Function at 0x404a13
Capabilities:
Create pipe
Create thread
Create two anonymous pipes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x417240
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.00401041
add esp, 8
cmp eax, 0
jne 0x404a63
mov eax, str.cmd.exe
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404a5d
push ebx
call fcn.00405744
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov ebx, dword [0x417740]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x417740]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x417740]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x417740]
push 0x417738
push 0x417748
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x404ad3
push 6
call fcn.00405738
add esp, 4
mov dword [0x417744], eax
mov ebx, dword [0x41774c]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0xc
mov ebx, dword [0x41774c]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 1
mov ebx, dword [0x41774c]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov dword [ebp - 0xc], esp
push 0
push dword [0x41774c]
push 0x417758
push 0x417754
call dword [sym.imp.KERNEL32.dll_CreatePipe]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x404b48
push 6
call fcn.00405738
add esp, 4
mov dword [0x417750], eax
cmp dword [0x417754], 0
je 0x404b6b
cmp dword [0x417738], 0
je 0x404b6b
xor eax, eax
jmp 0x404b70
mov eax, 1
test eax, eax
je 0x404b7d
jmp 0x404d59
mov ebx, dword [0x41775c]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x44
mov dword [ebp - 0xc], esp
push dword [0x41775c]
call dword [0x417788]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x404bb4
push 6
call fcn.00405738
add esp, 4
mov ebx, dword [0x41775c]
add ebx, 0x3c
mov dword [ebp - 0xc], ebx
mov eax, dword [0x417758]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x41775c]
add ebx, 0x40
mov dword [ebp - 0xc], ebx
mov eax, dword [0x417758]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x41775c]
add ebx, 0x38
mov dword [ebp - 0xc], ebx
mov eax, dword [0x417748]
mov ebx, dword [ebp - 0xc]
mov dword [ebx], eax
mov ebx, dword [0x41775c]
add ebx, 0x30
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0
mov ebx, dword [0x41775c]
add ebx, 0x2c
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebx], 0x101
mov dword [ebp - 0xc], esp
push dword [0x417760]
push dword [0x41775c]
push 0
push 0
push 0
push 1
push 0
push 0
mov ebx, dword [ebp + 8]
push dword [ebx]
push 0
call dword [0x41778c]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x404c73
push 6
call fcn.00405738
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x404c8a
push 0
call fcn.00405720
add esp, 4
push 0x80000301
push 0
push 0x1000
push 1
mov ebx, 0x1bc
call fcn.00407050
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [0x417764]
test ebx, ebx
je 0x404cc2
push ebx
call fcn.00405744
add esp, 4
pop eax
mov dword [0x417764], eax
mov ebx, dword [0x417760]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x417730], eax
mov ebx, dword [0x417760]
add ebx, 4
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x417768], eax
mov ebx, dword [0x417760]
add ebx, 8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x41776c], eax
mov ebx, dword [0x417760]
add ebx, 0xc
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
mov dword [0x417770], eax
mov dword [ebp - 0xc], esp
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x404f1f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x404d59
push 6
call fcn.00405738
add esp, 4
mov esp, ebp
pop ebp
ret 8