Function at 0x180033ba3
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xf3d7503c
pushf
not eax
add eax, 0xc3a372be
xor eax, 0x919f1cd1
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xd21d310f
xor eax, 0x9e382b29
rol eax, 0x90
popf
cmp eax, 4
jne 0x180033be0
popf
pop rax
jmp 0x180034069
cmp eax, 0
jne 0x180033bef
popf
pop rax
jmp 0x180033cb2
cmp eax, 3
jne 0x180033bfe
popf
pop rax
jmp 0x180033fc9
cmp eax, 1
jne 0x180033c0d
popf
pop rax
jmp 0x180033e5e
cmp eax, 0xd
jne 0x180033c1c
popf
pop rax
jmp 0x180034576
cmp eax, 7
jne 0x180033c2b
popf
pop rax
jmp 0x1800341c5
cmp eax, 0xe
jne 0x180033c3a
popf
pop rax
jmp 0x1800345ac
cmp eax, 0xb
jne 0x180033c49
popf
pop rax
jmp 0x180034499
cmp eax, 0xc
jne 0x180033c58
popf
pop rax
jmp 0x18003452c
cmp eax, 8
jne 0x180033c67
popf
pop rax
jmp 0x18003426a
cmp eax, 5
jne 0x180033c76
popf
pop rax
jmp 0x180034128
cmp eax, 2
jne 0x180033c85
popf
pop rax
jmp 0x180033f16
cmp eax, 9
jne 0x180033c94
popf
pop rax
jmp 0x180034328
cmp eax, 0xa
jne 0x180033ca3
popf
pop rax
jmp 0x1800343d2
cmp eax, 6
jne 0x180033cb2
popf
pop rax
jmp 0x1800341bb
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x18], r8d
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xfa8]
mov eax, 0xc77b030a
pushf
not eax
add eax, 0xfd830eb9
xor eax, 0xf06f0a09
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x810b198f
xor eax, 0xc756b4e3
rol eax, 5
popf
pushf
not eax
add eax, 0xb2d9879d
xor eax, 0xafcbced3
rol eax, 0x93
popf
call fcn.180015580
sub rsp, rax
mov eax, dword [rcx + 8]
xor esi, esi
mov rbx, rdx
mov dword [rbp + 0xfc0], esi
mov rdi, rcx
mov dword [rbp + 0xfb0], esi
xor edx, edx
mov dword [rsp + 0x30], 0x30b0005
lea r8d, [rsi + 0x38]
mov dword [rsp + 0x34], 0x10
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x38], 0x48
lea r12d, [rsi + 5]
mov dword [rsp + 0x3c], eax
call sub.VCRUNTIME140.dll_memset
lea r14d, [rsi + 1]
mov qword [rsp + 0x40], 0x10001000
lea rdx, [rsp + 0x50]
mov byte [rsp + 0x48], r14b
mov rcx, rbx
mov dword [rsp + 0x4c], 0x10000
mov r15d, 0x19e78dc0
pushf
not r15d
add r15d, 0xa8d87197
xor r15d, 0xfeb54c7d
rol r15d, 0x7a
popf
pushf
not r15d
add r15d, 0xde4dcac1
xor r15d, 0x805bd7d7
rol r15d, 0x53
popf
pushf
not r15d
add r15d, 0xd6d819a3
xor r15d, 0xb82a92c7
rol r15d, 0xc7
popf
mov dword [rsp + 0x74], 2
call fcn.18000b9c4
test eax, eax
jne 0x180033e2b
push rax
pushf
mov eax, 0xc91e632d
pushf
not eax
add eax, 0xf2258e5a
xor eax, 0xd1ee4777
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x9e43293f
xor eax, 0xd09b874f
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc99fc6f3
xor eax, 0xf1b7572b
rol eax, 0xab
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0xe5d828c3
pushf
not eax
add eax, 0x9c27c7b7
xor eax, 0x8319b491
rol eax, 0x11
popf
pushf
not eax
add eax, 0xfb101d0d
xor eax, 0xa623b260
rol eax, 0xad
popf
jmp 0x180033bd1
lea rdx, [rsp + 0x64]
mov dword [rsp + 0x60], 2
lea rcx, [0x1e28fbc36]
pushf
sub rcx, 0x628e0f4e
popf
call fcn.18000b9c4
test eax, eax
jne 0x180033ee3
push rax
pushf
mov eax, 0x70640c74
pushf
not eax
add eax, 0x99eaa988
xor eax, 0x927c509a
rol eax, 0x45
popf
pushf
not eax
add eax, 0xa80e047c
xor eax, 0xe8ef2f10
rol eax, 0x57
popf
pushf
not eax
add eax, 0x9c976e87
xor eax, 0x85343961
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x82b03fed
xor eax, 0xa2410eae
rol eax, 0x77
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0xe152e20b
pushf
not eax
add eax, 0xf94ff895
xor eax, 0xcce48ab7
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xc1b40ee8
xor eax, 0xbc027524
rol eax, 0xe5
popf
jmp 0x180033bd1
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x10]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x30]
jmp 0x180033f2f
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180033f83
push rax
pushf
mov eax, 0x80a0d7ad
pushf
not eax
add eax, 0xd2c95a21
xor eax, 0xc8864a96
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x9c4a5827
xor eax, 0xe8c1074b
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xf6e0d63f
xor eax, 0xb3e37750
rol eax, 0x71
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x7be55c0e
pushf
not eax
add eax, 0x92f7c6dd
xor eax, 0xa6524b79
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xc0f638b3
xor eax, 0xd7eaddb5
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xcda9f977
xor eax, 0x88bea3d7
rol eax, 0xa9
popf
jmp 0x180033bd1
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x38]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x40]
jmp 0x180033fe2
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180034023
push rax
pushf
mov eax, 0x27b902d6
pushf
not eax
add eax, 0xe4c31576
xor eax, 0xfce6f277
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xfb68f464
xor eax, 0xb9798d5c
rol eax, 0xd
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0xe30eddc3
pushf
not eax
add eax, 0xc4c9cafc
xor eax, 0x983bca82
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe2f92602
xor eax, 0xf94d7326
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x88aae165
xor eax, 0x97921868
rol eax, 0xd1
popf
jmp 0x180033bd1
add dword [rdi + 8], r14d
lea rcx, [rbp - 0x80]
mov r8d, r15d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rdi]
lea r9, [rbp + 0xfb0]
mov r8d, r15d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x80]
jmp 0x180034092
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1800340e2
push rax
pushf
mov eax, 0x880ef8f
pushf
not eax
add eax, 0xfb0a34bb
xor eax, 0xc76418a2
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xe40ac39d
xor eax, 0xaf13e45c
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xadcfa43b
xor eax, 0xc9ff6331
rol eax, 0x59
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x9b543b91
pushf
not eax
add eax, 0xe46127e4
xor eax, 0xf33ec1b0
rol eax, 0xc
popf
pushf
not eax
add eax, 0xffa7c3eb
xor eax, 0x9016ade2
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xf0a757c0
xor eax, 0xfbfa2d59
rol eax, 0x68
popf
jmp 0x180033bd1
cmp word [rbp - 0x80], r12w
jne 0x180034175
push rax
pushf
mov eax, 0x2158f3fe
pushf
not eax
add eax, 0x956f42d6
xor eax, 0x8ae4cd29
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xd94a5242
xor eax, 0xca1b1498
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x88ef2a04
xor eax, 0xfd445baf
rol eax, 0x42
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x3f5978e6
pushf
not eax
add eax, 0xde5209fd
xor eax, 0xf560aebf
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xc144156f
xor eax, 0x8b6ac70e
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd2036098
xor eax, 0xbe018d6e
rol eax, 6
popf
jmp 0x180033bd1
cmp byte [rbp - 0x7e], 0xc
jne 0x180034576
cmp byte [rbp - 0x7d], 3
jne 0x180034211
push rax
pushf
mov eax, 0xc905fc51
pushf
not eax
add eax, 0x9e94b301
xor eax, 0x9376adbc
rol eax, 0x27
popf
pushf
not eax
add eax, 0xfdc5b0c0
xor eax, 0xa550fcec
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x82fa77e6
xor eax, 0xe5defbe1
rol eax, 0x1a
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x83e4da6f
pushf
not eax
add eax, 0x807ec5b1
xor eax, 0x9e0b99c7
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x9d5dae4e
xor eax, 0x83cdfae2
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x846e8501
xor eax, 0xd04438f6
rol eax, 0
popf
pushf
not eax
add eax, 0xb3dbd033
xor eax, 0xf1a01ea7
rol eax, 0x94
popf
jmp 0x180033bd1
movzx eax, word [rbp - 0x78]
cmp eax, dword [rbp + 0xfb0]
jne 0x1800342cf
push rax
pushf
mov eax, 0x48553820
pushf
not eax
add eax, 0xda11007d
xor eax, 0xf6f0761d
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xb1ce03ac
xor eax, 0xc711e73b
rol eax, 0xee
popf
pushf
not eax
add eax, 0x955ad07a
xor eax, 0xb04494ae
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xa5de8fda
xor eax, 0xe39e9d20
rol eax, 0xfa
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0xa838b4df
pushf
not eax
add eax, 0x952eca1b
xor eax, 0xce23656d
rol eax, 0xee
popf
pushf
not eax
add eax, 0xf1a73731
xor eax, 0x899ffec4
rol eax, 0x75
popf
pushf
not eax
add eax, 0x9e0413ee
xor eax, 0xc766c9b5
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd2984da9
xor eax, 0x8c26b767
rol eax, 0xcf
popf
jmp 0x180033bd1
mov eax, 0xa4af5fe
pushf
not eax
add eax, 0xcde7fcca
xor eax, 0x821a99db
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd6c20e50
xor eax, 0xc660068b
rol eax, 0x1b
popf
cmp word [rbp - 0x68], ax
ja 0x18003438c
push rax
pushf
mov eax, 0x62255b51
pushf
not eax
add eax, 0x8aaa2889
xor eax, 0x820edc03
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xcc4e924e
xor eax, 0xbb19e7eb
rol eax, 0xfe
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x44718f0d
pushf
not eax
add eax, 0xfa97ad6c
xor eax, 0xdee0f218
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x9e9f1670
xor eax, 0xa8af57fb
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xc2401725
xor eax, 0xb33d0505
rol eax, 0x2c
popf
jmp 0x180033bd1
movzx ecx, word [rbp - 0x68]
lea rdx, [rcx + 5]
and rdx, 0xfffffffffffffffc
sub rdx, rcx
sub rdx, 2
mov edx, edx
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
cmp dword [rbp + rdx - 0x66], r14d
jne 0x180034453
push rax
pushf
mov eax, 0x164083e3
pushf
not eax
add eax, 0xae646e68
xor eax, 0x9747b357
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xacb0306a
xor eax, 0xdc4454b9
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x9cf7d9b7
xor eax, 0xd5c18392
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xfda4c945
xor eax, 0xf5686d7a
rol eax, 0x7c
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x3df9c848
pushf
not eax
add eax, 0xef0fbf06
xor eax, 0xad990099
rol eax, 0x64
popf
pushf
not eax
add eax, 0x940f6bb3
xor eax, 0xe414a6a3
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xf6e21ec1
xor eax, 0x82837561
rol eax, 0x64
popf
jmp 0x180033bd1
cmp word [rbp + rdx - 0x62], si
jne 0x1800344f9
push rax
pushf
mov eax, 0xe97f7c09
pushf
not eax
add eax, 0xacb4ae6e
xor eax, 0x9d82fb41
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xd1876d38
xor eax, 0xd04f403f
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x90df0127
xor eax, 0xb0646395
rol eax, 0x10
popf
pushf
not eax
add eax, 0xa6f7f867
xor eax, 0xf4f6b18c
rol eax, 0x5d
popf
jmp 0x180033bd1
push rax
pushf
mov eax, 0x6832dcba
pushf
not eax
add eax, 0x80f580e7
xor eax, 0x8fed17ae
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf255590d
xor eax, 0xbafbe611
rol eax, 0x4c
popf
jmp 0x180033bd1
xor eax, eax
jmp 0x1800345ac
mov eax, r14d
push rax
pushf
mov eax, 0xd96868f6
pushf
not eax
add eax, 0xa1117c80
xor eax, 0xcc2eb789
rol eax, 0x98
popf
pushf
not eax
add eax, 0xacd11345
xor eax, 0xacc56ba0
rol eax, 0x94
popf
jmp 0x180033bd1
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret