Function at 0x4b9d67
Capabilities:
Read pipe
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0
push ebx
xor eax, eax
mov dword [ebp - 0x10], edx
push esi
mov ebx, eax
push edi
mov edi, ecx
mov dword [ebp - 0xc], ebx
cmp dword [edi + 0x14], 8
jb 0x4b9d89
mov ecx, dword [edi]
jmp 0x4b9d8b
mov ecx, edi
push eax
push 0x110000
push 3
push eax
push eax
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x4b9e64
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xe7
jne 0x4b9e1c
cmp dword [edi + 0x14], 8
jb 0x4b9dc3
mov eax, dword [edi]
jmp 0x4b9dc5
mov eax, edi
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeW]
push 0
test eax, eax
pop eax
jne 0x4b9d7f
push 2
pop edi
mov ecx, edi
call fcn.0044bc30
test al, al
je 0x4b9e14
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push 0x3d
push str..._.._third_party_crashpad_crashpad_util_win_registration_protocol_win.cc
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
call fcn.0044bca0
mov edx, str.WaitNamedPipe
lea ecx, [ebp - 0xbc]
call fcn.0041cec3
mov ebx, edi
test bl, 2
jmp 0x4b9f1e
push 2
pop edi
mov ecx, edi
call fcn.0044bc30
test al, al
je 0x4b9e5c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push 0x38
push str..._.._third_party_crashpad_crashpad_util_win_registration_protocol_win.cc
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
call fcn.0044bca0
mov edx, 0x510374
lea ecx, [ebp - 0xbc]
call fcn.0041cec3
xor ebx, ebx
inc ebx
test bl, 1
jmp 0x4b9f1e
push 2
pop edi
xor eax, eax
mov dword [ebp - 0xc], edi
push eax
push eax
lea eax, [ebp - 0xc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
test eax, eax
jne 0x4b9ebf
mov ecx, edi
call fcn.0044bc30
test al, al
je 0x4b9eba
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push 0x46
push str..._.._third_party_crashpad_crashpad_util_win_registration_protocol_win.cc
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
call fcn.0044bca0
mov edx, 0x5103dc
lea ecx, [ebp - 0xbc]
call fcn.0041cec3
push 4
pop ebx
test bl, 4
jmp 0x4b9f1e
xor eax, eax
push eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0xc
push dword [ebp + 8]
push 0x24
push dword [ebp - 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
test eax, eax
jne 0x4b9f2d
mov ecx, edi
call fcn.0044bc30
test al, al
je 0x4b9f1b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
push 0x54
push str..._.._third_party_crashpad_crashpad_util_win_registration_protocol_win.cc
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
call fcn.0044bca0
mov edx, 0x510334
lea ecx, [ebp - 0xbc]
call fcn.0041cec3
push 8
pop ebx
test bl, 8
je 0x4b9f90
lea ecx, [ebp - 0xcc]
call fcn.0044c710
jmp 0x4b9f90
cmp dword [ebp - 8], 0xc
je 0x4b9f94
mov ecx, edi
call fcn.0044bc30
test al, al
je 0x4b9f80
push edi
push 0x58
push str..._.._third_party_crashpad_crashpad_util_win_registration_protocol_win.cc
lea ecx, [ebp - 0xc4]
call fcn.0044bca0
push dword [ebp - 8]
mov edx, str.TransactNamedPipe:_expected
push 0xc
lea ecx, [eax + 8]
call fcn.0041cec3
mov ecx, eax
call fcn.00421ad0
mov edx, str.__observed
mov ecx, eax
call fcn.0041cec3
mov ecx, eax
call fcn.00421ad0
push 0x10
pop ebx
test bl, 0x10
je 0x4b9f90
lea ecx, [ebp - 0xc4]
call fcn.0044bd90
xor ebx, ebx
jmp 0x4b9f96
mov bl, 1
cmp esi, 0xffffffff
je 0x4b9fa7
mov ecx, esi
call fcn.004bd3c9
test al, al
jne 0x4b9fa7
int3
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret