Function at 0x441ca0
Capabilities:
Create pipe
Create process on windows
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x480
mov eax, dword [0x4c7650]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x3ff
lea eax, [ebp - 0x407]
push 0
push eax
mov byte [ebp - 0x408], 0
call fcn.0047d070
add esp, 0xc
push 0
lea ecx, [ebp - 0x434]
push ecx
lea edx, [ebp - 0x414]
push edx
lea eax, [ebp - 0x410]
push eax
mov dword [ebp - 0x434], 0xc
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 1
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x441d3d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreatePipe___failure__error__ld_n
mov edi, 0x4e2c64
call fcn.00441fe0
add esp, 8
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004799e1
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x410]
push 0
push 1
push ecx
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 0x44
lea edx, [ebp - 0x480]
push 0
push edx
call fcn.0047d070
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
add esp, 0xc
push 0xfffffffffffffff6
mov dword [ebp - 0x480], 0x44
call esi
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x414]
push 0xfffffffffffffff4
mov dword [ebp - 0x444], eax
call esi
mov edx, dword [0x4e2988]
push 0x3ff
lea ecx, [ebp - 0x408]
mov dword [ebp - 0x440], eax
xor eax, eax
push ecx
push edx
mov dword [ebp - 0x454], pe_nt_image_headers32
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x408]
push 0x5c
push eax
call fcn.0047e6d0
mov ecx, dword [str.fsadb.exe]
mov dword [eax + 1], ecx
mov edx, dword [0x4ac448]
add esp, 8
mov dword [eax + 5], edx
mov cx, word [0x4ac44c]
mov word [eax + 9], cx
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0x480]
push eax
push 0
push 0
push 8
push 1
push 0
push 0
push str.adb_fork_server_server
lea ecx, [ebp - 0x408]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x441e65
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateProcess_failure__error__ld_n
mov edi, 0x4e2c64
call fcn.00441fe0
mov edx, dword [ebp - 0x410]
add esp, 8
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004799e1
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x428]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x424]
push ecx
call esi
mov ecx, dword [ebp - 0x410]
push 0
lea edx, [ebp - 0x418]
push edx
push 3
lea eax, [ebp - 0x40c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp - 0x410]
push edx
mov edi, eax
call esi
mov eax, dword [ebp - 0x414]
push eax
call esi
test edi, edi
jne 0x441ee0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.could_not_read_ok_from_ADB_Server__error___ld_n
mov edi, 0x4e2c64
call fcn.00441fe0
add esp, 8
or eax, 0xffffffff
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004799e1
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x418], 3
jne 0x441f16
cmp byte [ebp - 0x40c], 0x4f
jne 0x441f16
cmp byte [ebp - 0x40b], 0x4b
jne 0x441f16
cmp byte [ebp - 0x40a], 0xa
jne 0x441f16
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004799e1
mov esp, ebp
pop ebp
ret
push str.ADB_server_didnt_ACK_n
mov edi, 0x4e2c64
call fcn.00441fe0
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
xor ecx, ebp
or eax, 0xffffffff
pop esi
call fcn.004799e1
mov esp, ebp
pop ebp
ret