Function at 0x100001e14
Capabilities:
Accept command line arguments
Read file via mapping

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push r12
push r13
push r14
mov eax, 0x1080
call fcn.100003280
sub rsp, rax
mov rax, qword [0x100004110]
xor rax, rsp
mov qword [rsp + 0x1070], rax
xor r14d, r14d
mov dword [rsp + 0x30], ecx
mov rsi, r14
mov r12, r14
mov ebx, r14d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp rax, r14
jne 0x100001e84
lea rdx, [0x1000012d8]
xor ecx, ecx
call fcn.100001c68
jmp 0x10000213a
mov ecx, dword [rsp + 0x30]
mov rdx, rax
call fcn.100001d00
cmp eax, r14d
jne 0x100001eee
lea rdx, [0x100001308]
xor ecx, ecx
call fcn.100001c68
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea r8, [rsp + 0x70]
mov r9d, 0x800
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_LoadStringW]
cmp eax, r14d
je 0x10000213a
call qword [sym.imp.msvcrt.dll___iob_func]
lea r8, [rsp + 0x70]
lea rdx, [0x1000012d0]
lea rcx, [rax + 0x60]
call qword [sym.imp.msvcrt.dll_fwprintf]
jmp 0x10000213a
mov r8, qword [0x100004700]
xor edx, edx
lea ecx, [rdx + 6]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov r13, rax
cmp rax, r14
jne 0x100001f2b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [0x100004700]
lea rdx, [0x100001340]
mov r9d, eax
xor ecx, ecx
call fcn.100001c68
jmp 0x100002110
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 6]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbp, rax
cmp rax, r14
jne 0x100001f67
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [0x1000013a0]
xor ecx, ecx
mov r8d, eax
call fcn.100001c68
jmp 0x100002102
mov r8, qword [0x100004718]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov rsi, rax
cmp rax, r14
jne 0x100001fa6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [0x100004718]
lea rdx, [0x100001400]
mov r9d, eax
xor ecx, ecx
call fcn.100001c68
jmp 0x100002102
mov r8, qword [0x100004708]
xor edx, edx
mov ecx, 0x100002
call qword [sym.imp.KERNEL32.dll_OpenEventW]
mov r12, rax
cmp rax, r14
jne 0x100001fd1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8, qword [0x100004708]
jmp 0x100001f90
mov qword [rsp + 0x38], rsi
lea rdx, [rsp + 0x38]
mov r9d, 0x4ff
mov r8d, 0xea60
mov ecx, 1
mov dword [rsp + 0x20], 6
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
mov ebx, eax
cmp eax, 1
jne 0x100002053
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r14d
je 0x100001fd6
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_DispatchMessageW]
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
cmp eax, r14d
jne 0x10000201d
cmp ebx, 0x102
je 0x1000020bf
cmp ebx, r14d
je 0x100002069
cmp ebx, 0xffffffff
jne 0x100001fd6
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rdx, [rsp + 0x34]
mov rcx, rbp
call fcn.100002784
mov ebx, eax
cmp eax, r14d
je 0x10000208b
mov eax, r14d
jmp 0x100002091
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp], eax
mov eax, dword [rsp + 0x34]
cmp ebx, r14d
cmovne eax, r14d
mov rcx, r12
mov dword [rbp + 4], eax
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp ebx, r14d
je 0x100001fd6
inc dword [0x1000046d0]
jmp 0x100001fd6
cmp dword [0x1000046d0], r14d
mov ebx, r14d
setne bl
call qword [sym.imp.msvcrt.dll___iob_func]
mov r8d, dword [0x1000046d0]
lea rcx, [rax + 0x30]
lea rdx, [0x100001458]
call qword [sym.imp.msvcrt.dll_fprintf]
mov r8d, dword [0x1000046d0]
lea rdx, [0x100001470]
mov ecx, 3
call fcn.100001c68
cmp rbp, r14
je 0x100002110
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp r13, r14
je 0x10000211e
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rsi, r14
je 0x10000212c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r12, r14
je 0x10000213a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov rcx, qword [rsp + 0x1070]
xor rcx, rsp
call fcn.100002cf0
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
ret