Function at 0x404830
Capabilities:
Connect pipe
Create pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x411014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [ebp - 0x24], eax
xor ebx, ebx
mov eax, dword [ebp + 0xc]
xor esi, esi
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x10]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0xb
push 1
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], esi
push eax
mov dword [ebp - 0xc], ebx
mov word [ebp - 8], 0x500
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
push 1
push 0x400
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov edi, eax
add esp, 8
test edi, edi
jne 0x4048a7
push 0x400
push str.Could_not_allocate__d_bytes_for_ACL_n
push 2
call fcn.004027c0
add esp, 0xc
jmp 0x404a45
push 2
push 0x400
push edi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x4048d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.Could_not_initialize_ACL:__s___d___n
jmp 0x404a3b
push dword [ebp - 0x10]
push 0x12008b
push 2
push edi
call dword [sym.imp.ADVAPI32.dll_AddAccessAllowedAce]
test eax, eax
jne 0x4048fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.Could_not_add_sid_to_ACL:__s___d___n
jmp 0x404a3b
push edi
call dword [sym.imp.ADVAPI32.dll_IsValidAcl]
test eax, eax
jne 0x40491e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.Generated_ACL_is_invalid:__s___d___n
jmp 0x404a3b
push 0x414
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
test esi, esi
jne 0x404945
push str.LocalAlloc_pSD_failed_while_creating_pipe_n
push 2
call fcn.004027c0
add esp, 8
jmp 0x404a45
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x404969
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.InitializeSecurityDescriptor_failed:__s___d___n
jmp 0x404a3b
push 0
push edi
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x404990
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.SetSecurityDescriptorDacl_failed:__s___d___n
jmp 0x404a3b
push esi
call dword [sym.imp.ADVAPI32.dll_IsValidSecurityDescriptor]
test eax, eax
jne 0x4049b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.Generated_SD_is_invalid:__s___d___n
jmp 0x404a3b
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xc
push eax
push 0xbb8
push 0x1000
push 0x1000
push 1
push 8
push 0x400c0003
push str..pipe_vmware_authdpipe
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x404a01
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.CreateNamedPipe_failed:__s___d___n
jmp 0x404a3b
mov eax, dword [ebp - 0x20]
xorps xmm0, xmm0
push 0
push 0
push 1
movups xmmword [eax], xmm0
push 0
mov dword [eax + 0x10], 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 0x10], eax
test eax, eax
jne 0x404aa4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.Could_not_create_event_for_overlapped_IO:__s___d___n
push 2
call fcn.004027c0
add esp, 0x10
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x404a53
push eax
call dword [sym.imp.ADVAPI32.dll_FreeSid]
test edi, edi
je 0x404a61
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
test esi, esi
je 0x404a6c
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
test ebx, ebx
je 0x404a77
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x10]
test eax, eax
je 0x404a88
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24]
pop edi
pop esi
pop ebx
mov dword [eax], 0
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
jne 0x404aec
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
je 0x404aec
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call sub.vmwarebase.DLL_Err_ErrString
push eax
push str.ConnectNamedPipe_failed:__s___d___n
push 2
call fcn.004027c0
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x404afa
push eax
call dword [sym.imp.ADVAPI32.dll_FreeSid]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov dword [eax], ebx
xor ecx, ebp
mov eax, dword [ebp - 0x20]
pop ebx
mov eax, dword [eax + 0x10]
call fcn.004083a0
mov esp, ebp
pop ebp
ret