Function at 0x42e310
Capabilities:
Create pipe
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1034
call fcn.0044fdb0
mov eax, dword [0x4fd11c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x101c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x1028], eax
push 0
lea eax, [ebp - 0x1034]
push eax
lea eax, [ebp - 0x1008]
push eax
lea eax, [ebp - 0x1018]
push eax
mov dword [ebp - 0x1024], ecx
mov dword [ebp - 0x1014], 0
mov dword [ebp - 0x1034], 0xc
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x102c], 1
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x42e3b6
push str.CreatePipe__
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
push ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 2
push 1
push 0
lea eax, [ebp - 0x100c]
push eax
call edi
push eax
push dword [ebp - 0x1008]
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push eax
call ebx
test eax, eax
je 0x42e402
push 2
push 0
push 0
lea eax, [ebp - 0x1010]
push eax
call edi
push eax
push dword [ebp - 0x1018]
call edi
push eax
call ebx
test eax, eax
jne 0x42e425
push str.DuplicateHandle__
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp - 0x1018]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
test eax, eax
jne 0x42e45a
push str.CloseHandle_hOutputReadTmp_
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp - 0x100c]
mov ecx, dword [ebp - 0x1024]
push 0
push dword [ebp - 0x1008]
push 0
push 0
push 0
push 1
push dword [ebp - 0x101c]
call fcn.0042e010
mov ecx, dword [ebp - 0x1028]
push dword [ebp - 0x1008]
mov dword [ecx], eax
call edi
test eax, eax
jne 0x42e4b8
push str.CloseHandle_hOutputWrite_
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp - 0x100c]
call edi
test eax, eax
jne 0x42e4e7
push str.CloseHandle_hErrorWrite_
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
push 0
lea eax, [ebp - 0x1014]
push eax
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1010]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42e53e
mov eax, dword [ebp - 0x1014]
test eax, eax
je 0x42e53e
cmp eax, 0x1000
jae 0x42e592
mov ecx, dword [ebp - 0x1020]
mov byte [ebp + eax - 0x1004], 0
lea eax, [ebp - 0x1004]
push eax
call fcn.0040164a
mov ebx, 1
jmp 0x42e54e
push str.ReadFile__
push esi
call fcn.004018d9
add esp, 8
xor ebx, ebx
push dword [ebp - 0x1010]
call edi
test eax, eax
jne 0x42e57d
push str.CloseHandle_hOutputRead_
push esi
call fcn.004018d9
add esp, 8
xor eax, eax
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [ebp - 4]
pop edi
mov eax, ebx
pop ebx
xor ecx, ebp
pop esi
call fcn.0044c53d
mov esp, ebp
pop ebp
ret 0x10
call fcn.0044f446
int3