Function at 0x40da70
Capabilities:
Create pipe
Create process on windows
Create thread
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
call fcn.00406800
test eax, eax
je 0x40de3f
mov edx, dword [eax]
mov ecx, eax
push esi
push edi
call dword [edx + 0xc]
mov esi, dword [ebp + 0x10]
lea ecx, [ebp - 4]
add eax, 0x10
push esi
mov dword [ebp - 4], eax
call fcn.00404590
test al, al
jne 0x40dac9
test esi, esi
jne 0x40daaa
xor ecx, ecx
jmp 0x40dabf
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40dab0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 4]
call fcn.00404740
call fcn.00406800
test eax, eax
je 0x40de3f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp + 0x10]
push str._noui
mov dword [ebp + 0x10], eax
call fcn.00404590
test al, al
jne 0x40db03
push 5
push str._noui
lea ecx, [ebp + 0x10]
call fcn.00404740
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x40de3f
mov ecx, dword [ebp - 4]
mov edx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x40db39
test si, si
je 0x40db35
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x40db39
add ecx, 4
add edx, 4
test si, si
jne 0x40db13
xor esi, esi
jmp 0x40db3e
sbb esi, esi
or esi, 1
or edi, 0xffffffff
lea edx, [eax - 0x10]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40db58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
jne 0x40db65
mov al, 1
mov ecx, 0x446d35
xchg byte [ecx], al
push str.Local_fast_
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, 0x446d74
xchg dword [esi], eax
mov eax, dword [0x446d74]
test eax, eax
je 0x40db98
mov eax, dword [0x446d74]
push eax
call dword [sym.imp.KERNEL32.dll_PulseEvent]
jmp 0x40de1d
push str.Local_fast_
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
xchg dword [esi], eax
push 0
push 0
push 0x40da50
call fcn.0041fbeb
add esp, 0xc
call fcn.004094c0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x4c]
push eax
movups xmmword [ebp - 0x4c], xmm0
movups xmmword [ebp - 0x3c], xmm0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
movups xmm0, xmmword [ebp - 0x4c]
mov esi, dword [ebp - 0x2c]
push 0x446db8
movups xmmword [ebp - 0x18], xmm0
movups xmm0, xmmword [ebp - 0x3c]
movups xmmword [ebp - 0x28], xmm0
call fcn.00412dd2
add esp, 4
test eax, eax
jne 0x40de5a
cmp dword [0x446de4], 0x7fffffff
push ebx
je 0x40de49
movups xmm0, xmmword [ebp - 0x18]
push 0x446db8
mov dword [0x446e5c], esi
movups xmmword [0x446e3c], xmm0
movups xmm0, xmmword [ebp - 0x28]
movups xmmword [0x446e4c], xmm0
call fcn.00412df7
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [ebp - 8]
mov ecx, 0x446d3c
xchg dword [ecx], eax
call fcn.00407d00
call fcn.00412080
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.00404650
mov esi, eax
lea edx, [esi + 0x10]
test edx, edx
jne 0x40dc82
xor ecx, ecx
jmp 0x40dc96
mov ecx, edx
lea ebx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40dc87
sub ecx, ebx
sar ecx, 1
push ecx
push edx
mov ecx, 0x446d18
call fcn.00404740
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x40dcb6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x446db8
call fcn.00412dd2
add esp, 4
test eax, eax
jne 0x40de5a
cmp dword [0x446de4], 0x7fffffff
je 0x40de49
mov ecx, dword [0x446e38]
lea ecx, [ecx - 0x10]
call fcn.00404650
push 0x446db8
mov esi, eax
call fcn.00412df7
mov ebx, dword [0x446d1c]
add esp, 4
add ebx, 0xfffffff0
cmp esi, ebx
je 0x40dd4f
cmp dword [ebx + 0xc], 0
jl 0x40dd3e
mov eax, dword [esi]
cmp eax, dword [ebx]
jne 0x40dd3e
mov ecx, esi
call fcn.00404650
mov dword [ebp + 0x10], eax
lea edx, [ebx + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40dd34
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp + 0x10]
add eax, 0x10
mov dword [0x446d1c], eax
jmp 0x40dd4f
push dword [esi + 4]
lea eax, [esi + 0x10]
mov ecx, 0x446d1c
push eax
call fcn.00404740
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
pop ebx
test eax, eax
jg 0x40dd64
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
xor ecx, ecx
call fcn.00409630
push 0
push 0
push 0x40bb60
call fcn.0041fbeb
add esp, 0xc
mov ecx, 0x446d80
xchg dword [ecx], eax
push 0
push 0
push 0x4000
push 0x4000
push 1
push 0
push 3
push str..pipe_veryfastapp
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov ecx, 0x446d78
xchg dword [ecx], eax
push 0
push 0
push 0x40d880
call fcn.0041fbeb
add esp, 0xc
mov ecx, 0x446d7c
xchg dword [ecx], eax
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
mov al, byte [0x446d35]
test al, al
jne 0x40ddf9
call fcn.0040d890
push 1
push 0
push str.ui.
push str.nwjs_nw
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40de02
mov al, 1
mov ecx, 0x446d31
xchg byte [ecx], al
mov al, byte [0x446d30]
test al, al
je 0x40de1d
nop dword [eax + eax]
push 0x64
call esi
mov al, byte [0x446d30]
test al, al
jne 0x40de10
mov edx, dword [ebp - 4]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x40de35
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.004065b0
push 6
mov dword [0x446de4], 0x7ffffffe
call fcn.00412b56
push 5
call fcn.00412b56
int3