Function at 0x40ff2e
Capabilities:
Check if file exists
Create pipe
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x466750]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, edx
mov byte [ebp - 0x39], 0
push esi
push edi
mov dword [ebp - 0x4c], ebx
mov esi, ecx
cmp dword [ebx + 0x14], 8
jb 0x40ff56
mov eax, dword [ebx]
jmp 0x40ff58
mov eax, ebx
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x40ff6a
xor al, al
jmp 0x41011a
mov edx, ebx
lea ecx, [ebp - 0x20]
call fcn.0040f49d
cmp dword [ebp - 0x10], 0
je 0x410107
mov edi, str..etl
push edi
call fcn.004011a9
pop ecx
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.00402a6a
cmp dword [esi + 0x14], 8
jb 0x40ff9c
mov esi, dword [esi]
push ecx
push ecx
mov ecx, esi
call fcn.00413e3f
mov dword [ebp - 0x44], eax
pop ecx
pop ecx
test eax, eax
je 0x410107
mov edi, dword [ebp + 8]
mov esi, dword [edi]
cmp esi, dword [edi + 4]
je 0x41000a
mov ebx, eax
mov edx, esi
lea ecx, [ebp - 0x38]
call fcn.0040f49d
cmp dword [ebp - 0x28], 0
je 0x40fff3
cmp dword [esi + 0x14], 8
jb 0x40ffd8
mov eax, dword [esi]
jmp 0x40ffda
mov eax, esi
cmp dword [ebp - 0x24], 8
lea edx, [ebp - 0x38]
push 2
cmovae edx, dword [ebp - 0x38]
push ecx
push eax
mov ecx, ebx
call fcn.00413f50
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x38]
call fcn.00402c5d
add esi, 0x18
cmp esi, dword [edi + 4]
jne 0x40ffbe
mov ebx, dword [ebp - 0x4c]
xor eax, eax
push eax
push eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4100fd
cmp dword [ebp - 0x48], 0
je 0x4100ee
push 0x28
call fcn.0042f91f
pop ecx
mov edi, eax
xor ecx, ecx
mov esi, 0x80000
test edi, edi
je 0x41006d
mov byte [edi], cl
xor eax, eax
mov dword [edi + 4], esi
mov dword [edi + 8], 0x1f4
mov dword [edi + 0xc], ecx
mov dword [edi + 0x24], 7
mov dword [edi + 0x20], ecx
mov word [edi + 0x10], ax
jmp 0x41006f
mov edi, ecx
mov byte [edi], cl
mov eax, dword [ebp - 0x48]
mov dword [edi + 0xc], eax
lea eax, [edi + 0x10]
cmp eax, ebx
je 0x41008b
push 0xffffffffffffffff
push ecx
push ebx
mov ecx, eax
call fcn.00402ed6
xor ecx, ecx
push ecx
push ecx
push edi
push 0x40fdd9
push ecx
mov dword [edi + 8], 0x1f4
push ecx
mov dword [edi + 4], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [ebp - 0xc], 8
lea edx, [ebp - 0x20]
push 1
cmovae edx, dword [ebp - 0x20]
mov esi, eax
push ecx
push dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
call fcn.00413f50
add esp, 0xc
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [edi]
lea ecx, [edi + 0x10]
push 0
push 1
mov byte [ebp - 0x39], al
call fcn.00402c5d
push edi
call fcn.0042ee49
mov eax, dword [ebp - 0x40]
pop ecx
test eax, eax
je 0x4100fd
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x44]
call fcn.00413f83
jmp 0x41010b
mov byte [ebp - 0x39], 0
push 0
push 1
lea ecx, [ebp - 0x20]
call fcn.00402c5d
mov al, byte [ebp - 0x39]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042ee4e
mov esp, ebp
pop ebp
ret