Function at 0x10034a20
Capabilities:
Connect pipe
Create pipe
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xa08c
call fcn.10037d80
mov eax, dword [0x10094084]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0xa03c], 0
mov dword [ebp - 0xa014], 0
mov dword [ebp - 0xa02c], 0
mov dword [ebp - 0xa030], 0
mov dword [ebp - 0xa044], str..pipeAppMonD_DataWindow
mov dword [ebp - 0xa008], 1
lea eax, [ebp - 0xa008]
push eax
call fcn.10034730
add esp, 4
mov esi, eax
push 0x100958fc
call fcn.10034720
add esp, 4
xchg dword [eax], esi
push 0x100958fc
call fcn.10034720
add esp, 4
mov dword [ebp - 0xa040], eax
mov ecx, dword [ebp - 0xa040]
mov edx, dword [ecx]
mov dword [ebp - 0xa00c], edx
nop
cmp dword [ebp - 0xa00c], 1
jne 0x10034d47
push 0
lea eax, [ebp - 0xa01c]
push eax
push 1
push str.S:_ML__NW___LW_D:_A__0x12019f___WD_
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorA
mov dword [ebp - 0xa05c], eax
mov dword [ebp - 0xa028], 0xc
mov ecx, dword [ebp - 0xa01c]
mov dword [ebp - 0xa024], ecx
mov dword [ebp - 0xa020], 1
lea edx, [ebp - 0xa028]
push edx
push 0
push 0x200c
push 0x200c
push 0xff
push 6
push 3
mov eax, dword [ebp - 0xa044]
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0xa02c], eax
cmp dword [ebp - 0xa02c], 0xffffffff
jne 0x10034ba5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xa074]
push ecx
call fcn.100350a0
add esp, 8
mov dword [ebp - 0xa048], eax
mov ecx, dword [ebp - 0xa048]
call fcn.1001b550
push eax
push str.CreateNamedPipe_failed:__s
lea edx, [ebp - 0x5004]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa074]
call fcn.1001b760
call fcn.10034510
mov dword [ebp - 0xa04c], eax
lea eax, [ebp - 0x5004]
push eax
push 0xfffffffffffffff5
mov ecx, dword [ebp - 0xa04c]
call fcn.1002efe0
or eax, 0xffffffff
jmp 0x10034d92
push 0
mov ecx, dword [ebp - 0xa02c]
push ecx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
je 0x10034bc4
mov dword [ebp - 0xa038], 1
jmp 0x10034bf3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x217
jne 0x10034bdd
mov dword [ebp - 0xa034], 1
jmp 0x10034be7
mov dword [ebp - 0xa034], 0
mov edx, dword [ebp - 0xa034]
mov dword [ebp - 0xa038], edx
mov eax, dword [ebp - 0xa038]
mov dword [ebp - 0xa03c], eax
cmp dword [ebp - 0xa03c], 0
je 0x10034d2b
push 0x100958fc
call fcn.10034720
add esp, 4
mov dword [ebp - 0xa050], eax
mov ecx, dword [ebp - 0xa050]
mov edx, dword [ecx]
mov dword [ebp - 0xa010], edx
nop
cmp dword [ebp - 0xa010], 1
je 0x10034c65
cmp dword [ebp - 0xa02c], 0
je 0x10034c56
cmp dword [ebp - 0xa02c], 0xffffffff
je 0x10034c56
mov eax, dword [ebp - 0xa02c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
jmp 0x10034d47
lea ecx, [ebp - 0xa014]
push ecx
push 0
mov edx, dword [ebp - 0xa02c]
push edx
push 0x10034db0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xa030], eax
cmp dword [ebp - 0xa030], 0
jne 0x10034d1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0xa08c]
push eax
call fcn.100350a0
add esp, 8
mov dword [ebp - 0xa054], eax
mov ecx, dword [ebp - 0xa054]
call fcn.1001b550
push eax
push str.CreateThread_failed:__s
lea ecx, [ebp - 0xa004]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa08c]
call fcn.1001b760
mov edx, dword [ebp - 0xa02c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
call fcn.10034510
mov dword [ebp - 0xa058], eax
lea eax, [ebp - 0xa004]
push eax
push 0xfffffffffffffff4
mov ecx, dword [ebp - 0xa058]
call fcn.1002efe0
or eax, 0xffffffff
jmp 0x10034d92
mov ecx, dword [ebp - 0xa030]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10034d42
mov edx, dword [ebp - 0xa02c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
jmp 0x10034a94
mov dword [ebp - 0xa018], 3
lea eax, [ebp - 0xa018]
push eax
call fcn.10034730
add esp, 4
mov esi, eax
push 0x100958fc
call fcn.10034720
add esp, 4
xchg dword [eax], esi
cmp dword [ebp - 0xa02c], 0
je 0x10034d90
cmp dword [ebp - 0xa02c], 0xffffffff
je 0x10034d90
mov ecx, dword [ebp - 0xa02c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100375db
mov esp, ebp
pop ebp
ret