Function at 0x140010628
Capabilities:
Accept command line arguments
Create mailslot
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
mov eax, 0x1820
call fcn.14002d110
sub rsp, rax
mov rax, qword [0x14003b9c0]
xor rax, rsp
mov qword [rsp + 0x1810], rax
mov r12b, cl
mov ecx, 0x1770
call fcn.140013a90
mov qword [0x14004a6c8], rax
call fcn.1400058b4
lea rcx, [rsp + 0xa0]
mov rdx, rax
xor r8d, r8d
call fcn.1400066f8
mov ecx, 0x9e
call fcn.140004654
mov rcx, qword [0x14004a6c8]
xor edi, edi
lea rdx, str.Global_
cmp eax, edi
jne 0x1400106ad
lea rdx, str.Local_
call fcn.140014190
mov rcx, qword [0x14004a6c8]
call fcn.140013bc0
lea rdx, [rsp + 0xa0]
add rax, qword [0x14004a6c8]
mov rcx, rax
call fcn.140010190
mov ecx, 0x2715
call fcn.140004654
cmp eax, edi
je 0x140010887
lea rcx, str.single_instance_mode
call fcn.14000ff78
mov r9, qword [0x14004a6c8]
mov ebp, 1
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004a6c8]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r9, rsi
mov r8d, eax
mov ebx, eax
call fcn.14000ff78
cmp ebx, 0xb7
jne 0x140010804
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400100c4
mov esi, edi
jmp 0x140010767
mov ecx, esi
add esi, ebp
cmp ecx, 0x32
jge 0x14001076d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400100c4
mov ebx, eax
cmp eax, edi
je 0x14001074e
lea rcx, str.other_pid__d
mov edx, ebx
call fcn.14000ff78
cmp ebx, edi
je 0x1400107ec
mov ecx, 0x2717
call fcn.140004654
cmp eax, edi
je 0x140010797
mov dl, bpl
mov ecx, ebx
call fcn.1400121ec
cmp r12b, dil
je 0x1400107ec
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, 0x22
cmp word [rax], dx
jne 0x1400107c3
lea rcx, [rax + 2]
call fcn.140015b24
cmp rax, rdi
jne 0x1400107c3
lea rax, [0x140030998]
jmp 0x1400107e2
mov esi, 0x20
mov rcx, rax
mov edx, esi
call fcn.140015b24
cmp rax, rdi
je 0x1400107ba
jmp 0x1400107dd
add rax, 2
cmp word [rax], si
je 0x1400107d9
mov rdx, rax
mov ecx, ebx
call fcn.1400104dc
lea rcx, str.exiting
call fcn.14000ff78
xor ecx, ecx
call fcn.140004d5c
jmp 0x140010942
call fcn.14000fff8
cmp r12b, dil
je 0x140010942
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1400101e4
xor r9d, r9d
or r8d, 0xffffffff
mov rcx, rax
mov edx, 0x10000
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateMailslotA]
mov rcx, rbx
mov rsi, rax
call fcn.140013f50
cmp rsi, 0xffffffffffffffff
jne 0x140010859
lea rcx, str.creating_mailslot_failed
call fcn.14000ff78
jmp 0x140010942
lea rcx, str.creating_mailslot_successful
call fcn.14000ff78
lea r8, [0x140010240]
mov r9, rsi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x140010942
lea rdx, [0x140032f64]
lea rcx, [rsp + 0x68]
xor r8d, r8d
call fcn.140014fe8
mov rcx, qword [0x14004a6c8]
lea rdx, [rsp + 0x68]
call fcn.1400140f0
mov ebp, 1
jmp 0x1400108ff
cmp edi, 0x186a0
jge 0x140010923
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14004a6c8]
lea rdx, [rsp + 0xa0]
add edi, ebp
call fcn.140010190
lea rdx, [0x140032f64]
lea rcx, [rsp + 0x30]
mov r8d, edi
call fcn.140014fe8
mov rcx, qword [0x14004a6c8]
lea rdx, [rsp + 0x30]
call fcn.1400140f0
mov r9, qword [0x14004a6c8]
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1400108b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004a6c8]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r8d, eax
mov r9, rbx
call fcn.14000ff78
mov rcx, qword [rsp + 0x1810]
xor rcx, rsp
call fcn.1400142e0
lea r11, [rsp + 0x1820]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret