Function at 0x4034f0
Capabilities:
Create pipe
Create process on windows
Read file on windows
Write and execute a file
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x4262ac]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a4], 0
xor eax, eax
mov word [ebp - 0x198], ax
push 0x18e
push 0
lea ecx, [ebp - 0x196]
push ecx
call fcn.00415360
add esp, 0xc
cmp dword [0x428230], 0
je 0x403548
cmp dword [0x428220], 0
jne 0x40354d
jmp 0x4037b6
push 0x44
push 0
lea edx, [ebp - 0x210]
push edx
call fcn.00415360
add esp, 0xc
mov dword [ebp - 0x210], 0x44
xor eax, eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0xc
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x19c]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x4035dc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x42321c
push str.__s__Error__CreatePipe_error:__d
call fcn.00402b80
add esp, 0xc
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1d4], edx
mov dword [ebp - 0x1e4], 0x100
push 0
push 1
mov eax, dword [ebp - 0x19c]
push eax
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea ecx, [ebp - 0x1c0]
push ecx
lea edx, [ebp - 0x210]
push edx
push 0
push 0
push 0x8000000
push 1
push 0
push 0
mov eax, dword [ebp + 8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jne 0x403665
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DebugOutputCmd
push str.__s__Error__Create_debug_process_error:__d
call fcn.00402b80
add esp, 0xc
jmp 0x4037b6
cmp dword [ebp - 0x1a4], 0
je 0x40367b
mov ecx, dword [ebp - 0x1a4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x1a0]
push edx
push 4
push 0x423268
mov eax, dword [0x428220]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 1
test ecx, ecx
je 0x403769
push 0
lea edx, [ebp - 0x1c8]
push edx
push 0xc8
lea eax, [ebp - 0x198]
push eax
mov ecx, dword [ebp - 0x19c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4036d3
cmp dword [ebp - 0x1c8], 0
jne 0x4036d8
jmp 0x403769
lea edx, [ebp - 0x198]
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x214]
add eax, 2
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x214]
mov dx, word [ecx]
mov word [ebp - 0x21a], dx
add dword [ebp - 0x214], 2
cmp word [ebp - 0x21a], 0
jne 0x4036f3
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x218]
sar eax, 1
mov dword [ebp - 0x220], eax
push 0
lea ecx, [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x220]
shl edx, 1
push edx
lea eax, [ebp - 0x198]
push eax
mov ecx, dword [0x428220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x100
push 0
lea edx, [ebp - 0x198]
push edx
call fcn.00415360
add esp, 0xc
jmp 0x403697
push 0
lea eax, [ebp - 0x1a0]
push eax
push 4
push str._r_n_r_n
mov ecx, dword [0x428220]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [ebp - 0x19c], 0
je 0x40379c
mov edx, dword [ebp - 0x19c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1bc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040c2df
mov esp, ebp
pop ebp
ret