Function at 0x14004ceb3
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xef318b85
pushf
not eax
add eax, 0x44634887
xor eax, 0x1735fe11
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x46a6fd2e
xor eax, 0x484806aa
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x2a5d88
xor eax, 0x61ff03c1
rol eax, 0x12
popf
cmp eax, 0
jne 0x14004cf03
popf
pop rax
jmp 0x14004cfd5
cmp eax, 7
jne 0x14004cf12
popf
pop rax
jmp 0x14004d601
cmp eax, 2
jne 0x14004cf21
popf
pop rax
jmp 0x14004d2a7
cmp eax, 0xb
jne 0x14004cf30
popf
pop rax
jmp 0x14004d8de
cmp eax, 4
jne 0x14004cf3f
popf
pop rax
jmp 0x14004d40d
cmp eax, 0xa
jne 0x14004cf4e
popf
pop rax
jmp 0x14004d821
cmp eax, 0xc
jne 0x14004cf5d
popf
pop rax
jmp 0x14004d95e
cmp eax, 0xe
jne 0x14004cf6c
popf
pop rax
jmp 0x14004da1a
cmp eax, 1
jne 0x14004cf7b
popf
pop rax
jmp 0x14004d1c7
cmp eax, 5
jne 0x14004cf8a
popf
pop rax
jmp 0x14004d4dc
cmp eax, 9
jne 0x14004cf99
popf
pop rax
jmp 0x14004d764
cmp eax, 8
jne 0x14004cfa8
popf
pop rax
jmp 0x14004d6b9
cmp eax, 3
jne 0x14004cfb7
popf
pop rax
jmp 0x14004d35a
cmp eax, 0xd
jne 0x14004cfc6
popf
pop rax
jmp 0x14004d9bf
cmp eax, 6
jne 0x14004cfd5
popf
pop rax
jmp 0x14004d56f
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xfa8]
mov eax, 0x3b6938c3
pushf
not eax
add eax, 0x202654f8
xor eax, 0xfb701eb
rol eax, 0x14
popf
pushf
not eax
add eax, 0x6221941e
xor eax, 0x4bfde705
rol eax, 0xca
popf
pushf
not eax
add eax, 0x1d3ff239
xor eax, 0x4044ce79
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x63e04257
xor eax, 0x57d9960e
rol eax, 0xb3
popf
call fcn.1400a9a64
sub rsp, rax
mov rbx, rcx
lea rdi, [rsp + 0x30]
xor esi, esi
lea rdx, [rsp + 0x50]
xor eax, eax
mov dword [rbp + 0xfc0], esi
mov dword [rbp + 0xfb8], esi
mov r15d, 0x257628e7
pushf
not r15d
add r15d, 0x3654013c
xor r15d, 0x3a0232b8
rol r15d, 0x8a
popf
pushf
not r15d
add r15d, 0x5a68e3df
xor r15d, 0x6983b359
rol r15d, 0xfd
popf
pushf
not r15d
add r15d, 0x37a3957
xor r15d, 0x498dd594
rol r15d, 0xfb
popf
pushf
not r15d
add r15d, 0x32feff59
xor r15d, 0x63da0172
rol r15d, 0x6f
popf
lea ecx, [rsi + 0x10]
rep stosb byte [rdi], al
mov eax, dword [rbx + 8]
lea rdi, [rsp + 0x40]
mov dword [rsp + 0x3c], eax
lea ecx, [rsi + 0x38]
xor eax, eax
mov dword [rsp + 0x30], 0x30b0005
rep stosb byte [rdi], al
lea r14d, [rsi + 1]
mov dword [rsp + 0x34], InitCommonControls
lea rcx, [0x1b442a9b4]
pushf
sub rcx, 0x744034f4
popf
mov dword [rsp + 0x38], 0x48
lea r12d, [rsi + 5]
mov qword [rsp + 0x40], 0x10001000
mov byte [rsp + 0x48], r14b
mov dword [rsp + 0x4c], 0x10000
mov dword [rsp + 0x74], 2
jmp 0x14004d140
call qword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x14004d181
push rax
pushf
mov eax, 0xae579ffa
pushf
not eax
add eax, 0x4ed51b17
xor eax, 0x2f308590
rol eax, 0x53
popf
pushf
not eax
add eax, 0x74052e54
xor eax, 0x7fb0b3e4
rol eax, 0xcc
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0xf37305e2
pushf
not eax
add eax, 0x77a895a3
xor eax, 0x3481e078
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x37292742
xor eax, 0x7397a9c8
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x182dbf2d
xor eax, 0x3f147328
rol eax, 0x35
popf
jmp 0x14004cef4
lea rdx, [rsp + 0x64]
mov dword [rsp + 0x60], 2
lea rcx, [0x1b159c2d7]
pushf
sub rcx, 0x71574e97
popf
jmp 0x14004d1e7
call qword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
jne 0x14004d24e
push rax
pushf
mov eax, 0xdd8bc7a2
pushf
not eax
add eax, 0x26c8a99d
xor eax, 0x28837848
rol eax, 0x78
popf
pushf
not eax
add eax, 0x5209bfbe
xor eax, 0x6841ddcc
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xe8c649d
xor eax, 0x7ef46abb
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x43145381
xor eax, 0x12ede248
rol eax, 0x75
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x9dbc5d69
pushf
not eax
add eax, 0x79d0eca4
xor eax, 0x3540284c
rol eax, 0xda
popf
pushf
not eax
add eax, 0x7800217e
xor eax, 0x5d6c3d99
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x4ba38986
xor eax, 0x86afae7
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x270dbec2
xor eax, 0xc4e2f77
rol eax, 0x9e
popf
jmp 0x14004cef4
mov rcx, qword [rbx]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x10]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x30]
jmp 0x14004d2c0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004d301
push rax
pushf
mov eax, 0xafc8a5be
pushf
not eax
add eax, 0x1651ad32
xor eax, 0x23e673d5
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x15bd6d20
xor eax, 0x1e7f08c9
rol eax, 0xe
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x2c90a250
pushf
not eax
add eax, 0x3026020a
xor eax, 0x5bc5c052
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x40b58ccd
xor eax, 0x40d7158a
rol eax, 0x49
popf
pushf
not eax
add eax, 0x36c66f87
xor eax, 0x48f849f3
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x6d465339
xor eax, 0xeeb2be5
rol eax, 0xdd
popf
jmp 0x14004cef4
mov rcx, qword [rbx]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x38]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x40]
jmp 0x14004d373
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004d3da
push rax
pushf
mov eax, 0xfec888f7
pushf
not eax
add eax, 0x1d7e451b
xor eax, 0x66a4567a
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x72fa377f
xor eax, 0x6240f5b5
rol eax, 0xae
popf
pushf
not eax
add eax, 0x224b04c8
xor eax, 0x1d4daecc
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x884cb3f
xor eax, 0x230cb3e
rol eax, 0x27
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0xd236ab59
pushf
not eax
add eax, 0x64843d66
xor eax, 0x67b9e702
rol eax, 0x23
popf
pushf
not eax
add eax, 0x9800377
xor eax, 0x59dc5acb
rol eax, 0x5e
popf
jmp 0x14004cef4
add dword [rbx + 8], r14d
lea rdi, [rbp - 0x80]
xor eax, eax
mov qword [rsp + 0x20], rsi
mov ecx, r15d
lea r9, [rbp + 0xfb8]
rep stosb byte [rdi], al
mov rcx, qword [rbx]
lea rdx, [rbp - 0x80]
mov r8d, r15d
jmp 0x14004d433
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14004d496
push rax
pushf
mov eax, 0x7ad9c0de
pushf
not eax
add eax, 0x2ae57aec
xor eax, 0x77a4e5e3
rol eax, 0x49
popf
pushf
not eax
add eax, 0x77f51817
xor eax, 0x11ee11da
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x6432f017
xor eax, 0x32895247
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x65501aa6
xor eax, 0x3ceecc5f
rol eax, 0xbb
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x5e4fc016
pushf
not eax
add eax, 0x2f58b733
xor eax, 0x561d1037
rol eax, 0x40
popf
pushf
not eax
add eax, 0x7420c0a6
xor eax, 0x495ba786
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x370f205a
xor eax, 0x51ecfc62
rol eax, 0xd5
popf
jmp 0x14004cef4
cmp word [rbp - 0x80], r12w
jne 0x14004d53c
push rax
pushf
mov eax, 0xdfc135f2
pushf
not eax
add eax, 0xc97033b
xor eax, 0x6b59628
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x51c8b55b
xor eax, 0xafcb0db
rol eax, 0x73
popf
pushf
not eax
add eax, 0x5f4e13b2
xor eax, 0x7300cdc0
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x6ca9d93d
xor eax, 0x4f3ca885
rol eax, 0x1c
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0xcec36fa1
pushf
not eax
add eax, 0x1ad49c1c
xor eax, 0x5d0242af
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x6d30a60a
xor eax, 0x5bf9a2b8
rol eax, 0xf7
popf
jmp 0x14004cef4
cmp byte [rbp - 0x7e], 0xc
jne 0x14004d5bb
push rax
pushf
mov eax, 0x5de8a8a6
pushf
not eax
add eax, 0x76344b13
xor eax, 0x4fa8d711
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x724accdf
xor eax, 0x5d1e422a
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xe0f0102
xor eax, 0x3f3a5175
rol eax, 0x7e
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0xc46daa9d
pushf
not eax
add eax, 0x69c671d4
xor eax, 0x16013130
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x7f9000fa
xor eax, 0x77a49b5f
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x30ad5684
xor eax, 0xdad2c2
rol eax, 0xab
popf
jmp 0x14004cef4
cmp byte [rbp - 0x7d], 3
jne 0x14004d660
push rax
pushf
mov eax, 0xe56d60a7
pushf
not eax
add eax, 0x7ac85feb
xor eax, 0xb8b4331
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x38c219bc
xor eax, 0x27e9e05f
rol eax, 0x12
popf
pushf
not eax
add eax, 0x215ddbc
xor eax, 0x2ff912c8
rol eax, 0x79
popf
pushf
not eax
add eax, 0xeb716d8
xor eax, 0xdf3004
rol eax, 0x50
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x8482ec89
pushf
not eax
add eax, 0x7294fc5f
xor eax, 0x26c1bbc4
rol eax, 0x90
popf
pushf
not eax
add eax, 0x49fcb069
xor eax, 0x5c9b0fac
rol eax, 0x25
popf
pushf
not eax
add eax, 0x7ac24152
xor eax, 0xa36c80f
rol eax, 0x92
popf
pushf
not eax
add eax, 0x2ba89077
xor eax, 0x794b75a7
rol eax, 0xc7
popf
jmp 0x14004cef4
movzx eax, word [rbp - 0x78]
cmp eax, dword [rbp + 0xfb8]
jne 0x14004d70b
push rax
pushf
mov eax, 0x7ba00631
pushf
not eax
add eax, 0x4889b1d3
xor eax, 0x4bc133d3
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x30a25457
xor eax, 0x3f1c4ed1
rol eax, 6
popf
pushf
not eax
add eax, 0x3b7c7020
xor eax, 0x744977d5
rol eax, 0xf2
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x56c9f7a0
pushf
not eax
add eax, 0x71723adb
xor eax, 0x30b367ae
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x4e21cd74
xor eax, 0x5073eb50
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x57d4be87
xor eax, 0x7b0fec6a
rol eax, 0x79
popf
pushf
not eax
add eax, 0x4b60fa16
xor eax, 0x1477ab63
rol eax, 0xf2
popf
jmp 0x14004cef4
mov eax, 0xfcd235f2
pushf
not eax
add eax, 0x15611568
xor eax, 0x17d4dcad
rol eax, 0x88
popf
pushf
not eax
add eax, 0x59e14b93
xor eax, 0x1b852c57
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x34a1e75b
xor eax, 0x871fcf8
rol eax, 0xa4
popf
cmp word [rbp - 0x68], ax
ja 0x14004d7ee
push rax
pushf
mov eax, 0x77f7bc4f
pushf
not eax
add eax, 0x5a2230c1
xor eax, 0x7a6612d4
rol eax, 0x92
popf
pushf
not eax
add eax, 0x5ee1d2ad
xor eax, 0x641c960
rol eax, 0x19
popf
pushf
not eax
add eax, 0x4a17cf81
xor eax, 0x1287ba10
rol eax, 0x2f
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x91fc9f9d
pushf
not eax
add eax, 0x3189b710
xor eax, 0x17e9671c
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xf4697b8
xor eax, 0x7265baa7
rol eax, 0x86
popf
jmp 0x14004cef4
movzx edx, word [rbp - 0x68]
lea rcx, [rdx + 5]
and rcx, 0xfffffffffffffffc
push rdx
not rdx
add rcx, rdx
pop rdx
add rcx, 1
sub rcx, 2
mov ecx, ecx
push rdx
not rdx
sub rcx, rdx
pop rdx
sub rcx, 1
cmp dword [rbp + rcx - 0x66], r14d
jne 0x14004d885
push rax
pushf
mov eax, 0x4def18e3
pushf
not eax
add eax, 0x2ac4596
xor eax, 0x3142e1fc
rol eax, 0x78
popf
pushf
not eax
add eax, 0x56d21119
xor eax, 0x84c1a4b
rol eax, 0xb8
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x7e1f6452
pushf
not eax
add eax, 0x4aeb55d7
xor eax, 0x25698f05
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x21515d4a
xor eax, 0x3983d887
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x3eac1e9b
xor eax, 0x5d9e914d
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x4e9c1f35
xor eax, 0x1106bab1
rol eax, 0x3c
popf
jmp 0x14004cef4
cmp word [rbp + rcx - 0x62], si
jne 0x14004d918
push rax
pushf
mov eax, 0x2a6fcf70
pushf
not eax
add eax, 0x6286fbd0
xor eax, 0x73cc3045
rol eax, 0x51
popf
pushf
not eax
add eax, 0x3c211ec9
xor eax, 0xec8712
rol eax, 0x6a
popf
jmp 0x14004cef4
push rax
pushf
mov eax, 0x8f97bb53
pushf
not eax
add eax, 0x293f9a15
xor eax, 0x719a074b
rol eax, 0x89
popf
pushf
not eax
add eax, 0x782a1c84
xor eax, 0x61175c81
rol eax, 0x27
popf
pushf
not eax
add eax, 0x720d41d5
xor eax, 0x11e02886
rol eax, 0xc4
popf
jmp 0x14004cef4
mov eax, r14d
jmp 0x14004da1a
xor eax, eax
push rax
pushf
mov eax, 0x381788e2
pushf
not eax
add eax, 0xb99c5de
xor eax, 0x1c887018
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x74356819
xor eax, 0x7cf746ee
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x4872d5f2
xor eax, 0xb7713db
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x5c47f8af
xor eax, 0x623a3019
rol eax, 0xf7
popf
jmp 0x14004cef4
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret