Function at 0x41dfc0
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c1476
mov eax, dword fs:[0]
push eax
mov eax, 0x27f8
call fcn.00486600
mov eax, dword [0x4f840c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x27bc], ecx
mov ecx, 0xc
mov esi, str.wmic_cpu_get_processorid
lea edi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
push 0x2710
lea edx, [ebp - 0x2757]
push ebx
push edx
mov dword [ebp - 0x27b8], eax
movsw word es:[edi], word [esi]
mov dword [ebp - 0x2798], ebx
mov dword [ebp - 0x2794], ebx
mov byte [ebp - 0x2758], bl
call sub.MSVCR100.dll_memset
mov dword [ebp - 0x2760], 0xf
mov dword [ebp - 0x2764], ebx
mov byte [ebp - 0x2774], bl
xor eax, eax
mov dword [ebp - 4], ebx
push 0x44
mov dword [ebp - 0x27a8], eax
mov dword [ebp - 0x27a4], eax
mov dword [ebp - 0x27a0], eax
mov dword [ebp - 0x279c], eax
lea eax, [ebp - 0x2804]
push ebx
push eax
mov dword [ebp - 0x27c0], ebx
call sub.MSVCR100.dll_memset
add esp, 0x18
xor eax, eax
push ebx
lea ecx, [ebp - 0x27b4]
push ecx
mov dword [ebp - 0x27b4], eax
mov dword [ebp - 0x27b0], eax
mov dword [ebp - 0x27ac], eax
lea edx, [ebp - 0x2794]
push edx
lea eax, [ebp - 0x2798]
push eax
mov dword [ebp - 0x27a8], ebx
mov dword [ebp - 0x27a4], ebx
mov dword [ebp - 0x2804], 0x44
mov dword [ebp - 0x27b4], 0xc
mov dword [ebp - 0x27b0], ebx
mov dword [ebp - 0x27ac], 1
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov esi, eax
cmp esi, ebx
je 0x41e311
lea ecx, [ebp - 0x2804]
push ecx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [ebp - 0x2794]
mov dword [ebp - 0x27c4], eax
mov dword [ebp - 0x27c8], eax
lea eax, [ebp - 0x27a8]
push eax
lea ecx, [ebp - 0x2804]
push ecx
push ebx
push ebx
push ebx
push 1
xor edx, edx
push ebx
mov word [ebp - 0x27d4], dx
push ebx
lea edx, [ebp - 0x44]
push edx
push ebx
mov dword [ebp - 0x27d8], 0x101
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov esi, eax
cmp esi, ebx
je 0x41e311
mov eax, dword [ebp - 0x27a8]
push 0x1f4
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x2798]
push ebx
lea ecx, [ebp - 0x27c0]
push ecx
push 0x2710
lea edx, [ebp - 0x2758]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, eax
cmp esi, ebx
je 0x41e311
lea ecx, [ebp - 0x2758]
push ecx
xor esi, esi
call dword [sym.imp.MSVCR100.dll_strlen]
add esp, 4
push eax
lea edx, [ebp - 0x2758]
push edx
lea ecx, [ebp - 0x2774]
call fcn.0040dda8
mov edi, dword [ebp - 0x27b8]
cmp dword [edi + 0x14], 0x10
mov ecx, dword [edi + 0x10]
jb 0x41e1be
mov eax, dword [edi]
jmp 0x41e1c0
mov eax, edi
push ecx
push eax
lea eax, [ebp - 0x2774]
push eax
xor eax, eax
call fcn.00415a50
cmp eax, ebx
jl 0x41e311
mov edi, dword [edi + 0x10]
push 0xffffffffffffffff
add edi, eax
push edi
lea ecx, [ebp - 0x2774]
push ecx
lea eax, [ebp - 0x2790]
call fcn.0040d403
mov esi, eax
lea edx, [ebp - 0x2774]
mov edi, 0x10
cmp edx, esi
je 0x41e270
cmp dword [ebp - 0x2760], edi
jb 0x41e21b
mov eax, dword [ebp - 0x2774]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x2760], 0xf
mov dword [ebp - 0x2764], ebx
mov byte [ebp - 0x2774], bl
cmp dword [esi + 0x14], edi
jae 0x41e24e
mov ecx, dword [esi + 0x10]
inc ecx
push ecx
lea edx, [ebp - 0x2774]
push esi
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
jmp 0x41e258
mov eax, dword [esi]
mov dword [ebp - 0x2774], eax
mov dword [esi], ebx
mov ecx, dword [esi + 0x10]
mov dword [ebp - 0x2764], ecx
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x2760], edx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
cmp dword [ebp - 0x277c], edi
jb 0x41e288
mov eax, dword [ebp - 0x2790]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0x2711
lea ecx, [ebp - 0x2758]
push ebx
push ecx
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x2774]
add esp, 0xc
cmp dword [ebp - 0x2760], edi
jae 0x41e2b1
lea eax, [ebp - 0x2774]
push eax
lea edx, [ebp - 0x2758]
push 0x2711
push edx
call dword [sym.imp.MSVCR100.dll_strcpy_s]
lea eax, [ebp - 0x2758]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41e2d0
sub eax, edx
mov edx, eax
je 0x41e30a
mov ecx, dword [ebp - 0x27bc]
mov al, byte [ebp + ebx - 0x2758]
cmp al, 0x30
jl 0x41e2f2
cmp al, 0x39
jle 0x41e302
cmp al, 0x61
jl 0x41e2fa
cmp al, 0x7a
jle 0x41e302
cmp al, 0x41
jl 0x41e305
cmp al, 0x5a
jg 0x41e305
mov byte [ecx], al
inc ecx
inc ebx
cmp ebx, edx
jb 0x41e2e3
mov esi, 1
jmp 0x41e316
mov edi, 0x10
mov eax, dword [ebp - 0x2794]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call ebx
mov ecx, dword [ebp - 0x2798]
push ecx
call ebx
mov edx, dword [ebp - 0x27a8]
push edx
call ebx
mov eax, dword [ebp - 0x27a4]
push eax
call ebx
cmp dword [ebp - 0x2760], edi
jb 0x41e358
mov ecx, dword [ebp - 0x2774]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00485d44
mov esp, ebp
pop ebp
ret