Function at 0x10041b8e
Capabilities:
Create pipe
Set environment variable

Disassembly:
mov eax, 0x100604ef
call fcn.1005f330
sub esp, 0xac
push ebx
mov eax, ecx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [eax], 0
mov dword [ebp - 0x38], eax
je 0x10042110
push dword [eax]
xor ebx, ebx
push ebx
push dword [eax + 4]
call fcn.1003a755
xor edi, edi
mov dword [ebp - 0x18], 0x8ac
add esp, 0xc
inc edi
cmp dword [ebp - 0x18], 0xb91
jle 0x10041c37
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
xor eax, ecx
lea ecx, [ebp - 0xa0]
xor eax, esi
cdq
push edx
push eax
call fcn.1000d7c0
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10041bfd
mov eax, dword [eax]
push eax
call fcn.1004a056
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xa0]
call fcn.1002e510
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x7466
jl 0x10041be1
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x2e34
jl 0x10041bdc
inc esi
cmp esi, 0x733a
jl 0x10041bd7
cmp dword [ebp - 0x18], 0x6ef
jge 0x10041c4b
push 0x1000bb84
call fcn.1004a056
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
push 3
call fcn.1002e184
push 3
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 2
call fcn.1002e184
mov byte [ebp - 4], 3
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x24], 0xb779
mov dword [ebp - 0x20], 0x7d90
cmp dword [ebp - 0x20], 0x8062
jle 0x10041ce1
push ebx
push 0x24c0
push 0xa75
push 0x46d
push 0x15d2
push 0x26b0
push 0x1c0d
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov esi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [ebx + esi]
mov ecx, 0x106092f8
cdq
push edx
push eax
call fcn.1002e06f
inc ebx
cmp ebx, 0x2889
jl 0x10041cbc
inc esi
push 0
pop ebx
cmp esi, 0x495b
jl 0x10041cb9
mov byte [ebp - 4], 4
cmp dword [ebp - 0x20], 0x7a85
jge 0x10041d1e
mov edx, 0x1000bbc8
mov ecx, 0x106092f8
call fcn.1002fb19
jmp 0x10041d1e
mov dword [ebp - 0x14], ebx
jmp 0x10041d33
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0xff0ea75c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10041d23
mov dword [ebp - 0x14], ebx
jmp 0x10041d4e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10041d3e
mov eax, dword [ebp - 0x50]
mov dword [eax], 2
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x30], 0xb4b13281
mov dword [ebp - 0x30], 0xffffffff
cmp dword [eax + ecx*4], ebx
jne 0x10041d7f
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
dec dword [eax]
jns 0x10041d5d
lea ecx, [ebp - 0x50]
call fcn.1002e206
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.1002e206
mov eax, dword [ebp - 0x38]
push dword [eax + 4]
call fcn.1004a1c7
pop ecx
push 3
lea ecx, [ebp - 0x5c]
call fcn.1002e184
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], ebx
jmp 0x10041dc8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5c]
mov dword [eax + ecx*4], 0xf70ad6f2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10041db8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10041ddd
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10041f45
mov dword [ebp - 0x14], 0xfb770a77
jne 0x10041f45
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jg 0x10041ea6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10041e18
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [ebp - 0x28], 0x15bc
cmp dword [ebp - 0x28], 0x1998
jle 0x10041e78
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x69a8
mov dword [ebp - 0x20], eax
cdq
lea ecx, [ebp - 0xb8]
push edx
push eax
call fcn.1000d7c0
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10041e4e
mov eax, dword [eax]
push eax
call fcn.1004a056
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xb8]
call fcn.1002e510
mov eax, dword [ebp - 0x20]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
jne 0x10041e36
inc esi
cmp esi, 0x5f7c
jl 0x10041e2a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
cmp dword [eax + ecx*4], ebx
jne 0x10041ea6
cmp dword [ebp - 0x28], 0x11f0
jge 0x10041e97
push 0x1000bc20
call fcn.1004a056
pop ecx
mov dword [ebp - 4], 6
inc dword [ebp - 0x14]
jmp 0x10041dfd
mov dword [ebp - 0x20], 0x73ee
cmp dword [ebp - 0x20], 0x778d
jle 0x10041edf
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x106092f8
cdq
push edx
push eax
call fcn.1002e06f
inc edi
cmp edi, 0x4189
jl 0x10041eba
inc esi
cmp esi, 0x6619
jl 0x10041eb8
xor edi, edi
inc edi
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x10041ef9
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
jns 0x10041eeb
mov byte [ebp - 4], 9
cmp dword [ebp - 0x20], 0x703a
jge 0x10041f36
mov edx, 0x1000bc44
mov ecx, 0x106092f8
call fcn.1002fb19
jmp 0x10041f36
mov dword [ebp - 4], 6
dec dword [ebp - 0x18]
jmp 0x10041de4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.1002e206
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x44]
push dword [ebp - 0x30]
movdqa xmm0, xmmword [0x1000c380]
movdqu xmmword [ebp - 0x88], xmm0
mov dword [eax + 4], ebx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x88]
mov dword [ebp - 0x44], ebx
push eax
push ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
call fcn.10030038
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0xe71b35d5
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x30], 0x637eac69
mov dword [ebp - 0x34], 0xecdcc21d
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1004201e
mov dword [ebp - 0x18], 0xffffffff
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + ecx*4]
xor ecx, ecx
mov dword [esi + edi*4], eax
mov eax, dword [ebp - 0x18]
test eax, eax
setns cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [esi + edi*4]
setg dl
sub eax, edx
add eax, 0x74b1b055
je 0x10042007
cmp dword [ebp - 0x24], ebx
je 0x10042007
xor edi, edi
inc edi
mov edx, edi
jmp 0x1004200c
xor edi, edi
mov edx, ebx
inc edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0x14]
jns 0x10041fb6
mov dword [ebp - 0x14], ebx
jmp 0x100420f9
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x100420bd
mov esi, dword [ebp - 0x14]
mov ecx, 0xffff
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x44]
sub ecx, dword [edx + eax*4]
xor eax, eax
cmp ecx, edi
setg al
xor ecx, ecx
cmp dword [edx + esi*4], eax
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, 0x3b9c
je 0x10042085
mov edx, edi
cmp dword [ebp - 0x24], ebx
jne 0x10042087
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x44]
cmp dword [eax + ecx*4], ebx
je 0x100420a2
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
sub eax, 0x2ffa36fe
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x18]
jns 0x10042042
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, 6
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub ecx, 0x4cb1b5ad
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x10042026
lea ecx, [ebp - 0x44]
call fcn.1002e206
mov eax, dword [ebp - 0x38]
mov dword [eax], ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret