Function at 0x4284d0
Capabilities:
Connect pipe
Create pipe

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x42a7c1
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2050
call fcn.0041bd80
mov eax, dword [0x435390]
xor eax, esp
mov dword [esp + 0x204c], eax
push esi
push edi
mov eax, dword [0x435390]
xor eax, esp
push eax
lea eax, [esp + 0x2060]
mov dword fs:[0], eax
xor esi, esi
push esi
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edi, eax
mov dword [esp + 0x10], edi
cmp edi, esi
jne 0x42853a
mov eax, dword [ebx + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x4286f6
push 0x2024
lea ecx, [esp + 0x1c]
push esi
push ecx
mov dword [esp + 0x20], esi
call fcn.00410110
mov edx, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x24]
add esp, 0xc
mov dword [esp + 0x24], edi
push edx
lea edi, [esp + 0x2040]
call fcn.004283f0
add esp, 4
mov dword [esp + 0x2068], esi
cmp dword [eax + 0x14], 8
jb 0x42857a
mov eax, dword [eax]
push esi
push 0x1388
push 0x1000
push 0x1000
push 0xff
push 6
push 0x40000003
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
or edi, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x2068], edi
lea esi, [esp + 0x203c]
call fcn.0040b3d0
cmp dword [esp + 0x28], edi
jne 0x4285d7
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebx + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x4286f6
mov edx, dword [ebx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x14]
push eax
xor edi, edi
push ecx
mov dword [esp + 0x2040], edi
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp eax, edi
je 0x428605
xor esi, esi
jmp 0x428699
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x217
je 0x428626
cmp eax, 0x3e5
jne 0x4285fe
mov dword [esp + 0x2038], 1
jmp 0x428635
mov edx, dword [esp + 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
je 0x4285fe
xor eax, eax
cmp dword [esp + 0x2038], edi
mov esi, 1
sete al
mov dword [esp + 0x203c], edi
mov dword [esp + 0x2040], edi
mov dword [esp + 0x2044], edi
mov dword [esp + 0x2034], eax
mov dword [esp + 0x2068], 2
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x2040]
push edx
mov ecx, ebx
call fcn.00427bd0
mov dword [esp + 0x2068], 0xffffffff
lea eax, [esp + 0x203c]
push eax
call fcn.00426d30
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov edx, dword [ebx + 0x10]
cmp esi, edi
je 0x428719
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
push edx
call esi
test eax, eax
je 0x42871c
mov eax, dword [ebx + 4]
push edi
push eax
call esi
test eax, eax
je 0x42871c
mov ecx, dword [ebx + 8]
push edi
push ecx
call esi
test eax, eax
je 0x42871c
cmp dword [ebx + 0x28], edi
je 0x4285e1
mov ecx, dword [ebx + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [esp + 0x28]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
call esi
mov eax, dword [esp + 0x10]
push eax
call esi
mov ecx, dword [esp + 0x2060]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x204c]
xor ecx, esp
call fcn.0040e68e
mov esp, ebp
pop ebp
ret
push edx
jmp 0x4286dc
mov eax, dword [ebx + 0x10]
push eax
jmp 0x4286dc