Function at 0x403156
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
xor ebx, ebx
push esi
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x14], ebx
call esi
test eax, eax
jne 0x4031cc
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4031a7
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4031b2
mov edi, 0x80004005
push edi
push 0x360
push str.pipe.cpp
call fcn.0043294e
push str.Failed_to_read_size_of_verification_secret_from_parent_pipe.
jmp 0x40333e
mov eax, dword [ebp - 8]
shr eax, 1
cmp eax, 0xff
jbe 0x4031fa
mov esi, 0x8007000d
push esi
push 0x366
push str.pipe.cpp
mov edi, esi
call fcn.0043294e
push str.Verification_secret_from_parent_is_too_big.
push esi
jmp 0x40333f
inc eax
push eax
lea eax, [ebp - 4]
push eax
call fcn.004300d8
mov edi, eax
cmp edi, ebx
jge 0x403215
push str.Failed_to_allocate_buffer_for_verification_secret.
jmp 0x40333e
push ebx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 8]
call esi
test eax, eax
jne 0x403262
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x40323d
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x403248
mov edi, 0x80004005
push edi
push 0x36e
push str.pipe.cpp
call fcn.0043294e
push str.Failed_to_read_verification_secret_from_parent_pipe.
jmp 0x40333e
push 0xffffffffffffffff
push dword [ebp + 0xc]
push 0xffffffffffffffff
push dword [ebp - 4]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
je 0x40329a
mov esi, 0x8007000d
push esi
push 0x375
push str.pipe.cpp
mov edi, esi
call fcn.0043294e
push str.Verification_secret_from_parent_does_not_match.
jmp 0x4031f4
push ebx
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call esi
test eax, eax
jne 0x4032e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4032c2
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4032cd
mov edi, 0x80004005
push edi
push 0x37b
push str.pipe.cpp
call fcn.0043294e
push str.Failed_to_read_verification_process_id_from_parent_pipe.
jmp 0x40333e
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
cmp eax, ebx
jne 0x40335c
mov eax, dword [ebp - 0x10]
mov dword [ecx], eax
push ebx
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x403346
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x40331e
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x403329
mov edi, 0x80004005
push edi
push 0x38c
push str.pipe.cpp
call fcn.0043294e
push str.Failed_to_inform_parent_process_that_child_is_running.
push edi
call fcn.0042fa86
pop ecx
pop ecx
cmp dword [ebp - 4], ebx
je 0x403353
push dword [ebp - 4]
call fcn.004301e8
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0xc
cmp eax, dword [ebp - 0x10]
je 0x4032f2
mov esi, 0x8007000d
push esi
push 0x386
push str.pipe.cpp
mov edi, esi
call fcn.0043294e
push str.Verification_process_id_from_parent_does_not_match.
jmp 0x4031f4