Function at 0x41206c
Capabilities:
Create pipe
Read file on windows

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov edi, 0xbbe
mov eax, dword [esi]
push edi
call dword [eax + 0xa8]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push eax
push edi
mov edi, dword [esp + 0x30]
push edi
call ebx
push eax
call fcn.00411ffd
mov eax, dword [esi]
pop ecx
pop ecx
mov ebp, 0xbbf
push ebp
mov ecx, esi
call dword [eax + 0xa8]
push eax
push ebp
push edi
call ebx
push eax
call fcn.00411ffd
mov eax, dword [esi]
pop ecx
pop ecx
add ebp, 2
push ebp
mov ecx, esi
call dword [eax + 0xa8]
push eax
push ebp
push edi
call ebx
push eax
call fcn.00411ffd
mov eax, dword [esi]
pop ecx
pop ecx
mov ebp, 0xbf2
push ebp
mov ecx, esi
call dword [eax + 0xa8]
push eax
push ebp
push edi
call ebx
push eax
call fcn.00411ffd
mov eax, dword [esi]
pop ecx
pop ecx
inc ebp
push ebp
mov ecx, esi
call dword [eax + 0xa8]
push eax
push ebp
push edi
call ebx
push eax
call fcn.00411ffd
mov eax, dword [esi]
pop ecx
pop ecx
mov ebp, 0xc07
push ebp
mov ecx, esi
call dword [eax + 0xa8]
push eax
push ebp
push edi
call ebx
push eax
call fcn.00411ffd
mov ebx, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov ebp, dword [esi]
pop ecx
pop ecx
push 0xbc4
push edi
call ebx
push eax
push 0xbc4
mov ecx, esi
call dword [ebp + 0xac]
mov ebp, dword [esi]
push 0xbf1
push edi
call ebx
push eax
push 0xbf1
mov ecx, esi
call dword [ebp + 0xac]
mov ebp, dword [esi]
push 0xbf5
push edi
call ebx
push eax
push 0xbf5
mov ecx, esi
call dword [ebp + 0xac]
mov ebp, dword [esi]
push 0xbf6
push edi
call ebx
push eax
push 0xbf6
mov ecx, esi
call dword [ebp + 0xac]
mov ebp, dword [esi]
push 0xbf7
push edi
call ebx
push eax
push 0xbf7
mov ecx, esi
call dword [ebp + 0xac]
mov edx, dword [esi]
mov ebp, 0xbf4
push ebp
push edi
mov dword [esp + 0x30], edx
call ebx
push eax
mov eax, dword [esp + 0x2c]
push ebp
mov ecx, esi
call dword [eax + 0xac]
mov ebp, dword [esi]
xor ebx, ebx
push ebx
push ebx
push ebx
push 0x147
push 0xbcd
push edi
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push eax
push 0x14e
push 0xbcd
mov ecx, esi
call dword [ebp + 0xe0]
lea eax, [esp + 0x14]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [esp + 0x14]
push ebx
push 0x40
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebp, eax
push 0x2000
push ebx
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
push 3
push ebx
lea eax, [esp + 0x24]
push ebx
push eax
push ebp
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push dword [esp + 0x1c]
push ebx
push 0x467
push edi
call dword [sym.imp.USER32.dll_PostMessageA]
lea ecx, [esp + 0x20]
mov eax, 0x23c
push ebx
push ecx
mov dword [esp + 0x28], eax
push eax
lea eax, [esi + 0x638]
push eax
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebp
push dword [esp + 0x10]
call ebp
push ebx
push ebx
push 0x10
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [esi + 0x640]
push esi
call fcn.00415d30
pop ecx
pop ecx
mov ecx, esi
call fcn.00412f0a
mov ecx, esi
call fcn.0040f96f
sub eax, 3
mov ecx, esi
neg eax
sbb eax, eax
inc eax
push eax
call fcn.00412d98
push 1
pop eax
pop edi
mov dword [esi + 0x874], eax
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4