Function at 0x40315e
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
xor ebx, ebx
push esi
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x14], ebx
call esi
test eax, eax
jne 0x4031d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4031af
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4031ba
mov edi, 0x80004005
push edi
push 0x360
push str.pipe.cpp
call fcn.00432f68
push str.Failed_to_read_size_of_verification_secret_from_parent_pipe.
jmp 0x403346
mov eax, dword [ebp - 8]
shr eax, 1
cmp eax, 0xff
jbe 0x403202
mov esi, 0x8007000d
push esi
push 0x366
push str.pipe.cpp
mov edi, esi
call fcn.00432f68
push str.Verification_secret_from_parent_is_too_big.
push esi
jmp 0x403347
inc eax
push eax
lea eax, [ebp - 4]
push eax
call fcn.00430748
mov edi, eax
cmp edi, ebx
jge 0x40321d
push str.Failed_to_allocate_buffer_for_verification_secret.
jmp 0x403346
push ebx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 8]
call esi
test eax, eax
jne 0x40326a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x403245
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x403250
mov edi, 0x80004005
push edi
push 0x36e
push str.pipe.cpp
call fcn.00432f68
push str.Failed_to_read_verification_secret_from_parent_pipe.
jmp 0x403346
push 0xffffffffffffffff
push dword [ebp + 0xc]
push 0xffffffffffffffff
push dword [ebp - 4]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
je 0x4032a2
mov esi, 0x8007000d
push esi
push 0x375
push str.pipe.cpp
mov edi, esi
call fcn.00432f68
push str.Verification_secret_from_parent_does_not_match.
jmp 0x4031fc
push ebx
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call esi
test eax, eax
jne 0x4032ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x4032ca
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x4032d5
mov edi, 0x80004005
push edi
push 0x37b
push str.pipe.cpp
call fcn.00432f68
push str.Failed_to_read_verification_process_id_from_parent_pipe.
jmp 0x403346
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
cmp eax, ebx
jne 0x403364
mov eax, dword [ebp - 0x10]
mov dword [ecx], eax
push ebx
lea eax, [ebp - 0x14]
push eax
push 4
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x40334e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x403326
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
cmp edi, ebx
jl 0x403331
mov edi, 0x80004005
push edi
push 0x38c
push str.pipe.cpp
call fcn.00432f68
push str.Failed_to_inform_parent_process_that_child_is_running.
push edi
call fcn.004300f7
pop ecx
pop ecx
cmp dword [ebp - 4], ebx
je 0x40335b
push dword [ebp - 4]
call fcn.00430858
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0xc
cmp eax, dword [ebp - 0x10]
je 0x4032fa
mov esi, 0x8007000d
push esi
push 0x386
push str.pipe.cpp
mov edi, esi
call fcn.00432f68
push str.Verification_process_id_from_parent_does_not_match.
jmp 0x4031fc