Function at 0x10046c3c
Capabilities:
Connect pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
mov dword [ebp - 0x18], 0xffffffff
mov esi, ecx
push 3
mov dword [ebp - 0xc], 0xffffffff
xor ebx, ebx
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 8], ebx
jmp 0x10046c76
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x2c], 6
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x10046c68
mov dword [ebp - 8], ebx
jmp 0x10046c8e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], 0xa6aed1d2
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x10046c80
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setge dl
test edx, edx
jne 0x10046cdd
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
jmp 0x10046ceb
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046ceb
call dword [sym.imp.KERNEL32.dll_GetACP]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046cfa
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push 1
push esi
call fcn.1004185c
mov dword [ebp - 0x18], 0x8261f9c2
mov byte [ebp - 1], bl
pop ecx
pop ecx
cmp byte [ebp - 1], bl
je 0x10046d1b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046d39
push 0x220f
push 0xdeb
push 0x1ae8
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push esi
call fcn.1002d0fd
mov dword [ebp - 8], 0x8bd4dfbd
mov esi, eax
mov dword [ebp - 0x14], 0xd20b50f6
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x18], 0x6ea4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
neg edx
pop ecx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
add ecx, 0xbebf
je 0x10046df2
mov dword [ebp - 8], 0xacd4
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 8], ebx
je 0x10046d96
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
jmp 0x10046e32
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x18], 0x76dbd8d4
mov dword [ebp - 0xc], ebx
jmp 0x10046db3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x20], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x10046da9
mov dword [ebp - 8], ebx
jmp 0x10046ddb
mov dword [ebp - 0x18], 0x41536c74
mov dword [ebp - 0x20], ebx
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046dd8
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff1
je 0x10046dbe
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046e32
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x10046e32
mov dword [ebp - 0xc], 7
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10046e08
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0xc], ebx
je 0x10046e19
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
xor eax, eax
cmp ecx, 0x3330
setne al
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret