe4]
push eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x78], ebx
push eax
push ebx
lea ecx, [esp + 0x80]
mov dword [esp + 0x84], ebx
movdqu xmmword [esp + 0xe0], xmm0
mov dword [esp + 0x88], ebx
call fcn.10029bcb
cmp dword [esp + 0x14], esi
je 0x1004caf7
mov eax, ebx
cmp dword [esp + 0x14], ebx
je 0x1004caf9
mov eax, esi
mov dword [esp + 0x24], eax
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1004cb1d
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
lea ecx, [esp + 0x70]
call fcn.10028a59
inc dword [esp + 0x20]
cmp dword [esp + 0x20], ebx
jle 0x1004c958
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1004cb65
push ebx
push 0x1b90
push 0x676
push 0x269
push 0xd19
push 0x1b26
push 0x1703
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
cmp dword [edi + 0x14], 0x10
jb 0x1004cb6f
mov ecx, dword [edi]
jmp 0x1004cb71
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [esp + 0x44], ecx
jb 0x1004cb7f
mov edx, dword [edi]
jmp 0x1004cb81
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x1004ce67
mov dword [esp + 0x14], 0xaea0a9f4
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x28], 0x69a75015
mov dword [esp + 0x1c], ebx
jmp 0x1004cbbc
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x34], 0x5872
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jl 0x1004cbac
mov dword [esp + 0x1c], ebx
jmp 0x1004cbd9
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x7c], 0xfffffff8
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jl 0x1004cbc9
mov eax, dword [esp + 0x38]
xor ecx, ecx
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x38]
cmp eax, 0x87a5
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
setge cl
sub ecx, eax
xor eax, eax
cmp ecx, 0x4c5530c4
setle al
xor ecx, ecx
imul edx, eax
mov eax, dword [esp + 0x38]
cmp edx, eax
setle cl
xor edx, edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x38]
imul eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x38]
cmp ecx, eax
setle dl
cmp edx, dword [esp + 0x38]
jle 0x1004cc78
mov ecx, esi
cmp dword [esp + 0x14], ebx
jne 0x1004cc7a
mov ecx, ebx
mov eax, dword [esp + 0x34]
sub ecx, eax
je 0x1004cc8a
mov eax, esi
cmp dword [esp + 0x38], ebx
jne 0x1004cc8c
mov eax, ebx
xor edx, edx
cmp eax, 0xe4f
mov eax, dword [esp + 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x44]
mov al, byte [eax]
cmp al, 0x30
jl 0x1004ccda
cmp al, 0x39
jg 0x1004ccda
push 0x26c3
push esi
lea edx, [esp + 0x50]
lea ecx, [esp + 0x4c]
call fcn.1004bf71
pop ecx
pop ecx
mov ecx, dword [esp + 0x44]
inc ecx
jmp 0x1004cb71
push 3
lea ecx, [esp + 0xa4]
call fcn.100289a7
push 2
lea ecx, [esp + 0xc8]
mov dword [esp + 0xf0], 4
call fcn.100289a7
mov byte [esp + 0xec], 5
mov dword [esp + 0x1c], ebx
jmp 0x1004cd25
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xa0]
mov dword [eax + ecx*4], 0x2e91a049
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jl 0x1004cd0f
mov dword [esp + 0x1c], ebx
jmp 0x1004cd48
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xc4]
mov dword [eax + ecx*4], 0xa39ed080
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jl 0x1004cd32
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1004cd61
push ebx
call fcn.1004ffcb
pop ecx
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xc4]
mov dword [eax + 4], 0xffffffed
call fcn.10028a59
or dword [esp + 0xec], 0xffffffff
lea ecx, [esp + 0xa0]
call fcn.10028a59
lea eax, [esp + 0x48]
push eax
push ebx
call fcn.10050183
mov dword [esp + 0x44], 0xac204e2d
mov dword [esp + 0x30], 0xffffffff
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
pop ecx
pop ecx
je 0x1004cdc4
push 0x3a10
push ebx
call fcn.1005070c
pop ecx
pop ecx
mov dword [esp + 0x3c], 0xffffffeb
jmp 0x1004ce57
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x1004ce13
lea eax, [esp + 0x3c]
mov dword [esp + 0x4c], 0xbea1
push eax
push ebx
push 0x74ff
lea eax, [esp + 0x58]
push 0x700b
push eax
call fcn.1004cf48
lea eax, [esp + 0x60]
push eax
push ebx
call fcn.1004f615
add esp, 0x1c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0xe
jl 0x1004cddf
cmp dword [esp + 0x10], ebx
jne 0x1004ce43
cmp dword [esp + 0x3c], ebx
je 0x1004ce47
mov edx, dword [esp + 0x10]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 0x3c]
neg edx
push 7
pop ecx
sub ecx, eax
cmp ecx, edx
je 0x1004ce47
cmp dword [esp + 0x10], ebx
je 0x1004ce47
mov ecx, esi
jmp 0x1004ce49
mov ecx, ebx
mov eax, dword [esp + 0x10]
add eax, ecx
mov dword [esp + 0x28], eax
inc dword [esp + 0x3c]
cmp dword [esp + 0x3c], 0xfffffff6
jg 0x1004cdd1
jmp 0x1004c890
mov dword [esp + 0x18], 8
mov dword [esp + 0x14], ebx
jmp 0x1004ce85
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x5c], 1
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jl 0x1004ce75
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x18], 0xfffffffb
jmp 0x1004ceec
push 1
lea ecx, [esp + 0x98]
call fcn.100289a7
mov dword [esp + 0x14], ebx
jmp 0x1004cec8
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x94]
mov dword [eax + ecx*4], 0x2a1836cc
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jl 0x1004ceb2
mov ecx, dword [esp + 0x94]
mov dword [ecx], 0xfffffff3
lea ecx, [esp + 0x94]
call fcn.10028a59
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x18
jge 0x1004ce9e
mov al, 1
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret