Function at 0x100421b0
Capabilities:
Connect pipe
Create pipe
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xa09c
call fcn.100457c0
mov eax, dword [0x100a7084]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0xa03c], 0
mov dword [ebp - 0xa014], 0
mov dword [ebp - 0xa02c], 0
mov dword [ebp - 0xa030], 0
mov dword [ebp - 0xa04c], str..pipeAppMonD_DataWindow
mov dword [ebp - 0xa008], 1
lea eax, [ebp - 0xa008]
push eax
call fcn.10041e10
add esp, 4
mov esi, eax
push 0x100a88fc
call fcn.10041e00
add esp, 4
xchg dword [eax], esi
push 0x100a88fc
call fcn.10041e00
add esp, 4
mov dword [ebp - 0xa040], eax
mov ecx, dword [ebp - 0xa040]
mov edx, dword [ecx]
mov dword [ebp - 0xa00c], edx
nop
mov eax, dword [ebp - 0xa00c]
mov dword [ebp - 0xa044], eax
mov ecx, dword [ebp - 0xa044]
mov dword [ebp - 0xa048], ecx
cmp dword [ebp - 0xa048], 1
jne 0x10042507
push 0
lea edx, [ebp - 0xa01c]
push edx
push 1
push str.S:_ML__NW___LW_D:_A__0x12019f___WD_
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorA
mov dword [ebp - 0xa06c], eax
mov dword [ebp - 0xa028], 0xc
mov eax, dword [ebp - 0xa01c]
mov dword [ebp - 0xa024], eax
mov dword [ebp - 0xa020], 1
lea ecx, [ebp - 0xa028]
push ecx
push 0
push 0x200c
push 0x200c
push 0xff
push 6
push 3
mov edx, dword [ebp - 0xa04c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0xa02c], eax
cmp dword [ebp - 0xa02c], 0xffffffff
jne 0x1004234d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0xa084]
push eax
call fcn.10042860
add esp, 8
mov dword [ebp - 0xa050], eax
mov ecx, dword [ebp - 0xa050]
call fcn.100228f0
push eax
push str.CreateNamedPipe_failed:__s
lea ecx, [ebp - 0x5004]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa084]
call fcn.100223b0
call fcn.10041b20
mov dword [ebp - 0xa054], eax
lea edx, [ebp - 0x5004]
push edx
push 0xfffffffffffffff5
mov ecx, dword [ebp - 0xa054]
call fcn.1003ae30
or eax, 0xffffffff
jmp 0x10042552
push 0
mov eax, dword [ebp - 0xa02c]
push eax
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
je 0x1004236c
mov dword [ebp - 0xa038], 1
jmp 0x1004239b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x217
jne 0x10042385
mov dword [ebp - 0xa034], 1
jmp 0x1004238f
mov dword [ebp - 0xa034], 0
mov ecx, dword [ebp - 0xa034]
mov dword [ebp - 0xa038], ecx
mov edx, dword [ebp - 0xa038]
mov dword [ebp - 0xa03c], edx
cmp dword [ebp - 0xa03c], 0
je 0x100424eb
push 0x100a88fc
call fcn.10041e00
add esp, 4
mov dword [ebp - 0xa058], eax
mov eax, dword [ebp - 0xa058]
mov ecx, dword [eax]
mov dword [ebp - 0xa010], ecx
nop
mov edx, dword [ebp - 0xa010]
mov dword [ebp - 0xa05c], edx
mov eax, dword [ebp - 0xa05c]
mov dword [ebp - 0xa060], eax
cmp dword [ebp - 0xa060], 1
je 0x10042425
cmp dword [ebp - 0xa02c], 0
je 0x10042416
cmp dword [ebp - 0xa02c], 0xffffffff
je 0x10042416
mov ecx, dword [ebp - 0xa02c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
jmp 0x10042507
lea edx, [ebp - 0xa014]
push edx
push 0
mov eax, dword [ebp - 0xa02c]
push eax
push 0x10042570
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xa030], eax
cmp dword [ebp - 0xa030], 0
jne 0x100424dc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xa09c]
push ecx
call fcn.10042860
add esp, 8
mov dword [ebp - 0xa064], eax
mov ecx, dword [ebp - 0xa064]
call fcn.100228f0
push eax
push str.CreateThread_failed:__s
lea edx, [ebp - 0xa004]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa09c]
call fcn.100223b0
mov eax, dword [ebp - 0xa02c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
call fcn.10041b20
mov dword [ebp - 0xa068], eax
lea ecx, [ebp - 0xa004]
push ecx
push 0xfffffffffffffff4
mov ecx, dword [ebp - 0xa068]
call fcn.1003ae30
or eax, 0xffffffff
jmp 0x10042552
mov edx, dword [ebp - 0xa030]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10042502
mov eax, dword [ebp - 0xa02c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa02c], 0
jmp 0x10042224
mov dword [ebp - 0xa018], 3
lea ecx, [ebp - 0xa018]
push ecx
call fcn.10041e10
add esp, 4
mov esi, eax
push 0x100a88fc
call fcn.10041e00
add esp, 4
xchg dword [eax], esi
cmp dword [ebp - 0xa02c], 0
je 0x10042550
cmp dword [ebp - 0xa02c], 0xffffffff
je 0x10042550
mov edx, dword [ebp - 0xa02c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10044f41
mov esp, ebp
pop ebp
ret