Function at 0x10032700
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read file on windows
Read pipe

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x28d4
call fcn.1004a620
mov eax, dword [0x10269114]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
cmp dword [ebp + 8], 0
je 0x1003272b
cmp dword [ebp + 0xc], 0
je 0x1003272b
cmp dword [ebp + 0x14], 0
jne 0x10032732
xor eax, eax
jmp 0x10032be6
mov dword [ebp - 0x2860], 0
mov dword [ebp - 0x2830], 0
mov dword [ebp - 0x2834], 0
xor eax, eax
mov dword [ebp - 0x287c], eax
mov dword [ebp - 0x2878], eax
mov dword [ebp - 0x2874], eax
mov dword [ebp - 0x287c], 0xc
mov dword [ebp - 0x2878], 0
mov dword [ebp - 0x2874], 1
push 0
lea ecx, [ebp - 0x287c]
push ecx
lea edx, [ebp - 0x2834]
push edx
lea eax, [ebp - 0x2830]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
je 0x10032be0
push 0x44
push 0
lea ecx, [ebp - 0x28d4]
push ecx
call fcn.1004e550
add esp, 0xc
mov dword [ebp - 0x28d4], 0x44
lea edx, [ebp - 0x28d4]
push edx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [ebp - 0x2834]
mov dword [ebp - 0x2894], eax
mov ecx, dword [ebp - 0x2834]
mov dword [ebp - 0x2898], ecx
movzx edx, byte [ebp + 0x1c]
test edx, edx
je 0x100327fd
mov dword [ebp - 0x284c], 1
jmp 0x10032807
mov dword [ebp - 0x284c], 0
mov ax, word [ebp - 0x284c]
mov word [ebp - 0x28a4], ax
mov dword [ebp - 0x28a8], 0x101
xor ecx, ecx
mov dword [ebp - 0x2870], ecx
mov dword [ebp - 0x286c], ecx
mov dword [ebp - 0x2868], ecx
mov dword [ebp - 0x2864], ecx
mov dword [ebp - 0x2870], 0
mov dword [ebp - 0x286c], 0
mov byte [ebp - 0x280d], 0
push 0x802
push 0
lea edx, [ebp - 0x808]
push edx
call fcn.1004e550
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x100328e2
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2840], eax
lea ecx, [ebp - 0x808]
mov dword [ebp - 0x2820], ecx
mov edx, dword [ebp - 0x2820]
mov dword [ebp - 0x288c], edx
mov eax, dword [ebp - 0x2840]
mov cx, word [eax]
mov word [ebp - 0x2810], cx
mov edx, dword [ebp - 0x2820]
mov ax, word [ebp - 0x2810]
mov word [edx], ax
mov ecx, dword [ebp - 0x2840]
add ecx, 2
mov dword [ebp - 0x2840], ecx
mov edx, dword [ebp - 0x2820]
add edx, 2
mov dword [ebp - 0x2820], edx
cmp word [ebp - 0x2810], 0
jne 0x10032891
mov byte [ebp - 0x280d], 1
jmp 0x1003294b
push 0xffffffffffffffff
push 1
push 0x5c
mov eax, dword [ebp + 0x14]
push eax
call fcn.100335f0
add esp, 0x10
mov dword [ebp - 0x2850], eax
cmp dword [ebp - 0x2850], 0
je 0x1003294b
mov ecx, dword [ebp - 0x2850]
sub ecx, dword [ebp + 0x14]
sar ecx, 1
mov dword [ebp - 0x2844], ecx
cmp dword [ebp - 0x2844], 0x400
jbe 0x1003292a
mov dword [ebp - 0x2844], 0x400
mov edx, dword [ebp - 0x2844]
push edx
mov eax, dword [ebp + 0x14]
push eax
lea ecx, [ebp - 0x808]
push ecx
call fcn.10050780
add esp, 0xc
mov byte [ebp - 0x280d], 1
push 0x2002
push 0
lea edx, [ebp - 0x280c]
push edx
call fcn.1004e550
add esp, 0xc
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2848], eax
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x2824], ecx
mov edx, dword [ebp - 0x2824]
mov dword [ebp - 0x2890], edx
mov eax, dword [ebp - 0x2848]
mov cx, word [eax]
mov word [ebp - 0x2812], cx
mov edx, dword [ebp - 0x2824]
mov ax, word [ebp - 0x2812]
mov word [edx], ax
mov ecx, dword [ebp - 0x2848]
add ecx, 2
mov dword [ebp - 0x2848], ecx
mov edx, dword [ebp - 0x2824]
add edx, 2
mov dword [ebp - 0x2824], edx
cmp word [ebp - 0x2812], 0
jne 0x10032982
lea eax, [ebp - 0x280c]
add eax, 0xfffffffe
mov dword [ebp - 0x2828], eax
mov ecx, dword [ebp - 0x2828]
mov dx, word [ecx + 2]
mov word [ebp - 0x2836], dx
add dword [ebp - 0x2828], 2
cmp word [ebp - 0x2836], 0
jne 0x100329d9
mov edi, dword [ebp - 0x2828]
mov eax, dword [0x101dce3c]
mov dword [edi], eax
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x2818], ecx
mov edx, dword [ebp - 0x2818]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x2818]
mov cx, word [eax]
mov word [ebp - 0x2838], cx
add dword [ebp - 0x2818], 2
cmp word [ebp - 0x2838], 0
jne 0x10032a1d
mov edx, dword [ebp - 0x2818]
sub edx, dword [ebp - 0x2854]
mov eax, dword [ebp - 0x2854]
mov dword [ebp - 0x2880], eax
mov dword [ebp - 0x2884], edx
lea ecx, [ebp - 0x280c]
add ecx, 0xfffffffe
mov dword [ebp - 0x282c], ecx
mov edx, dword [ebp - 0x282c]
mov ax, word [edx + 2]
mov word [ebp - 0x283a], ax
add dword [ebp - 0x282c], 2
cmp word [ebp - 0x283a], 0
jne 0x10032a6b
mov edi, dword [ebp - 0x282c]
mov esi, dword [ebp - 0x2880]
mov edx, dword [ebp - 0x2884]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [ebp - 0x280d]
test eax, eax
je 0x10032ac6
lea ecx, [ebp - 0x808]
mov dword [ebp - 0x2858], ecx
jmp 0x10032ad0
mov dword [ebp - 0x2858], 0
lea edx, [ebp - 0x2870]
push edx
lea eax, [ebp - 0x28d4]
push eax
mov ecx, dword [ebp - 0x2858]
push ecx
push 0
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x280c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x10032bc6
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp - 0x2870]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x2888], eax
cmp dword [ebp - 0x2888], 0
jne 0x10032bac
mov dword [ebp - 0x281c], 0
push 0
lea edx, [ebp - 0x281c]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x2830]
push eax
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test eax, eax
je 0x10032bac
mov ecx, dword [ebp - 0x281c]
cmp ecx, dword [ebp + 0xc]
jbe 0x10032b68
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x281c], edx
cmp dword [ebp - 0x281c], 0
jbe 0x10032bac
mov dword [ebp - 0x285c], 0
push 0
lea eax, [ebp - 0x285c]
push eax
mov ecx, dword [ebp - 0x281c]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x2830]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10032bac
mov ecx, dword [ebp - 0x285c]
mov dword [ebp - 0x2860], ecx
mov edx, dword [ebp - 0x2870]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x286c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x2830]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x2834]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2860]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100499a5
mov esp, ebp
pop ebp
ret