Function at 0x14003c850
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov rax, qword [0x1400e1080]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, r9
mov rsi, r8
mov rdi, rdx
mov qword [rbp - 1], rdx
mov qword [rbp + 7], r8
mov qword [rbp + 0xf], rbx
mov r14, qword [0x1400e53f0]
lea r12, [0x1400e52c0]
mov qword [rbp - 9], r12
mov rcx, r12
call fcn.140079ac8
test eax, eax
jne 0x14003cacb
cmp dword [0x1400e530c], 0x7fffffff
je 0x14003cad6
mov dword [rbp - 0x31], 0xa
xor r15d, r15d
mov dword [rbp - 0x39], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x39]
lea r8d, [rax + 4]
lea rdx, [rbp - 0x31]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
lea ecx, [r15 + 0x20]
call fcn.14007af64
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x19], SafeArrayUnaccessData
mov qword [rbp - 0x11], 0x1f
movups xmm0, xmmword [str.CUSTOM_INIT_MESSAGE]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400cd628]
mov word [rax + 0x10], cx
movzx ecx, byte [0x1400cd62a]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], r15b
lea rdx, [rbp - 0x29]
mov rcx, r14
call fcn.140033ff0
mov dword [rbp - 0x39], r15d
mov dword [rbp - 0x31], r15d
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x31]
lea r8d, [r15 + 4]
lea rdx, [rbp - 0x39]
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rbp - 0x39], 1
jne 0x14003c9af
mov rdx, rdi
lea rcx, [rbp - 0x29]
call fcn.1400202d0
mov rdx, rax
mov rcx, r14
call fcn.1400340b0
mov rdx, rsi
lea rcx, [rbp - 0x29]
call fcn.1400202d0
mov rdx, rax
mov rcx, r14
call fcn.1400340b0
mov rdx, rbx
lea rcx, [rbp - 0x29]
call fcn.1400202d0
mov rdx, rax
mov rcx, r14
call fcn.1400340b0
nop
mov rcx, r12
call fcn.140079ad0
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x14003c9f7
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14003c9f2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003caeb
mov rcx, r8
call fcn.14007af30
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
mov rdx, qword [rsi + 0x18]
cmp rdx, 7
jbe 0x14003ca46
mov rcx, qword [rsi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14003ca41
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003cabf
mov rcx, r8
call fcn.14007af30
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 7
mov word [rsi], r15w
mov rdx, qword [rbx + 0x18]
cmp rdx, 7
jbe 0x14003ca91
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x14003ca8c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003cac5
mov rcx, r8
call fcn.14007af30
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14007af10
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140082020
nop
call fcn.140082020
nop
mov ecx, 5
call fcn.140079a6c
int3
mov dword [0x1400e530c], 0x7ffffffe
mov ecx, 6
call fcn.140079a6c
nop
call fcn.140082020
int3