Function at 0x140011d9c
Capabilities:
Accept command line arguments
Create mailslot
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
mov eax, 0x1820
call fcn.140030b10
sub rsp, rax
mov rax, qword [0x14003f9c0]
xor rax, rsp
mov qword [rsp + 0x1810], rax
mov r12b, cl
mov ecx, 0x1770
call fcn.140015fd4
mov qword [0x14004cfa0], rax
call fcn.140005c5c
lea rcx, [rsp + 0xa0]
mov rdx, rax
xor r8d, r8d
call fcn.140006ee4
mov ecx, 0x9e
call fcn.140004658
mov rcx, qword [0x14004cfa0]
xor edi, edi
lea rdx, str.Global_
cmp eax, edi
jne 0x140011e21
lea rdx, str.Local_
call fcn.1400166d0
mov rcx, qword [0x14004cfa0]
call fcn.140016100
lea rdx, [rsp + 0xa0]
add rax, qword [0x14004cfa0]
mov rcx, rax
call fcn.140011904
mov ecx, 0x2715
call fcn.140004658
cmp eax, edi
je 0x140011ffb
lea rcx, str.single_instance_mode
call fcn.1400116ec
mov r9, qword [0x14004cfa0]
mov ebp, 1
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004cfa0]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r9, rsi
mov r8d, eax
mov ebx, eax
call fcn.1400116ec
cmp ebx, 0xb7
jne 0x140011f78
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140011838
mov esi, edi
jmp 0x140011edb
mov ecx, esi
add esi, ebp
cmp ecx, 0x32
jge 0x140011ee1
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011838
mov ebx, eax
cmp eax, edi
je 0x140011ec2
lea rcx, str.other_pid__d
mov edx, ebx
call fcn.1400116ec
cmp ebx, edi
je 0x140011f60
mov ecx, 0x2718
call fcn.140004658
cmp eax, edi
je 0x140011f0b
mov dl, bpl
mov ecx, ebx
call fcn.140013f8c
cmp r12b, dil
je 0x140011f60
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, 0x22
cmp word [rax], dx
jne 0x140011f37
lea rcx, [rax + 2]
call fcn.140018064
cmp rax, rdi
jne 0x140011f37
lea rax, [0x140033c5c]
jmp 0x140011f56
mov esi, 0x20
mov rcx, rax
mov edx, esi
call fcn.140018064
cmp rax, rdi
je 0x140011f2e
jmp 0x140011f51
add rax, 2
cmp word [rax], si
je 0x140011f4d
mov rdx, rax
mov ecx, ebx
call fcn.140011c50
lea rcx, str.exiting
call fcn.1400116ec
xor ecx, ecx
call fcn.140004db4
jmp 0x1400120b6
call fcn.14001176c
cmp r12b, dil
je 0x1400120b6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.140011958
xor r9d, r9d
or r8d, 0xffffffff
mov rcx, rax
mov edx, 0x10000
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateMailslotA]
mov rcx, rbx
mov rsi, rax
call fcn.140016490
cmp rsi, 0xffffffffffffffff
jne 0x140011fcd
lea rcx, str.creating_mailslot_failed
call fcn.1400116ec
jmp 0x1400120b6
lea rcx, str.creating_mailslot_successful
call fcn.1400116ec
lea r8, [0x1400119b4]
mov r9, rsi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1400120b6
lea rdx, [0x1400367c4]
lea rcx, [rsp + 0x68]
xor r8d, r8d
call fcn.140017528
mov rcx, qword [0x14004cfa0]
lea rdx, [rsp + 0x68]
call fcn.140016630
mov ebp, 1
jmp 0x140012073
cmp edi, 0x186a0
jge 0x140012097
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14004cfa0]
lea rdx, [rsp + 0xa0]
add edi, ebp
call fcn.140011904
lea rdx, [0x1400367c4]
lea rcx, [rsp + 0x30]
mov r8d, edi
call fcn.140017528
mov rcx, qword [0x14004cfa0]
lea rdx, [rsp + 0x30]
call fcn.140016630
mov r9, qword [0x14004cfa0]
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140012027
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004cfa0]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r8d, eax
mov r9, rbx
call fcn.1400116ec
mov rcx, qword [rsp + 0x1810]
xor rcx, rsp
call fcn.140016820
lea r11, [rsp + 0x1820]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret