Function at 0x1800250b9
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x255030ab
pushf
not eax
add eax, 0xb45c3c92
xor eax, 0xec049a93
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xdb7481e5
xor eax, 0xc21339b5
rol eax, 0x35
popf
pushf
not eax
add eax, 0x9901c852
xor eax, 0xd3a8c8e5
rol eax, 0xee
popf
cmp eax, 4
jne 0x180025109
popf
pop rax
jmp 0x1800255de
cmp eax, 0
jne 0x180025118
popf
pop rax
jmp 0x1800251db
cmp eax, 3
jne 0x180025127
popf
pop rax
jmp 0x18002552b
cmp eax, 1
jne 0x180025136
popf
pop rax
jmp 0x180025387
cmp eax, 0xd
jne 0x180025145
popf
pop rax
jmp 0x180025b37
cmp eax, 7
jne 0x180025154
popf
pop rax
jmp 0x18002573a
cmp eax, 0xe
jne 0x180025163
popf
pop rax
jmp 0x180025b80
cmp eax, 0xb
jne 0x180025172
popf
pop rax
jmp 0x180025a6d
cmp eax, 0xc
jne 0x180025181
popf
pop rax
jmp 0x180025b00
cmp eax, 8
jne 0x180025190
popf
pop rax
jmp 0x1800257df
cmp eax, 5
jne 0x18002519f
popf
pop rax
jmp 0x1800256b0
cmp eax, 2
jne 0x1800251ae
popf
pop rax
jmp 0x180025452
cmp eax, 9
jne 0x1800251bd
popf
pop rax
jmp 0x18002589d
cmp eax, 0xa
jne 0x1800251cc
popf
pop rax
jmp 0x180025993
cmp eax, 6
jne 0x1800251db
popf
pop rax
jmp 0x180025730
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x18], r8d
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xfa8]
mov eax, 0x2eeb4d95
pushf
not eax
add eax, 0xd024a631
xor eax, 0xf8a7f8a2
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x8b221676
xor eax, 0xf13833e0
rol eax, 0x3f
popf
call fcn.180014a60
sub rsp, rax
mov eax, dword [rcx + 8]
xor esi, esi
mov rbx, rdx
mov dword [rbp + 0xfc0], esi
mov rdi, rcx
mov dword [rbp + 0xfb0], esi
xor edx, edx
mov dword [rsp + 0x30], 0x30b0005
lea r8d, [rsi + 0x38]
mov dword [rsp + 0x34], 0x10
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x38], 0x48
lea r12d, [rsi + 5]
mov dword [rsp + 0x3c], eax
call sub.VCRUNTIME140.dll_memset
lea r14d, [rsi + 1]
mov qword [rsp + 0x40], 0x10001000
lea rdx, [rsp + 0x50]
mov byte [rsp + 0x48], r14b
mov rcx, rbx
mov dword [rsp + 0x4c], 0x10000
mov r15d, 0xcb25d10a
pushf
not r15d
add r15d, 0xb15d417f
xor r15d, 0xace537d5
rol r15d, 0x43
popf
pushf
not r15d
add r15d, 0xa850fcf7
xor r15d, 0xa62f04b8
rol r15d, 0x81
popf
pushf
not r15d
add r15d, 0x8b16881f
xor r15d, 0x9bf11175
rol r15d, 0x9b
popf
mov dword [rsp + 0x74], 2
call fcn.18000c22c
test eax, eax
jne 0x180025354
push rax
pushf
mov eax, 0xc2386447
pushf
not eax
add eax, 0xaa8c52bf
xor eax, 0xdbde1091
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa9e542ab
xor eax, 0xfb9279ee
rol eax, 0x70
popf
pushf
not eax
add eax, 0xba4fefef
xor eax, 0xa4092be4
rol eax, 0x78
popf
pushf
not eax
add eax, 0xe2400639
xor eax, 0xb2f7059c
rol eax, 0x56
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xf13cc0e
pushf
not eax
add eax, 0xff3e6950
xor eax, 0xfd5ea0f9
rol eax, 0xae
popf
pushf
not eax
add eax, 0xdf164876
xor eax, 0xcfa87118
rol eax, 0xb6
popf
jmp 0x1800250fa
lea rdx, [rsp + 0x64]
mov dword [rsp + 0x60], 2
lea rcx, [0x1e03d72c7]
pushf
sub rcx, 0x603bd5df
popf
call fcn.18000c22c
test eax, eax
jne 0x18002540c
push rax
pushf
mov eax, 0xf7d2686e
pushf
not eax
add eax, 0xa4db9393
xor eax, 0xe5f72512
rol eax, 0x69
popf
pushf
not eax
add eax, 0xb2498e41
xor eax, 0xd9a7f70d
rol eax, 0x95
popf
pushf
not eax
add eax, 0x8731be7a
xor eax, 0xc2831d4c
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xa669db25
xor eax, 0xae35c648
rol eax, 0x44
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0x386cfc39
pushf
not eax
add eax, 0xb226c2d1
xor eax, 0xb57b4a62
rol eax, 7
popf
pushf
not eax
add eax, 0xc9f2db29
xor eax, 0xb80bf994
rol eax, 0x98
popf
pushf
not eax
add eax, 0x9553c859
xor eax, 0xbe8348bf
rol eax, 0xb5
popf
jmp 0x1800250fa
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x10]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x30]
jmp 0x18002546b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1800254d2
push rax
pushf
mov eax, 0xbf65450f
pushf
not eax
add eax, 0xf0b6a4f0
xor eax, 0xd594518d
rol eax, 0x79
popf
pushf
not eax
add eax, 0x86502633
xor eax, 0xf446a371
rol eax, 0xca
popf
pushf
not eax
add eax, 0x8090c8e5
xor eax, 0xdf3a5dfb
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xb8f78063
xor eax, 0x8a24ac4d
rol eax, 0xf1
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xea0d1fee
pushf
not eax
add eax, 0x996c7cd3
xor eax, 0x8ba62231
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x8dc899d2
xor eax, 0x8059862c
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9f88f88a
xor eax, 0xf8274b14
rol eax, 0x93
popf
pushf
not eax
add eax, 0x850386a4
xor eax, 0xb9107aa0
rol eax, 0x6c
popf
jmp 0x1800250fa
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x38]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x40]
jmp 0x180025544
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180025598
push rax
pushf
mov eax, 0xb8003a76
pushf
not eax
add eax, 0xb7dfdbcc
xor eax, 0xf08f9929
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xc736a4cd
xor eax, 0x9ed9acc0
rol eax, 0xea
popf
pushf
not eax
add eax, 0x96565149
xor eax, 0xbd722439
rol eax, 0xb1
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xaf937420
pushf
not eax
add eax, 0xcfb7b0bd
xor eax, 0x9fd56100
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xa4335686
xor eax, 0xaf19be70
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xdd11764e
xor eax, 0xf244915c
rol eax, 0x15
popf
jmp 0x1800250fa
add dword [rdi + 8], r14d
lea rcx, [rbp - 0x80]
mov r8d, r15d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rdi]
lea r9, [rbp + 0xfb0]
mov r8d, r15d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x80]
jmp 0x180025607
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180025657
push rax
pushf
mov eax, 0xbd0f1c52
pushf
not eax
add eax, 0xfeb7aa59
xor eax, 0xbf2df88c
rol eax, 0x38
popf
pushf
not eax
add eax, 0xeedcf0df
xor eax, 0xc358e121
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xf3a9d613
xor eax, 0xd2074382
rol eax, 0x5d
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0x52dd54f4
pushf
not eax
add eax, 0xb69730d3
xor eax, 0xdff2a9d1
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xfcc63e68
xor eax, 0xf4f92afa
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xa3f93761
xor eax, 0xd5861486
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xe66d4fd4
xor eax, 0xd2f06794
rol eax, 0x10
popf
jmp 0x1800250fa
cmp word [rbp - 0x80], r12w
jne 0x1800256fd
push rax
pushf
mov eax, 0x5f81582c
pushf
not eax
add eax, 0xb47a618f
xor eax, 0xdc779a98
rol eax, 0x87
popf
pushf
not eax
add eax, 0xe77dbe19
xor eax, 0xa28bb0c4
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc3fe922d
xor eax, 0xc367842a
rol eax, 0x8b
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0x5b7d5eac
pushf
not eax
add eax, 0x9fa9927f
xor eax, 0xd1faa25e
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa4f6d530
xor eax, 0xdb996117
rol eax, 0xf8
popf
jmp 0x1800250fa
cmp byte [rbp - 0x7e], 0xc
jne 0x180025b37
cmp byte [rbp - 0x7d], 3
jne 0x180025786
push rax
pushf
mov eax, 0xa256fd4a
pushf
not eax
add eax, 0xc4666fc5
xor eax, 0x83d0b133
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd5356a85
xor eax, 0xb77b05b7
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x85bb22fb
xor eax, 0xe9220ae7
rol eax, 0xee
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xa5276846
pushf
not eax
add eax, 0xad76f473
xor eax, 0x9fa06951
rol eax, 0x66
popf
pushf
not eax
add eax, 0xac236f8a
xor eax, 0xa12a29bb
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe58cf855
xor eax, 0x97ea58bb
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xe26ea8e4
xor eax, 0xff4fa927
rol eax, 8
popf
jmp 0x1800250fa
movzx eax, word [rbp - 0x78]
cmp eax, dword [rbp + 0xfb0]
jne 0x180025844
push rax
pushf
mov eax, 0xc6a0999b
pushf
not eax
add eax, 0xf586a40b
xor eax, 0x9574dc1c
rol eax, 0x52
popf
pushf
not eax
add eax, 0xe7f4aae8
xor eax, 0x96e3ec63
rol eax, 0x41
popf
pushf
not eax
add eax, 0x8a3e838e
xor eax, 0xf25c00bb
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xdb8d8e3b
xor eax, 0xd1a036cb
rol eax, 0xcd
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0x8cbebd4
pushf
not eax
add eax, 0xbdf7606c
xor eax, 0xfe8ab09d
rol eax, 0x81
popf
pushf
not eax
add eax, 0xf43dcd8c
xor eax, 0xf4213437
rol eax, 9
popf
pushf
not eax
add eax, 0xe0b9da15
xor eax, 0xbc346a40
rol eax, 0x27
popf
pushf
not eax
add eax, 0xad9a36e8
xor eax, 0xa600f51d
rol eax, 0x27
popf
jmp 0x1800250fa
mov eax, 0x763628fe
pushf
not eax
add eax, 0xd68e24d3
xor eax, 0x9c801902
rol eax, 0x88
popf
pushf
not eax
add eax, 0xefc6a912
xor eax, 0xc18860de
rol eax, 0xc
popf
pushf
not eax
add eax, 0xca980ec9
xor eax, 0xaf59237a
rol eax, 0x41
popf
pushf
not eax
add eax, 0xfc5fe501
xor eax, 0xbbfb08cf
rol eax, 0xbd
popf
cmp word [rbp - 0x68], ax
ja 0x18002593a
push rax
pushf
mov eax, 0xc9c8a954
pushf
not eax
add eax, 0x89670e13
xor eax, 0x9df8408d
rol eax, 0x20
popf
pushf
not eax
add eax, 0xae2d2396
xor eax, 0xc8803003
rol eax, 0x95
popf
pushf
not eax
add eax, 0xa71cf394
xor eax, 0xbaf48a92
rol eax, 0x9e
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xea335df7
pushf
not eax
add eax, 0xdb7817d7
xor eax, 0xfe2cdd02
rol eax, 0x45
popf
pushf
not eax
add eax, 0xf1e2efb5
xor eax, 0x85c26ce1
rol eax, 0x59
popf
pushf
not eax
add eax, 0x8bfb5e75
xor eax, 0xf23e7b2f
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xe77d7027
xor eax, 0x9c683e3b
rol eax, 0xfd
popf
jmp 0x1800250fa
movzx ecx, word [rbp - 0x68]
lea rdx, [rcx + 5]
and rdx, 0xfffffffffffffffc
sub rdx, rcx
sub rdx, 2
mov edx, edx
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
cmp dword [rbp + rdx - 0x66], r14d
jne 0x180025a14
push rax
pushf
mov eax, 0x7e1210ac
pushf
not eax
add eax, 0xf510b523
xor eax, 0xa93fb381
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xdee32dc1
xor eax, 0xde0caa6e
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x887e13ea
xor eax, 0xff66c007
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x86db54ed
xor eax, 0xe608b593
rol eax, 0x1f
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0xbf5d118d
pushf
not eax
add eax, 0xa984a56f
xor eax, 0xcb3ae4e4
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xf3aeae6e
xor eax, 0xf5d1cf23
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc906be4c
xor eax, 0xf8330f9e
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x94b5d004
xor eax, 0xf89504fd
rol eax, 4
popf
jmp 0x1800250fa
cmp word [rbp + rdx - 0x62], si
jne 0x180025acd
push rax
pushf
mov eax, 0x1fb69616
pushf
not eax
add eax, 0x93f68aa3
xor eax, 0xcd2c8937
rol eax, 0xae
popf
pushf
not eax
add eax, 0x848a6bff
xor eax, 0xa0290afd
rol eax, 0x71
popf
pushf
not eax
add eax, 0xc5c47ea5
xor eax, 0xc53c6387
rol eax, 0x49
popf
pushf
not eax
add eax, 0xe8852459
xor eax, 0xd4555634
rol eax, 0x74
popf
jmp 0x1800250fa
push rax
pushf
mov eax, 0x919adfc4
pushf
not eax
add eax, 0xa5f9250a
xor eax, 0x8ac22a8c
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xb86c9a00
xor eax, 0xfa73662c
rol eax, 0x44
popf
jmp 0x1800250fa
xor eax, eax
jmp 0x180025b80
mov eax, r14d
push rax
pushf
mov eax, 0x9a9400c9
pushf
not eax
add eax, 0xe09a0930
xor eax, 0xf74ec8d3
rol eax, 0x56
popf
pushf
not eax
add eax, 0x8f75b6ae
xor eax, 0xfb57c51d
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xcb61dc59
xor eax, 0xe14beac3
rol eax, 0xb6
popf
jmp 0x1800250fa
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret