Function at 0x18002aa5d
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x8ea74e51
pushf
not eax
add eax, 0xebaa239f
xor eax, 0xececce6b
rol eax, 0x68
popf
pushf
not eax
add eax, 0x89bf47d9
xor eax, 0x9ba42127
rol eax, 0xe
popf
cmp eax, 4
jne 0x18002aa9a
popf
pop rax
jmp 0x18002af6a
cmp eax, 0
jne 0x18002aaa9
popf
pop rax
jmp 0x18002ab6c
cmp eax, 3
jne 0x18002aab8
popf
pop rax
jmp 0x18002aea3
cmp eax, 1
jne 0x18002aac7
popf
pop rax
jmp 0x18002ad25
cmp eax, 0xd
jne 0x18002aad6
popf
pop rax
jmp 0x18002b496
cmp eax, 7
jne 0x18002aae5
popf
pop rax
jmp 0x18002b0c5
cmp eax, 0xe
jne 0x18002aaf4
popf
pop rax
jmp 0x18002b4f2
cmp eax, 0xb
jne 0x18002ab03
popf
pop rax
jmp 0x18002b3dc
cmp eax, 0xc
jne 0x18002ab12
popf
pop rax
jmp 0x18002b45c
cmp eax, 8
jne 0x18002ab21
popf
pop rax
jmp 0x18002b157
cmp eax, 5
jne 0x18002ab30
popf
pop rax
jmp 0x18002b028
cmp eax, 2
jne 0x18002ab3f
popf
pop rax
jmp 0x18002adf0
cmp eax, 9
jne 0x18002ab4e
popf
pop rax
jmp 0x18002b215
cmp eax, 0xa
jne 0x18002ab5d
popf
pop rax
jmp 0x18002b329
cmp eax, 6
jne 0x18002ab6c
popf
pop rax
jmp 0x18002b0bb
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x18], r8d
push rbp
push rdi
push r14
lea rbp, [rsp - 0xf80]
mov eax, 0x84622a9
pushf
not eax
add eax, 0xc484965f
xor eax, 0xa5d46396
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe270d0f7
xor eax, 0xad9cfad0
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x8f427e71
xor eax, 0xd715e007
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xe8013812
xor eax, 0xae0dcd23
rol eax, 0xcb
popf
call fcn.1800652b5
sub rsp, rax
mov eax, dword [rcx + 8]
xor edi, edi
mov r8, rdx
mov dword [rbp + 0xfb0], edi
mov rbx, rcx
mov dword [rbp + 0xfa0], edi
xorps xmm0, xmm0
mov dword [rsp + 0x30], 0x30b0005
xorps xmm1, xmm1
mov dword [rsp + 0x34], 0x10
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x38], 0x48
mov rcx, r8
mov dword [rsp + 0x3c], eax
lea r14d, [rdi + 1]
mov word [rsp + 0x49], di
mov byte [rsp + 0x4b], dil
mov esi, 0x4b0621d8
pushf
not esi
add esi, 0xf5f9c73e
xor esi, 0xe1ddf476
rol esi, 0x6a
popf
pushf
not esi
add esi, 0xea69e060
xor esi, 0xdd581ea2
rol esi, 6
popf
pushf
not esi
add esi, 0xb517a66e
xor esi, 0xa6f88b33
rol esi, 0xfa
popf
pushf
not esi
add esi, 0xb0275320
xor esi, 0xa95a1ff4
rol esi, 0xb3
popf
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x40], 0x10001000
movdqu xmmword [rsp + 0x64], xmm1
mov byte [rsp + 0x48], 1
mov dword [rsp + 0x4c], 0x10000
mov dword [rsp + 0x74], 2
call fcn.18002ef8c
test eax, eax
jne 0x18002acf2
push rax
pushf
mov eax, 0x6e726871
pushf
not eax
add eax, 0xeb22b3cb
xor eax, 0x85b721e9
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xe778a6cf
xor eax, 0x91f8de93
rol eax, 0xed
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x98d6170b
pushf
not eax
add eax, 0xce22b323
xor eax, 0xb0f0634c
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xad11cf73
xor eax, 0xc72117d3
rol eax, 0x49
popf
jmp 0x18002aa8b
lea rdx, [rsp + 0x64]
mov dword [rsp + 0x60], 2
lea rcx, [0x1c0e421e7]
pushf
sub rcx, 0x40e27387
popf
call fcn.18002ef8c
test eax, eax
jne 0x18002ad97
push rax
pushf
mov eax, 0xb59b3bcf
pushf
not eax
add eax, 0x92a54043
xor eax, 0xb0cab4e5
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xeb62c659
xor eax, 0xbd916678
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x8e11ae16
xor eax, 0xa57d9c75
rol eax, 0xa9
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0xb3b59281
pushf
not eax
add eax, 0x98b0e690
xor eax, 0xd6175ea3
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa301a957
xor eax, 0xb24ae6af
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb4254895
xor eax, 0xc3995bd5
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x8ba49e36
xor eax, 0xfbb6b9a6
rol eax, 0x89
popf
jmp 0x18002aa8b
mov rcx, qword [rbx]
lea r9, [rbp + 0xfb0]
lea r8d, [rdi + 0x10]
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x30]
jmp 0x18002ae09
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x18002ae70
push rax
pushf
mov eax, 0xe90c9742
pushf
not eax
add eax, 0xd053f785
xor eax, 0xf92fc162
rol eax, 0x58
popf
pushf
not eax
add eax, 0x99b3b7d1
xor eax, 0xfd467afd
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa12459a1
xor eax, 0xfc1723a8
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9f869334
xor eax, 0xf002893b
rol eax, 0x37
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x4315025d
pushf
not eax
add eax, 0x9f6cbe80
xor eax, 0xd7b6fb91
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd2edf587
xor eax, 0xeb0afd35
rol eax, 0x48
popf
jmp 0x18002aa8b
mov rcx, qword [rbx]
lea r9, [rbp + 0xfb0]
lea r8d, [rdi + 0x38]
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x40]
jmp 0x18002aebc
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x18002af23
push rax
pushf
mov eax, 0x919cafb3
pushf
not eax
add eax, 0xa5f27ce3
xor eax, 0xef253adf
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf9c2b4d6
xor eax, 0xba0286fa
rol eax, 0x49
popf
pushf
not eax
add eax, 0x8cee4c06
xor eax, 0x8b7c920b
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x91c4c208
xor eax, 0xb4299060
rol eax, 0x76
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0xfdc9b919
pushf
not eax
add eax, 0x88878619
xor eax, 0xbaf8e7ff
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xbd7151b1
xor eax, 0xe9da0786
rol eax, 0x14
popf
pushf
not eax
add eax, 0xa250de9d
xor eax, 0xe4ec7372
rol eax, 0x51
popf
jmp 0x18002aa8b
inc dword [rbx + 8]
lea rcx, [rbp - 0x80]
mov r8d, esi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx]
lea r9, [rbp + 0xfa0]
mov r8d, esi
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x80]
jmp 0x18002af92
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18002afcf
push rax
pushf
mov eax, 0xe8c7fc78
pushf
not eax
add eax, 0xd213f40e
xor eax, 0xc833ee83
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x96d66dc4
xor eax, 0xda69e2b3
rol eax, 0xeb
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x861a586b
pushf
not eax
add eax, 0xacca5c6c
xor eax, 0x8ed84301
rol eax, 0x86
popf
pushf
not eax
add eax, 0xb7b30704
xor eax, 0xec887fa8
rol eax, 0x58
popf
pushf
not eax
add eax, 0xbe3f9c83
xor eax, 0xac76b26b
rol eax, 0xe
popf
pushf
not eax
add eax, 0xe1e5e770
xor eax, 0xb1875f41
rol eax, 0xcf
popf
jmp 0x18002aa8b
cmp word [rbp - 0x80], 5
jne 0x18002b062
push rax
pushf
mov eax, 0x95bff58
pushf
not eax
add eax, 0xdd798e74
xor eax, 0xadd6b73b
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe16743ff
xor eax, 0xfbd333c2
rol eax, 0x2e
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x59278995
pushf
not eax
add eax, 0xa5184248
xor eax, 0xf4288301
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xd32a40b1
xor eax, 0x9fd8bce7
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xd6afd469
xor eax, 0xfb6ff823
rol eax, 0x10
popf
pushf
not eax
add eax, 0x93413678
xor eax, 0xcb8d4933
rol eax, 0x20
popf
jmp 0x18002aa8b
cmp byte [rbp - 0x7e], 0xc
jne 0x18002b496
cmp byte [rbp - 0x7d], 3
jne 0x18002b124
push rax
pushf
mov eax, 0x37d7df6e
pushf
not eax
add eax, 0xe9a093e8
xor eax, 0x824f6033
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xea3601f9
xor eax, 0xb3382281
rol eax, 0x81
popf
pushf
not eax
add eax, 0xa276708f
xor eax, 0xf67f1304
rol eax, 0x70
popf
pushf
not eax
add eax, 0x8819b802
xor eax, 0x9706691f
rol eax, 0x1e
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0xc13c0ced
pushf
not eax
add eax, 0xebf8c9e8
xor eax, 0xabc8fa9a
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xeef42167
xor eax, 0xeae86533
rol eax, 0xd7
popf
jmp 0x18002aa8b
movzx eax, word [rbp - 0x78]
cmp eax, dword [rbp + 0xfa0]
jne 0x18002b1bc
push rax
pushf
mov eax, 0xc474988
pushf
not eax
add eax, 0xe1215d62
xor eax, 0xf8883ee8
rol eax, 0x58
popf
pushf
not eax
add eax, 0xa1d293f4
xor eax, 0xfa1c0525
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe56c13c8
xor eax, 0xaaf486b5
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x8a7e1b6a
xor eax, 0xa6267253
rol eax, 0xd9
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x3cfc9df3
pushf
not eax
add eax, 0xa741b558
xor eax, 0x8bb12b8f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd6eb4e51
xor eax, 0xa7ca6021
rol eax, 0xca
popf
pushf
not eax
add eax, 0xf9d771c6
xor eax, 0xf23e7726
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x985a9411
xor eax, 0xdd9c0611
rol eax, 0xcf
popf
jmp 0x18002aa8b
mov rax, qword [rbp - 0x68]
mov ecx, 0x625059d1
pushf
not ecx
add ecx, 0xa3c3fd6d
xor ecx, 0xbdc9c0f0
rol ecx, 0x1a
popf
pushf
not ecx
add ecx, 0xae17cc1e
xor ecx, 0x8fdecd05
rol ecx, 0xb1
popf
pushf
not ecx
add ecx, 0x9fe76c1d
xor ecx, 0xaa76cd97
rol ecx, 0x83
popf
pushf
not ecx
add ecx, 0xf4ffdd70
xor ecx, 0x9eafaf70
rol ecx, 0x97
popf
cmp ax, cx
ja 0x18002b2d0
push rax
pushf
mov eax, 0x8bc42741
pushf
not eax
add eax, 0xb9d628d0
xor eax, 0xdabb9f42
rol eax, 0xde
popf
pushf
not eax
add eax, 0x9668816b
xor eax, 0xd0f2761a
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xb7b600e1
xor eax, 0x9a976893
rol eax, 0xc
popf
pushf
not eax
add eax, 0xccb4a572
xor eax, 0xdd1f99fa
rol eax, 0xf1
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x1f5f26ee
pushf
not eax
add eax, 0xc7769870
xor eax, 0xdb76e19d
rol eax, 0xef
popf
pushf
not eax
add eax, 0xc7c1478f
xor eax, 0xc1c0dcfd
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x864d7318
xor eax, 0xe5432197
rol eax, 0xab
popf
pushf
not eax
add eax, 0xac0f3bdc
xor eax, 0xd9666f93
rol eax, 8
popf
jmp 0x18002aa8b
movzx ecx, ax
lea rax, [rcx + 5]
and rax, 0xfffffffffffffffc
sub rax, rcx
sub rax, 2
mov eax, eax
push rcx
not rcx
sub rax, rcx
pop rcx
sub rax, 1
cmp dword [rbp + rax - 0x66], r14d
jne 0x18002b3a9
push rax
pushf
mov eax, 0xa85de964
pushf
not eax
add eax, 0xf902d5d5
xor eax, 0xbd910eb9
rol eax, 0x95
popf
pushf
not eax
add eax, 0xf93fe409
xor eax, 0x99a63dcb
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa9102366
xor eax, 0xd19af4ae
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xb0113c5c
xor eax, 0xeee28507
rol eax, 0x48
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0x7796c3ec
pushf
not eax
add eax, 0x8572376f
xor eax, 0xca83aa31
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc87bb993
xor eax, 0xf2454a21
rol eax, 0xd9
popf
jmp 0x18002aa8b
cmp word [rbp + rax - 0x62], di
jne 0x18002b416
push rax
pushf
mov eax, 0xc092d1a9
pushf
not eax
add eax, 0xa41eff8a
xor eax, 0x95eef9fb
rol eax, 0x89
popf
pushf
not eax
add eax, 0x8aeb8314
xor eax, 0xc5435427
rol eax, 0x17
popf
jmp 0x18002aa8b
push rax
pushf
mov eax, 0xaceca8ce
pushf
not eax
add eax, 0x9612249a
xor eax, 0xc67be873
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x8a1a228a
xor eax, 0xe10f867a
rol eax, 0x85
popf
pushf
not eax
add eax, 0xde60c314
xor eax, 0xf4a14740
rol eax, 0x1b
popf
jmp 0x18002aa8b
xor eax, eax
jmp 0x18002b4f2
mov eax, r14d
push rax
pushf
mov eax, 0x7e6bc4f2
pushf
not eax
add eax, 0xefef66ee
xor eax, 0xfe3b7b28
rol eax, 0xe
popf
pushf
not eax
add eax, 0x968000ab
xor eax, 0x9d841256
rol eax, 4
popf
pushf
not eax
add eax, 0xe2248e9e
xor eax, 0xf1daa1af
rol eax, 0x59
popf
pushf
not eax
add eax, 0xbf59e89f
xor eax, 0x82c01621
rol eax, 0x62
popf
jmp 0x18002aa8b
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret