Function at 0x140012510
Capabilities:
Read file on windows
Read from mailslot

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
xor esi, esi
mov rax, rdx
mov ebx, esi
mov r14, rcx
cmp byte [0x14033f4d9], bl
mov dword [rsp + 0xa0], ebx
je 0x1400128a5
lea rax, [rcx + 0x18]
mov qword [rsp + 0x38], rax
lea rbp, str.VS_MESSAGE_QUIT
nop dword [rax]
mov rcx, rax
call fcn.14021757c
test eax, eax
jne 0x1400128c5
mov rdx, qword [r14]
mov r12d, esi
mov rax, qword [r14 + 8]
sub rax, rdx
sar rax, 4
test rax, rax
je 0x1400126f7
mov r15, rsi
nop dword [rax]
mov rcx, qword [rdx + r15]
call fcn.140010d10
test al, al
je 0x1400126c6
mov rcx, qword [r14]
mov rsi, qword [rcx + r15 + 8]
lea rax, [rcx + r15]
test rsi, rsi
je 0x1400125bd
lock inc dword [rsi + 8]
mov rsi, qword [rax + 8]
mov rcx, qword [r14]
mov rbp, qword [r14 + 8]
mov r13, qword [rax]
movsxd rdi, r12d
inc rdi
shl rdi, 4
add rdi, rcx
cmp rdi, rbp
je 0x140012643
xor r14d, r14d
nop dword [rax]
mov rax, qword [rdi]
mov rcx, qword [rdi + 8]
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov rbx, qword [rdi - 8]
mov qword [rdi - 0x10], rax
mov qword [rdi - 8], rcx
test rbx, rbx
je 0x14001262e
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14001262e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14001262e
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add rdi, 0x10
cmp rdi, rbp
jne 0x1400125e0
mov r14, qword [rsp + 0x90]
mov rbp, qword [r14 + 8]
mov rbx, qword [rbp - 8]
test rbx, rbx
je 0x14001267b
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14001267b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14001267b
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add qword [r14 + 8], 0xfffffffffffffff0
cmp byte [r13 + 8], 0
je 0x14001287d
dec r12d
sub r15, 0x10
test rsi, rsi
je 0x1400126c6
mov eax, 0xffffffff
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x1400126c6
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rsi + 0xc], eax
cmp eax, 1
jne 0x1400126c6
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [r14]
inc r12d
mov rcx, qword [r14 + 8]
add r15, 0x10
sub rcx, rdx
movsxd rax, r12d
sar rcx, 4
cmp rax, rcx
jb 0x140012590
mov ebx, dword [rsp + 0xa0]
lea rbp, str.VS_MESSAGE_QUIT
xor esi, esi
lea rcx, [r14 + 0x18]
call fcn.140217584
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14034dcdc], 0
je 0x140012723
mov rcx, r14
call fcn.140013ab0
mov byte [0x14034dcdc], 0
mov eax, ebx
inc ebx
mov dword [rsp + 0xa0], ebx
cmp eax, 0x78
jl 0x14001275f
lea r8, str.GlobalRevoHelperProMutex
mov dword [rsp + 0xa0], esi
xor edx, edx
mov ecx, 0x20000
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
test rax, rax
jne 0x140012894
mov rcx, r14
call fcn.1400137c0
mov rdi, qword [r14 + 0x2c8]
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140012820
lea r9, [rsp + 0xa8]
mov dword [rsp + 0x30], esi
lea r8, [rsp + 0x30]
mov dword [rsp + 0xa8], esi
xor edx, edx
mov qword [rsp + 0x20], rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
test eax, eax
je 0x140012820
cmp dword [rsp + 0xa8], 0
jbe 0x140012820
mov r8d, dword [rsp + 0x30]
test r8d, r8d
je 0x140012820
lea r9, [rsp + 0x34]
mov qword [rsp + 0x20], rsi
lea rdx, [r14 + 0xc8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140012820
mov rcx, rsi
nop dword [rax]
movzx edx, word [r14 + rcx*2 + 0xc8]
movzx eax, word [rbp + rcx*2]
sub edx, eax
jne 0x14001280e
movzx edx, word [r14 + rcx*2 + 0xca]
movzx eax, word [rbp + rcx*2 + 2]
sub edx, eax
jne 0x14001280e
add rcx, 2
cmp rcx, 0x10
jne 0x1400127e0
movzx eax, byte [0x14033f4d9]
test edx, edx
cmovne eax, esi
mov byte [0x14033f4d9], al
lea rcx, [0x14034dda0]
call fcn.14021757c
test eax, eax
jne 0x1400128bd
mov rbx, qword [0x14034dd80]
lea rcx, [0x14034dda0]
call fcn.140217584
cmp rbx, 1
jb 0x140012864
mov ecx, dword [0x14034dce8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x432
call qword [sym.imp.USER32.dll_PostThreadMessageW]
cmp byte [0x14033f4d9], 0
je 0x14001289d
mov ebx, dword [rsp + 0xa0]
lea rax, [r14 + 0x18]
jmp 0x140012560
mov rcx, qword [rsp + 0x38]
call fcn.140217584
mov rax, qword [rsp + 0x98]
mov qword [rax], r13
jmp 0x1400128a8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x98]
mov qword [rax], rsi
mov qword [rax + 8], rsi
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, eax
call fcn.140217278
int3
mov ecx, eax
call fcn.140217278
int3