Function at 0x41593a
Capabilities:
Create pipe
Create thread

Disassembly:
push 0xd4
mov eax, 0x56a7e8
call fcn.0053da79
mov eax, dword [ebp + 8]
push 0x2f
mov ebx, str.EventPipe.cpp
push ebx
mov dword [ebp - 0xd0], eax
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415969
push 0x2f
jmp 0x415979
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415984
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
inc eax
jmp 0x415986
mov eax, ebx
push 1
push 0x1b
push eax
lea esi, [ebp - 0x7c]
call fcn.00404b01
and dword [ebp - 4], 0
push str.CEventPipe::StartWaitEvent
push 0
mov ecx, eax
call fcn.00404bdf
mov edi, eax
call fcn.00402776
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, esi
call fcn.00404b6d
mov esi, dword [ebp - 0xd0]
cmp dword [esi + 4], 0xffffffff
je 0x4159cf
mov eax, dword [ebp + 0xc]
mov dword [esi + 8], eax
jmp 0x415c06
push 1
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor edi, edi
push edi
push edi
push 1
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
lea eax, [ebp - 0x28]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xdc]
push eax
push 0x4e20
mov eax, 0x1000
push eax
push eax
push 0xff
push 4
mov dword [ebp - 0xd4], edi
push 0x40000001
mov edi, str..pipeescanevent
push edi
mov dword [ebp - 0xdc], 0xc
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
push 0x2f
mov dword [esi + 4], eax
push ebx
cmp eax, 0xffffffff
je 0x415ba2
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415a4d
push 0x2f
jmp 0x415a5d
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415a68
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
inc eax
jmp 0x415a6a
mov eax, ebx
push 1
push 0x34
push eax
lea esi, [ebp - 0x7c]
call fcn.00404b01
push edi
push str.CreateNamedPipe_succeeded:__s
xor esi, esi
push esi
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.00404bdf
mov edi, eax
call fcn.0040cbe5
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x7c]
call fcn.00404b6d
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 0xd0]
push esi
push esi
push 1
push esi
mov dword [edi + 8], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [edi + 0x10], eax
lea eax, [ebp - 0xe0]
push eax
push esi
push edi
push 0x415d12
push esi
push esi
call fcn.0053cd1d
add esp, 0x18
push 0x2f
mov dword [edi + 0xc], eax
push ebx
cmp eax, esi
je 0x415b39
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415aee
push 0x2f
jmp 0x415afe
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415b09
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
inc eax
jmp 0x415b0b
mov eax, ebx
push 1
push 0x41
push eax
lea esi, [ebp - 0x7c]
call fcn.00404b01
push str.WaitEventDataThread_is_created
push 0
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.00404bdf
mov edi, eax
call fcn.00402776
jmp 0x415bf9
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415b48
push 0x2f
jmp 0x415b58
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415b63
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
inc eax
jmp 0x415b65
mov eax, ebx
push 4
pop edi
push edi
push 0x43
push eax
lea esi, [ebp - 0xcc]
call fcn.00404b01
mov esi, eax
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Creating_WaitEventDataThread_failed___d_
push 0
mov ecx, esi
call fcn.00404bdf
mov edi, eax
call fcn.00402776
pop ecx
pop ecx
lea ecx, [ebp - 0xcc]
jmp 0x415bfd
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415bb1
push 0x2f
jmp 0x415bc1
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
test eax, eax
je 0x415bcc
push 0x5c
push ebx
call fcn.005392c0
pop ecx
pop ecx
inc eax
jmp 0x415bce
mov eax, ebx
push 4
push 0x36
push eax
lea esi, [ebp - 0x7c]
call fcn.00404b01
push edi
push str.CreateNamedPipe_failed:__s
push 0
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00404bdf
mov edi, eax
call fcn.0040cbe5
pop ecx
pop ecx
lea ecx, [ebp - 0x7c]
or dword [ebp - 4], 0xffffffff
call fcn.00404b6d
call fcn.0053dafc
ret 8