Function at 0x10005070
Capabilities:
Read file on windows
Read from mailslot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100453a8
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x1005fa60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 0xa0]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
test eax, eax
jne 0x100050d7
push str.4WJdTAaGM1RC6kg8BNk8hiuDauGVT9G11hz_KDUfvRCnHsSF1lHy0pk8Zhw
push eax
call fcn.10011650
add esp, 8
xor eax, eax
jmp 0x1000528e
push 0
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
test eax, eax
jne 0x1000510b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.O5qDrYw_kmtKTNpWagCD32rpkRQi4zPU0DkeZ6JP4YpUQx7rm8WkWonDWF4x58I52VQCFYugd0wMIoltk35W_qAmzcG69v
push 0
call fcn.10011650
add esp, 0xc
xor eax, eax
jmp 0x1000528e
cmp dword [ebp - 0x18], 0xffffffff
je 0x100050d0
cmp dword [edi + 0xd4], 8
lea eax, [edi + 0xc0]
jb 0x10005122
mov eax, dword [eax]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ebx, eax
test ebx, ebx
jne 0x10005151
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.rBzSpVZBqqfXb8jWLeBuCtln5kA55pm7Wki80n7K6DfvW8VCTfdTdtZxXoqDioSRf2ceUwzszHflYLdjGz4B5mweaI
push ebx
call fcn.10011650
add esp, 0xc
xor eax, eax
jmp 0x1000528e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
lea eax, [edi + 0x6c]
mov ecx, eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], eax
call fcn.100027a0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x10005261
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x18]
push str._CUwpExtSlotSvr::ReadSlot____cbMessage__d__Message__d__d_
push 4
call fcn.10011650
mov eax, dword [ebp - 0x18]
add esp, 0x14
test eax, eax
je 0x10005233
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x100052cb
xor eax, eax
mov word [esi], ax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push esi
push dword [edi + 0xa0]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100052ac
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x1000522c
push esi
lea ecx, [ebp - 0x58]
call fcn.10006350
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 4], 0
call fcn.10007470
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x44], 8
jb 0x10005218
push dword [ebp - 0x58]
call fcn.10018fac
add esp, 4
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push dword [edi + 0xa0]
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
test eax, eax
je 0x100052f4
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x10005180
mov esi, dword [ebp - 0x3c]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
call fcn.100027f0
mov ecx, dword [esi + 4]
mov eax, 0x2aaaaaab
sub ecx, dword [esi]
imul ecx
xor ecx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
sbb eax, eax
neg eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001811f
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.K8q3dEafmttIZ9U2x_oOkWeOdz3jroNZXpWvc8fjCngrlbZNbXr_NVnI3Tm3iwLvaf1Ge_Ve5TFVMy2spbbFmPM
push 0
call fcn.10011650
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x100052e1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.15C0xkyRtyCeAKMSc8ICWwbVjcZdwOo1fJyYWhbhXIiINZWWWHLTSxYdnTELuNBmVJuTwk_Q_CvBdwq4eNB4WNbY
push 0
call fcn.10011650
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
call fcn.100027f0
xor eax, eax
jmp 0x1000528e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.B0ScJk_R9CSnCnlaeJRershxSZbJSXlrpYWhbhd52PArGKUmfaVmpQFowylWM566eS9xumlyymMrwJQuMGRk60sdhpKL7
jmp 0x100052d7