Function at 0x40ba99
Capabilities:
Connect pipe
Read pipe
Write pipe

Disassembly:
push edx
push 0x4003c0
push ebx
push 0x400d6e
push 0xffffffffffffff9c
push 0x40388f
call fcn.004024e9
call dword [sym.imp.version.dll_VerFindFileA]
pop esp
call fcn.00408f7b
test ebx, eax
call fcn.0040751e
push dword [edx + 0x36]
pop ecx
mov edi, 0x722
nop
push dword [esp + 0xc]
push 0x400cae
push dword [esp + 4]
push esp
push 0x3fd8a1
call fcn.0040239a
leave
push 0xffffffffffffff98
test eax, ecx
call fcn.004082b8
or word [edx + 0xfc], 0xfc00
call dword [sym.imp.ntdll.dll_RtlZeroMemory]
push 0xffffffffffffff8c
leave
je 0x4082ce
popal
push esp
push 0x4004b2
call fcn.0040802c
push 0x1a
push dword [esp + 0xc]
push 0x4009d8
add byte [eax + 0x72], ch
mov bl, 0x3f
add al, ch
cmp al, 0xa1
invalid
invalid
push dword [ebx + 2]
add byte [ecx + 0x9b4], 0
mov dword [ebp + 0x11], ecx
jle 0x408aa3
dec ebp
adc dword [edi], ecx
mov cs, ebp
pop es
add byte [eax], al
adc dword [edi + 0x9ba], 0xba00
leave
push 0x28
call fcn.0040cc9e
push 0xffffffffffffff86
push 0x4002d4
push 0x40000a
push 0x3faa7d
call fcn.004024e9
cwde
adc word [eax + 0x264], 0x6400
push dword [edx + 0xbfe]
lea esi, [edi]
mov esi, esp
push dword [esi - 0x10]
push 0xfffffffffffffffa
test eax, edx
int3
push dword [eax + 0x3e]
mov ebx, 0x620
push 0x7a
push 0x4005b8
push 0x3ffbf8
call fcn.00402bfe
jns 0x40be4c
lea eax, [eax + ebx - 0x12]
call fcn.0040aa1c
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
in al, dx
push eax
push 0x3f90d9
call fcn.004023ff
mov edi, esp
push dword [edx + 0x28]
mov esi, 0xf0
push dword [eax - 6]
or byte [eax + 0x80c], 0
je 0x40b96c
mov esi, esp
leave
ret
add bh, bh
jb 0x40ba5f
push dword [edx + 0x7fc]
mov edx, dword [esi + 0x7c]
jne 0x40b9c1
dec esi
xchg esp, eax
call fcn.0040a6c6
pop ecx
push dword [esp + 4]
push ebp
push 0xffffffffffffff90
push 0x3fd813
call fcn.00402464
mov ebx, dword [ecx - 0x13]
push dword [eax - 0x54]
jl 0x40bd04
add word [edx + 0x4e8], 0xe800
mov eax, esp
xchg edi, eax
dec esi
xchg esp, eax
push dword [esp + 0xc]
push dword [esp + 8]
push 0xa
push 8
push 0x3f8718
call fcn.0040239a
call fcn.0040ca80
call dword [sym.imp.version.dll_VerFindFileW]
call fcn.0040c997
xchg edx, eax
mov edi, ebx
ja 0x40ba31
xchg ebx, eax
push eax
call fcn.0040a6c6
push 0x400e9e
push 0xc
push 0x400de2
add byte [eax - 0x5e], ch
sar byte [edi], cl
add al, ch
push 0xffffffffffffffff
invalid
call fcn.0040bed4
call dword [fcn.00401090]
sbb byte [eax + 0x210], 0
int3
inc edx
push 0x3000
jmp 0x408237
or eax, 0x84680040
or dword [eax], eax
push 0xfffffffffffffffa
push 0x3fbe3b
call fcn.00402464
push dword [eax + 0xc]
mov edx, esp
lea esi, [ecx + eax*8 + 0x10]
mov ecx, dword [ecx + 0x1d]
mov dword [esp + 0x4ff], edx
call dword [sym.imp.version.dll_VerQueryValueW]
ja 0x40bdff
cmp edi, dword [esi + 0x4ce8003f]
invalid
jno 0x40bcf7
leave
pop ebx
push ecx
push 0x54
push 0x40048a
push 0x400e88
push 0x3fe81b
call fcn.00402bfe
push dword [edx + 0x72]
mov edi, 0x8e4
sbb byte [edi + 0x47e], 0
mov dword [ecx - 0x26], ebp
jno 0x40bd0f
xchg esi, eax
push ebx
push 0x7a
push 0x400ab8
push 0x40041e
push 0x3fa879
call fcn.004023ff
inc esp
mov ecx, dword [edx - 0x10]
push dword [eax - 0x4e]
push dword [ebx + 0x1a]
mov dword [esi + 0x1aa], esi
call fcn.0040b579
mov edx, 0x8e8
push dword [eax + 0x52]
push dword [esi + 0x44]
xchg ebx, eax
call 0x40ba64
int3
movsb byte es:[edi], byte [esi]
sldt word [eax]
xchg esi, eax
popal
mov edx, dword [edx]
push 0x4006ea
push 0x400168
push 0x400d0e
push 0x3fa2ac
call fcn.00402bfe
lea edi, [ecx + eax*2 + 0x3a]
call dword [sym.imp.ntdll.dll_RtlZeroMemory]
jle 0x40c6a6
mov eax, dword [ebp - 0x25]
call dword [sym.imp.KERNEL32.dll_CallNamedPipeA]
push dword [ebx - 0x68]
push 0x60
push esi
call fcn.00403b49
push ebp
push 0x4004fc
push dword [esp + 8]
and al, 8
push 0x3feb03
call fcn.004023ff
push 0x87a
mov esp, dword [ecx + 0x29]
call dword [sym.imp.ntdll.dll_RtlRealPredecessor]
push 0xffffffffffffffee
jp 0x40be98
inc ebp
jmp 0x404f19
int3
mov dword [ecx + 0x32], eax
nop
push dword [eax + 0x64]
call dword [sym.imp.version.dll_VerQueryValueA]
test esi, ecx
xchg esi, eax
push eax
push 0x400ef8
push 0xfffffffffffffff6
push ebx
push ebp
push 0x3fc052
call fcn.004024e9
call fcn.0040b870
lea eax, [eax - 0x697c7cb6]
mov esp, dword [ecx + 0x29]
xchg ebp, eax
push 0x3e
ret