Function at 0x140010b5c
Capabilities:
Accept command line arguments
Create mailslot
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
mov eax, 0x1820
call fcn.14002d9b0
sub rsp, rax
mov rax, qword [0x14003b9c0]
xor rax, rsp
mov qword [rsp + 0x1810], rax
mov r12b, cl
mov ecx, 0x1770
call fcn.1400144dc
mov qword [0x140048f58], rax
call fcn.140005bf8
lea rcx, [rsp + 0xa0]
mov rdx, rax
xor r8d, r8d
call fcn.140006a04
mov ecx, 0x9e
call fcn.140004654
mov rcx, qword [0x140048f58]
xor edi, edi
lea rdx, str.Global_
cmp eax, edi
jne 0x140010be1
lea rdx, str.Local_
call fcn.140014be0
mov rcx, qword [0x140048f58]
call fcn.140014610
lea rdx, [rsp + 0xa0]
add rax, qword [0x140048f58]
mov rcx, rax
call fcn.1400106c4
mov ecx, 0x2715
call fcn.140004654
cmp eax, edi
je 0x140010dbb
lea rcx, str.single_instance_mode
call fcn.1400104ac
mov r9, qword [0x140048f58]
mov ebp, 1
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x140048f58]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r9, rsi
mov r8d, eax
mov ebx, eax
call fcn.1400104ac
cmp ebx, 0xb7
jne 0x140010d38
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400105f8
mov esi, edi
jmp 0x140010c9b
mov ecx, esi
add esi, ebp
cmp ecx, 0x32
jge 0x140010ca1
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400105f8
mov ebx, eax
cmp eax, edi
je 0x140010c82
lea rcx, str.other_pid__d
mov edx, ebx
call fcn.1400104ac
cmp ebx, edi
je 0x140010d20
mov ecx, 0x2717
call fcn.140004654
cmp eax, edi
je 0x140010ccb
mov dl, bpl
mov ecx, ebx
call fcn.140012cc4
cmp r12b, dil
je 0x140010d20
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, 0x22
cmp word [rax], dx
jne 0x140010cf7
lea rcx, [rax + 2]
call fcn.140016574
cmp rax, rdi
jne 0x140010cf7
lea rax, [0x140030bd8]
jmp 0x140010d16
mov esi, 0x20
mov rcx, rax
mov edx, esi
call fcn.140016574
cmp rax, rdi
je 0x140010cee
jmp 0x140010d11
add rax, 2
cmp word [rax], si
je 0x140010d0d
mov rdx, rax
mov ecx, ebx
call fcn.140010a10
lea rcx, str.exiting
call fcn.1400104ac
xor ecx, ecx
call fcn.140004db0
jmp 0x140010e76
call fcn.14001052c
cmp r12b, dil
je 0x140010e76
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.140010718
xor r9d, r9d
or r8d, 0xffffffff
mov rcx, rax
mov edx, 0x10000
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_CreateMailslotA]
mov rcx, rbx
mov rsi, rax
call fcn.1400149a0
cmp rsi, 0xffffffffffffffff
jne 0x140010d8d
lea rcx, str.creating_mailslot_failed
call fcn.1400104ac
jmp 0x140010e76
lea rcx, str.creating_mailslot_successful
call fcn.1400104ac
lea r8, [0x140010774]
mov r9, rsi
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x140010e76
lea rdx, [0x140033324]
lea rcx, [rsp + 0x68]
xor r8d, r8d
call fcn.140015a38
mov rcx, qword [0x140048f58]
lea rdx, [rsp + 0x68]
call fcn.140014b40
mov ebp, 1
jmp 0x140010e33
cmp edi, 0x186a0
jge 0x140010e57
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140048f58]
lea rdx, [rsp + 0xa0]
add edi, ebp
call fcn.1400106c4
lea rdx, [0x140033324]
lea rcx, [rsp + 0x30]
mov r8d, edi
call fcn.140015a38
mov rcx, qword [0x140048f58]
lea rdx, [rsp + 0x30]
call fcn.140014b40
mov r9, qword [0x140048f58]
mov r8d, ebp
mov edx, ebp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140010de7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, qword [0x140048f58]
lea rcx, str.semaphore_name__S__code__d__value__p
mov r8d, eax
mov r9, rbx
call fcn.1400104ac
mov rcx, qword [rsp + 0x1810]
xor rcx, rsp
call fcn.140014d30
lea r11, [rsp + 0x1820]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret