Function at 0x481020
Capabilities:
Access peb ldr_data
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fa72f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb4
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [edi], esi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
call fcn.00481e00
mov dword [edi + 4], eax
lea ebx, [edi + 0xc]
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov word [ebx], ax
mov byte [ebp - 4], 1
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], eax
mov dword [edi + 0x30], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x40], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0xbc]
call fcn.00480f90
mov edi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8c]
mov edx, dword [esi + 4]
call fcn.00480f90
mov esi, eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call fcn.00480a00
push 0x53360c
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x44]
call fcn.00481e30
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
call fcn.00481ed0
add esp, 4
push 0x533608
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa4]
call fcn.00481e30
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.00481ed0
mov esi, eax
add esp, 4
cmp ebx, esi
je 0x481150
cmp dword [ebx + 0x14], 8
jb 0x481135
push dword [ebx]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov ecx, ebx
push esi
mov word [ebx], ax
call fcn.00474710
cmp dword [ebp - 0x60], 8
jb 0x481161
push dword [ebp - 0x74]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebp - 0x60], 7
cmp dword [ebp - 0x90], 8
mov dword [ebp - 0x64], 0
mov word [ebp - 0x74], ax
jb 0x48118c
push dword [ebp - 0xa4]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebp - 0x90], 7
cmp dword [ebp - 0x18], 8
mov dword [ebp - 0x94], 0
mov word [ebp - 0xa4], ax
jb 0x4811ba
push dword [ebp - 0x2c]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], 7
cmp dword [ebp - 0x30], 8
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
jb 0x4811df
push dword [ebp - 0x44]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebp - 0x30], 7
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
jb 0x481204
push dword [ebp - 0x5c]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov dword [ebp - 0x48], 7
cmp dword [ebp - 0x78], 8
mov dword [ebp - 0x4c], 0
mov word [ebp - 0x5c], ax
jb 0x48122c
push dword [ebp - 0x8c]
call fcn.004cd56c
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0xa8], 8
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
jb 0x48125e
push dword [ebp - 0xbc]
call fcn.004cd56c
add esp, 4
push ebx
mov edx, 0x533610
lea ecx, [ebp - 0xbc]
call fcn.00481f30
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x48127a
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push 1
push 4
push 3
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
cmp dword [ebp - 0xa8], 8
mov esi, dword [ebp - 0x14]
mov dword [esi + 0x24], eax
jb 0x4812ac
push dword [ebp - 0xbc]
call fcn.004cd56c
add esp, 4
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4