Function at 0x10027f80
Capabilities:
Connect pipe
Create pipe
Create thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xa06c
call fcn.1004bc30
mov eax, dword [0x100a9080]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xa048], 0
mov dword [ebp - 0xa058], 0
mov dword [ebp - 0xa038], 0xffffffff
mov dword [ebp - 0xa03c], 0
mov dword [ebp - 0xa050], str..pipeAppMonD_DataWindow
push 1
mov ecx, 0x100ac1a8
call fcn.10028700
mov ecx, 0x100ac1a8
call fcn.100286e0
cmp eax, 1
jne 0x100281fc
push 0
lea eax, [ebp - 0xa04c]
push eax
push 1
push str.S:_ML__NW___LW_D:_A__0x12019f___WD_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorA]
mov dword [ebp - 0xa06c], eax
mov dword [ebp - 0xa068], 0xc
mov ecx, dword [ebp - 0xa04c]
mov dword [ebp - 0xa064], ecx
mov dword [ebp - 0xa060], 1
lea edx, [ebp - 0xa068]
push edx
push 0
push 0x200c
push 0x200c
push 0xff
push 6
push 3
mov eax, dword [ebp - 0xa050]
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0xa038], eax
cmp dword [ebp - 0xa038], 0xffffffff
jne 0x100280c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xa01c]
push ecx
call fcn.100284a0
add esp, 8
mov dword [ebp - 0xa054], eax
mov ecx, dword [ebp - 0xa054]
call fcn.100035e0
push eax
push str.CreateNamedPipe_failed:__s
lea edx, [ebp - 0x5004]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa01c]
call fcn.10003620
lea eax, [ebp - 0x5004]
push eax
push 0xfffffffffffffff5
call fcn.10023d00
mov ecx, eax
call fcn.1001e9a0
or eax, 0xffffffff
jmp 0x1002820a
push 0
mov ecx, dword [ebp - 0xa038]
push ecx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
je 0x100280e0
mov dword [ebp - 0xa044], 1
jmp 0x1002810f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x217
jne 0x100280f9
mov dword [ebp - 0xa040], 1
jmp 0x10028103
mov dword [ebp - 0xa040], 0
mov edx, dword [ebp - 0xa040]
mov dword [ebp - 0xa044], edx
mov eax, dword [ebp - 0xa044]
mov dword [ebp - 0xa048], eax
cmp dword [ebp - 0xa048], 0
je 0x100281ea
mov ecx, 0x100ac1a8
call fcn.100286e0
cmp eax, 1
je 0x10028149
mov ecx, dword [ebp - 0xa038]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100281fc
lea edx, [ebp - 0xa058]
push edx
push 0
mov eax, dword [ebp - 0xa038]
push eax
push 0x10028220
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xa03c], eax
cmp dword [ebp - 0xa03c], 0
jne 0x100281db
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xa034]
push ecx
call fcn.100284a0
add esp, 8
mov dword [ebp - 0xa05c], eax
mov ecx, dword [ebp - 0xa05c]
call fcn.100035e0
push eax
push str.CreateThread_failed:__s
lea edx, [ebp - 0xa004]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0xa034]
call fcn.10003620
lea eax, [ebp - 0xa004]
push eax
push 0xfffffffffffffff4
call fcn.10023d00
mov ecx, eax
call fcn.1001e9a0
or eax, 0xffffffff
jmp 0x1002820a
mov ecx, dword [ebp - 0xa03c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100281f7
mov edx, dword [ebp - 0xa038]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10027fd5
push 3
mov ecx, 0x100ac1a8
call fcn.10028700
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004a9fe
mov esp, ebp
pop ebp
ret