Function at 0x403630
Capabilities:
Create pipe
Create process on windows
Read file on windows
Write and execute a file
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x4272ac]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a4], 0
xor eax, eax
mov word [ebp - 0x198], ax
push 0x18e
push 0
lea ecx, [ebp - 0x196]
push ecx
call fcn.004153e0
add esp, 0xc
cmp dword [0x429230], 0
je 0x403688
cmp dword [0x429220], 0
jne 0x40368d
jmp 0x4038f6
push 0x44
push 0
lea edx, [ebp - 0x210]
push edx
call fcn.004153e0
add esp, 0xc
mov dword [ebp - 0x210], 0x44
xor eax, eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0xc
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x19c]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x40371c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x42359c
push str.__s__Error__CreatePipe_error:__d
call fcn.00402cc0
add esp, 0xc
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1e4], 0x100
push 0
push 1
mov eax, dword [ebp - 0x19c]
push eax
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea ecx, [ebp - 0x1c0]
push ecx
lea edx, [ebp - 0x210]
push edx
push 0
push 0
push 0x8000000
push 1
push 0
push 0
mov eax, dword [ebp + 8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jne 0x4037a5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DebugOutputCmd
push str.__s__Error__Create_debug_process_error:__d
call fcn.00402cc0
add esp, 0xc
jmp 0x4038f6
cmp dword [ebp - 0x1a4], 0
je 0x4037bb
mov ecx, dword [ebp - 0x1a4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x1a0]
push edx
push 4
push 0x42360c
mov eax, dword [0x429220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 1
test ecx, ecx
je 0x4038a9
push 0
lea edx, [ebp - 0x1c8]
push edx
push 0xc8
lea eax, [ebp - 0x198]
push eax
mov ecx, dword [ebp - 0x19c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x403813
cmp dword [ebp - 0x1c8], 0
jne 0x403818
jmp 0x4038a9
lea edx, [ebp - 0x198]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x214]
add eax, 2
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x214]
mov dx, word [ecx]
mov word [ebp - 0x21a], dx
add dword [ebp - 0x214], 2
cmp word [ebp - 0x21a], 0
jne 0x403833
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x218]
sar eax, 1
mov dword [ebp - 0x220], eax
push 0
lea ecx, [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x220]
shl edx, 1
push edx
lea eax, [ebp - 0x198]
push eax
mov ecx, dword [0x429220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x100
push 0
lea edx, [ebp - 0x198]
push edx
call fcn.004153e0
add esp, 0xc
jmp 0x4037d7
push 0
lea eax, [ebp - 0x1a0]
push eax
push 4
push str._r_n_r_n
mov ecx, dword [0x429220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [ebp - 0x19c], 0
je 0x4038dc
mov edx, dword [ebp - 0x19c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1bc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040c30d
mov esp, ebp
pop ebp
ret