Function at 0x10004da0
Capabilities:
Create mailslot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10045378
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x1005fa60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor eax, eax
mov dword [ebp - 0x2c], 7
push eax
push 0x100527d4
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.100085a0
push 1
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.10004560
test eax, eax
jne 0x10004e1b
push str.amq7rjinpkZg5VVRbSuMf48fFeOgksBXjrYFqoZlx8zaQitgfONWywTMejLgxtSraWc3jz
push eax
call fcn.10011650
add esp, 8
xor esi, esi
jmp 0x10004f4e
xor eax, eax
mov dword [ebp - 0x14], 7
push eax
push 0x100527d4
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.100085a0
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
mov ecx, edi
call fcn.100046d0
test eax, eax
jne 0x10004e66
push str.40_1bGlpPZIp5kk39piB4QHbvzmBNpwRaOUpCRHPksJXwfwvdoaxNFqsVdDSb5GCV3jTXT6NYA
push eax
call fcn.10011650
add esp, 8
xor esi, esi
jmp 0x10004f29
push 0x100527d4
lea ecx, [ebp - 0x58]
call fcn.10006350
push 1
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
mov ecx, edi
call fcn.10004840
test eax, eax
jne 0x10004e98
push str.4EVaLZ0t8F0s0aeY52iXgGLQHq4WYsIYRkiy_44c6dgydqWwDl65fpmWKv_KHlLXUFI2rH1yuA
push eax
call fcn.10011650
add esp, 8
jmp 0x10004f02
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [ebp - 0x58]
push eax
call fcn.10007ef0
lea ecx, [edi + 0x6c]
call fcn.100025f0
test eax, eax
jne 0x10004ed8
push str.lW5_tIUjr9Mx2VbeU1v3aa15dyYY7JI4ollqkTmxK8bRgAlpDG0mkOs5SaRQjJ5n_sN4dd9VW314qUk
push eax
call fcn.10011650
add esp, 8
jmp 0x10004f02
push 1
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
jne 0x10004f7c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.EqkQv7QoWDKFo0hua4wFSpuLEbLAINlx3lNVoTa3ClQoAuCgh6wAXpJVm449uZdHUNNKfWsRminaV3Cr67HyUo2XPMoUqglL8AddeZ2tzE7_nD1O6CTO
push 0
call fcn.10011650
add esp, 0xc
xor esi, esi
cmp dword [ebp - 0x44], 8
jb 0x10004f15
push dword [ebp - 0x58]
call fcn.10018fac
add esp, 4
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
cmp dword [ebp - 0x14], 8
jb 0x10004f3a
push dword [ebp - 0x28]
call fcn.10018fac
add esp, 4
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp dword [ebp - 0x2c], 8
jb 0x10004f5f
push dword [ebp - 0x40]
call fcn.10018fac
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001811f
mov esp, ebp
pop ebp
ret
push 0
push 0
push 1
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x10004fa1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.7p45brZAvYM7g49RYOVPbCNCpzzeQAvupIPOG8zSC48nnBhk5AZASJabxk_HyzBjnKoIf6BTlNNm96VffdpcWnOPGDPdkVJFqq3RU9bifNdFeEn8
jmp 0x10004ef8
push 0xc
call fcn.100190e8
mov esi, eax
add esp, 4
test esi, esi
je 0x10004f02
lea eax, [ebp - 0x6c]
mov dword [esi], 0xc
push esi
mov dword [esi + 4], eax
lea ecx, [ebp - 0x40]
mov dword [esi + 8], 1
cmp dword [ebp - 0x2c], 8
push 0xffffffffffffffff
cmovae ecx, dword [ebp - 0x40]
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [edi + 0xa0], eax
push esi
cmp eax, 0xffffffff
jne 0x10005004
call fcn.10018fac
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.wEirkA1LhEiMqCO4l21ixAMEHqkWIsKcTkWy_44c58s80mwdrjzdSQvupaMdFcG0MoPHIO4a9kJ8zXrkN381AeazDhJarFQ9g
jmp 0x10004ef8
call fcn.10018fac
add esp, 4
mov dword [edi + 0xa4], 1
lea ecx, [edi + 0xa8]
call fcn.100064e0
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
lea ecx, [edi + 0xa8]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.10006490
lea ecx, [edi + 0xc0]
call fcn.100064e0
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [edi + 0xc0]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.10006490
mov esi, 1
jmp 0x10004f04