Function at 0x428207
Capabilities:
Create pipe
Create two anonymous pipes

Disassembly:
push 0xac
mov eax, 0x45b112
call fcn.00438b84
mov eax, dword [ebp + 0x54]
xor ebx, ebx
mov esi, dword [ebp + 0x5c]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x60]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb8], eax
push 2
pop eax
mov dword [ebp - 4], eax
call fcn.0041ea57
push 0x44
pop edi
push edi
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x2c], ebx
push ebx
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
call fcn.00439fe0
mov dword [ebp - 0xa4], edi
xor eax, eax
lea edi, [ebp - 0x48]
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test esi, esi
je 0x4282e9
mov esi, dword [sym.imp.KERNEL32.dll_CreatePipe]
lea eax, [ebp - 0x54]
push ebx
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x54], 0xc
push eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x4c], 1
push eax
mov dword [ebp - 0x50], ebx
call esi
test eax, eax
je 0x4283ed
push ebx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
call esi
test eax, eax
je 0x4283ed
push ebx
push 1
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x4283ed
mov eax, dword [ebp - 0x34]
or dword [ebp - 0x78], 0x100
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x6c], eax
push 0x479bd0
lea ecx, [ebp - 0x28]
call fcn.00402ae5
mov eax, dword [ebp + 0x48]
xor ecx, ecx
push 2
inc eax
mov byte [ebp - 4], 3
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00438cbb
mov esi, eax
lea ecx, [ebp + 0x38]
mov eax, dword [ebp + 0x48]
push 7
pop edi
cmp dword [ebp + 0x4c], edi
lea eax, [eax*2 + 2]
cmova ecx, dword [ebp + 0x38]
push eax
push ecx
push esi
call fcn.0043a230
add esp, 0x10
lea ecx, [ebp + 8]
push ebx
push str..
call fcn.0041e7b8
cmp eax, 0xffffffff
je 0x4283db
push ebx
push 0x479bd8
lea ecx, [ebp + 8]
call fcn.0041e7b8
lea ecx, [ebp - 0xa5]
push ecx
push eax
push ebx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x60]
call fcn.0041dfbb
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x28]
call fcn.00402bb4
lea ecx, [ebp - 0x60]
call fcn.0040221a
push ebx
push 0x479bdc
lea ecx, [ebp + 8]
call fcn.0041e7b8
lea ecx, [ebp - 0xa5]
inc eax
push ecx
push 0xffffffffffffffff
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x60]
call fcn.0041dfbb
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp + 8]
call fcn.00402bb4
lea ecx, [ebp - 0x60]
call fcn.0040221a
push 0x479be0
lea ecx, [ebp - 0x28]
call fcn.0041e1dd
test al, al
je 0x4283db
push 0x479be4
lea ecx, [ebp - 0x28]
call fcn.00406c61
cmp dword [ebp - 0x18], 0
je 0x4283f7
cmp dword [ebp - 0x14], edi
lea edx, [ebp - 0x28]
cmova edx, dword [ebp - 0x28]
jmp 0x4283f9
call fcn.0041ea5c
jmp 0x42853c
mov edx, ebx
cmp dword [ebp + 0x1c], edi
lea ecx, [ebp + 8]
lea eax, [ebp + 0x20]
cmova ecx, dword [ebp + 8]
cmp dword [ebp + 0x34], edi
lea edi, [ebp - 0x48]
push edi
cmova eax, dword [ebp + 0x20]
lea edi, [ebp - 0xa4]
push edi
push ebx
push ebx
push dword [ebp + 0x50]
push esi
push ebx
push 1
push eax
push edx
push ecx
call fcn.0042622d
add esp, 0x2c
test eax, eax
jne 0x4284d6
cmp dword [ebp - 0x18], eax
je 0x428446
cmp dword [ebp - 0x14], 7
lea edx, [ebp - 0x28]
cmova edx, dword [ebp - 0x28]
jmp 0x428448
mov edx, ebx
cmp dword [ebp + 0x34], 7
lea edi, [ebp - 0x48]
push edi
lea edi, [ebp - 0xa4]
push edi
push ebx
push ebx
push dword [ebp + 0x50]
lea ecx, [ebp + 0x20]
cmova ecx, dword [ebp + 0x20]
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 7
push esi
cmova eax, dword [ebp + 8]
push ebx
push 2
push ecx
push edx
push eax
call fcn.0042622d
add esp, 0x2c
test eax, eax
jne 0x4284d6
cmp dword [ebp - 0x18], eax
je 0x428493
cmp dword [ebp - 0x14], 7
lea edx, [ebp - 0x28]
cmova edx, dword [ebp - 0x28]
jmp 0x428495
mov edx, ebx
cmp dword [ebp + 0x34], 7
lea edi, [ebp - 0x48]
push edi
lea edi, [ebp - 0xa4]
push edi
push ebx
push ebx
push dword [ebp + 0x50]
lea ecx, [ebp + 0x20]
cmova ecx, dword [ebp + 0x20]
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 7
push esi
cmova eax, dword [ebp + 8]
push ebx
push ebx
push ecx
push edx
push eax
call fcn.0042622d
add esp, 0x2c
test eax, eax
jne 0x4284d6
push esi
call fcn.00438cc4
pop ecx
jmp 0x42852f
push esi
call fcn.00438cc4
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ecx
mov ecx, dword [ebp - 0xac]
test ecx, ecx
je 0x4284f4
mov eax, dword [ebp - 0x48]
mov dword [ecx], eax
jmp 0x4284f9
push dword [ebp - 0x48]
call esi
mov ecx, dword [ebp - 0xb0]
test ecx, ecx
je 0x42850a
mov eax, dword [ebp - 0x44]
mov dword [ecx], eax
jmp 0x42850f
push dword [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x42851e
mov eax, dword [ebp - 0x2c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xb8]
test ecx, ecx
je 0x42852d
mov eax, dword [ebp - 0x30]
mov dword [ecx], eax
mov bl, 1
call fcn.0041ea5c
lea ecx, [ebp - 0x28]
call fcn.0040221a
lea ecx, [ebp + 8]
call fcn.0040221a
lea ecx, [ebp + 0x20]
call fcn.0040221a
lea ecx, [ebp + 0x38]
call fcn.0040221a
mov al, bl
call fcn.00438b33
ret