Function at 0x40ac1d
Capabilities:
Create pipe
Create two anonymous pipes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov ebx, dword [0x42b318]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x42b318]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x42b318]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x42b318]
push 0x42b308
push 0x42b320
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40aca4
push 6
call fcn.00410fcd
add esp, 4
mov dword [0x42b31c], eax
mov ebx, dword [0x42b324]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x42b324]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x42b324]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x42b324]
push 0x42b330
push 0x42b32c
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40ad19
push 6
call fcn.00410fcd
add esp, 4
mov dword [0x42b328], eax
cmp dword [0x42b32c], 0
je 0x40ad3c
cmp dword [0x42b308], 0
je 0x40ad3c
xor eax, eax
jmp 0x40ad41
mov eax, 1
test eax, eax
je 0x40ad4e
jmp 0x40af16
mov ebx, dword [0x42b334]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x44
mov dword [ebp - 0xc], esp
push dword [0x42b334]
call dword [0x42b41c]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40ad85
push 6
call fcn.00410fcd
add esp, 4
mov ebx, dword [0x42b334]
add ebx, 0x3c
mov dword [ebp - 0xc], ebx
mov eax, dword [0x42b330]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x42b334]
add ebx, 0x40
mov dword [ebp - 0xc], ebx
mov eax, dword [0x42b330]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x42b334]
add ebx, 0x38
mov dword [ebp - 0xc], ebx
mov eax, dword [0x42b320]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x42b334]
add ebx, 0x30
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov ebx, dword [0x42b334]
add ebx, 0x2c
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x101
mov dword [ebp - 0xc], esp
push dword [0x42b338]
push dword [0x42b334]
push 0
push 0
push 0
push 1
push 0
push 0
push str.cmd.exe
push 0
call dword [0x42b420]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40ae44
push 6
call fcn.00410fcd
add esp, 4
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 0x1000
push 1
mov ebx, 0x1bc
call fcn.00411db0
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [0x42b33c]
test ebx, ebx
je 0x40ae7f
push ebx
call fcn.00410fdf
add esp, 4
pop eax
mov dword [0x42b33c], eax
mov ebx, dword [0x42b338]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x42b304], eax
mov ebx, dword [0x42b338]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x42b340], eax
mov ebx, dword [0x42b338]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x42b344], eax
mov ebx, dword [0x42b338]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x42b348], eax
mov dword [ebp - 0xc], esp
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x40b0c7
push 0
push 0
call dword [0x42b39c]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x40af16
push 6
call fcn.00410fcd
add esp, 4
mov esp, ebp
pop ebp
ret