Function at 0x422250
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b7013
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x51c0b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x174], eax
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x161], al
lea eax, [ebp - 0x130]
push eax
call fcn.0049052c
add esp, 4
mov dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x100]
push str..pipeISEngine_
push eax
call fcn.0040c530
add esp, 0xc
mov byte [ebp - 4], 1
lea eax, [ebp - 0xfc]
cmp dword [ebp - 0xe8], 8
push 0
cmovae eax, dword [ebp - 0xfc]
push 0
push 0x1000
push 0x1000
push 1
push 0
push 3
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov edi, eax
mov esi, edi
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x178], esi
mov byte [ebp - 4], 2
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 0xffffffff
jne 0x422349
mov dword [ebp - 0x16c], str.SetupEngine.cpp
mov dword [ebp - 0x168], 0x6b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x16c]
push str.Failed_to_create_pipe_server_for_elevated_proxy__error__x
push eax
call fcn.0040b080
add esp, 0xc
xor edi, edi
jmp 0x4226fb
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0xd0]
push str.IS_ProxyWaiter_
push eax
call fcn.0040c530
add esp, 0xc
mov byte [ebp - 4], 5
lea eax, [ebp - 0xcc]
cmp dword [ebp - 0xb8], 8
cmovae eax, dword [ebp - 0xcc]
push eax
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x160]
push str._embedded:
push eax
call fcn.0040c530
add esp, 0xc
mov byte [ebp - 4], 7
mov al, byte [ebp - 0x161]
test al, al
jne 0x4223d4
push 9
push str.__IS_temp
lea ecx, [ebp - 0x15c]
call fcn.0040c610
mov al, byte [ebp - 0x161]
test al, al
mov dword [ebp - 0xa0], 0x4dd804
mov edx, str.open
mov dword [ebp - 0x78], 0x4dcac4
mov ecx, str.runas
lea eax, [ebp - 0x161]
cmove ecx, edx
push 0
push eax
test ecx, ecx
mov eax, 0x4d7438
cmovne eax, ecx
lea ecx, [ebp - 0xa0]
push eax
call fcn.004042c0
mov byte [ebp - 4], 9
lea eax, [ebp - 0xa0]
push eax
push 0x800400
push 1
push 0xffffffffffffffff
push 8
sub esp, 0x30
lea eax, [ebp - 0x161]
mov ecx, esp
mov dword [ebp - 0x188], esp
mov dword [ebp - 0x180], ecx
push 0
push eax
push 0x4d7438
mov dword [ecx], 0x4dd804
mov dword [ecx + 0x28], 0x4dcac4
call fcn.004042c0
mov byte [ebp - 4], 0xb
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0x180], esp
lea eax, [ebp - 0x160]
mov dword [ebp - 0x184], ecx
push 0
push eax
mov dword [ecx], 0x4dd804
mov dword [ecx + 0x28], 0x4dcac4
call fcn.00407160
mov byte [ebp - 4], 0xd
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0x184], esp
mov dword [ebp - 0x168], ecx
push 0
push dword [ebp - 0x174]
mov dword [ecx], 0x4dd804
mov dword [ecx + 0x28], 0x4dcac4
call fcn.00407160
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 9
call fcn.00490f12
add esp, 0xa4
test eax, eax
je 0x422515
mov eax, dword [ebp - 0x174]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x4224e1
mov eax, dword [eax]
push dword [0x5218e8]
mov dword [ebp - 0x16c], str.SetupEngine.cpp
push eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x168], 0x6c3
push str.Failed_to_launch_proxy_process__s__error__x
push eax
call fcn.0040b080
add esp, 0x10
jmp 0x4226ad
push 0x7530
push dword [ebp - 0x170]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4225b5
cmp byte [0x51caa5], 0
jne 0x422544
cmp byte [0x522582], 0
je 0x4226ad
push 0
push ecx
push str.SetupEngine.cpp
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x4dd804
mov dword [ebp - 0x48], 0x4dcac4
call fcn.00406e60
mov byte [ebp - 4], 0x16
push 0
push ecx
push str.Timed_out_waiting_for_proxy_to_respond
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x4dd804
mov dword [ebp - 0x18], 0x4dcac4
call fcn.00406e60
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x70]
push 0x6cf
lea ecx, [ebp - 0x40]
call fcn.00486f90
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x40]
call fcn.004049f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x70]
call fcn.004049f0
jmp 0x4226ad
push dword [0x5218f4]
call ebx
or esi, 0xffffffff
push 0x34
mov dword [ebp - 0x178], esi
call fcn.00499a25
add esp, 4
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 0x20
mov ecx, eax
push dword [0x5218f0]
push edi
call fcn.00474620
mov edi, eax
mov byte [ebp - 4], 9
test edi, edi
jne 0x42265c
cmp byte [0x51caa5], al
jne 0x422602
cmp byte [0x522582], al
je 0x422652
sub esp, 8
lea ecx, [ebp - 0x40]
push str.SetupEngine.cpp
call fcn.00406f50
mov byte [ebp - 4], 0x21
sub esp, 8
lea ecx, [ebp - 0x70]
push str.Failed_to_allocate_proxy_handler
call fcn.00406f50
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x40]
push 0x6dd
lea ecx, [ebp - 0x70]
call fcn.00486f90
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x70]
call fcn.004049f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40]
call fcn.004049f0
push dword [ebp - 0x17c]
call ebx
jmp 0x4226ad
mov ecx, edi
call fcn.00470ee0
test eax, eax
je 0x422679
push eax
mov dword [ebp - 0x168], 0x6e6
push str.Failed_to_connect_verify_proxy__error__x
jmp 0x422694
mov ecx, edi
call fcn.00474780
test eax, eax
je 0x4226af
push eax
mov dword [ebp - 0x168], 0x6ed
push str.Failed_to_initialize_proxy_communication__error__x
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x16c], str.SetupEngine.cpp
push eax
call fcn.0040b080
add esp, 0xc
xor edi, edi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa0]
call fcn.00404db0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x160]
call fcn.00404db0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x4226ec
test ebx, ebx
je 0x4226ec
push eax
call ebx
mov dword [ebp - 0x170], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd0]
call fcn.00404db0
mov byte [ebp - 4], 1
cmp esi, 0xffffffff
je 0x422715
test ebx, ebx
je 0x422715
push esi
call ebx
mov dword [ebp - 0x178], 0xffffffff
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x100]
call fcn.00404db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.00404db0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004996ca
mov esp, ebp
pop ebp
ret 8