Function at 0x140011d60
Capabilities:
Accept command line arguments
Create mailslot
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
mov eax, 0x1820
call fcn.140030d40
sub rsp, rax
mov rax, qword [0x1400409c0]
xor rax, rsp
mov qword [rsp + 0x1810], rax
mov r12b, cl
mov ecx, 0x1770
call fcn.140016208
mov qword [0x14004dfa0], rax
call fcn.140005c98
lea rcx, [rsp + 0xa0]
mov rdx, rax
xor r8d, r8d
call fcn.140006f20
mov ecx, 0x9e
call fcn.140004694
mov rcx, qword [0x14004dfa0]
xor edi, edi
lea rdx, str.Global_
cmp eax, edi
jne 0x140011de5
lea rdx, str.Local_
call fcn.140016900
mov rcx, qword [0x14004dfa0]
call fcn.140016330
lea rdx, [rsp + 0xa0]
add rax, qword [0x14004dfa0]
mov rcx, rax
call fcn.1400118c8
mov ecx, 0x2715
call fcn.140004694
cmp eax, edi
je 0x140011fbf
lea rcx, str.single_instance_mode
call fcn.1400116b0
mov r9, qword [0x14004dfa0]
mov ebp, 1
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004dfa0]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r9, rsi
mov r8d, eax
mov ebx, eax
call fcn.1400116b0
cmp ebx, 0xb7
jne 0x140011f3c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400117fc
mov esi, edi
jmp 0x140011e9f
mov ecx, esi
add esi, ebp
cmp ecx, 0x32
jge 0x140011ea5
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400117fc
mov ebx, eax
cmp eax, edi
je 0x140011e86
lea rcx, str.other_pid__d
mov edx, ebx
call fcn.1400116b0
cmp ebx, edi
je 0x140011f24
mov ecx, 0x2718
call fcn.140004694
cmp eax, edi
je 0x140011ecf
mov dl, bpl
mov ecx, ebx
call fcn.140013f50
cmp r12b, dil
je 0x140011f24
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, 0x22
cmp word [rax], dx
jne 0x140011efb
lea rcx, [rax + 2]
call fcn.140018294
cmp rax, rdi
jne 0x140011efb
lea rax, [0x140034cb8]
jmp 0x140011f1a
mov esi, 0x20
mov rcx, rax
mov edx, esi
call fcn.140018294
cmp rax, rdi
je 0x140011ef2
jmp 0x140011f15
add rax, 2
cmp word [rax], si
je 0x140011f11
mov rdx, rax
mov ecx, ebx
call fcn.140011c14
lea rcx, str.exiting
call fcn.1400116b0
xor ecx, ecx
call fcn.140004df0
jmp 0x14001207a
call fcn.140011730
cmp r12b, dil
je 0x14001207a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.14001191c
xor r9d, r9d
or r8d, 0xffffffff
mov rcx, rax
mov edx, 0x10000
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateMailslotA]
mov rcx, rbx
mov rsi, rax
call fcn.1400166c0
cmp rsi, 0xffffffffffffffff
jne 0x140011f91
lea rcx, str.creating_mailslot_failed
call fcn.1400116b0
jmp 0x14001207a
lea rcx, str.creating_mailslot_successful
call fcn.1400116b0
lea r8, [0x140011978]
mov r9, rsi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x14001207a
lea rdx, [0x1400377f4]
lea rcx, [rsp + 0x68]
xor r8d, r8d
call fcn.140017758
mov rcx, qword [0x14004dfa0]
lea rdx, [rsp + 0x68]
call fcn.140016860
mov ebp, 1
jmp 0x140012037
cmp edi, 0x186a0
jge 0x14001205b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14004dfa0]
lea rdx, [rsp + 0xa0]
add edi, ebp
call fcn.1400118c8
lea rdx, [0x1400377f4]
lea rcx, [rsp + 0x30]
mov r8d, edi
call fcn.140017758
mov rcx, qword [0x14004dfa0]
lea rdx, [rsp + 0x30]
call fcn.140016860
mov r9, qword [0x14004dfa0]
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140011feb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x14004dfa0]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r8d, eax
mov r9, rbx
call fcn.1400116b0
mov rcx, qword [rsp + 0x1810]
xor rcx, rsp
call fcn.140016a50
lea r11, [rsp + 0x1820]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret