Function at 0x14000f170
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14009f088]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov edi, r15d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [r14]
add rbx, 0x440
mov qword [rsp + 0x48], rbx
mov rcx, rbx
call fcn.14002d46c
test eax, eax
je 0x14000f1ef
mov ecx, eax
call fcn.14002cf28
nop
mov rax, qword [r14]
mov rdx, qword [rax + 0x510]
mov rcx, qword [rax + 0x518]
sub rcx, rdx
sar rcx, 5
cmp rcx, 2
jae 0x14000f230
mov rcx, rbx
call fcn.14002d490
test eax, eax
je 0x14000f221
mov ecx, eax
call fcn.14002cf28
nop
inc edi
cmp edi, 0x12c
jl 0x14000f1c1
jmp 0x14000f9e1
add rdx, 0x20
lea rcx, [rbp - 0x68]
call fcn.1400102e0
nop
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r15w
mov r8d, 5
lea rdx, [0x140089bc8]
lea rcx, [rbp - 0x48]
call fcn.1400020e0
nop
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
mov r8d, 5
lea rdi, [0x140089960]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.1400020e0
nop
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 4
lea rdx, [0x140089bd8]
lea rcx, [rbp - 0x28]
call fcn.1400020e0
nop
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
lea r8, [rcx + 8]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea rdx, [rbp + 0x18]
mov rcx, qword [rcx]
call fcn.14000b6f0
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14000f324
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f31f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa24
call fcn.14002e8b4
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x14000f376
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f371
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa2a
call fcn.14002e8b4
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
mov r12, qword [rbp + 0x30]
mov r13, qword [rbp + 0x18]
cmp qword [rbp - 0x58], 1
jne 0x14000f586
mov edx, 1
lea rcx, [0x140089be4]
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x14000f586
add rcx, 2
sub rdx, 1
jne 0x14000f3c0
lea rdx, [rbp + 0x18]
cmp r12, 8
cmovae rdx, r13
mov r9, qword [rbp + 0x28]
cmp r9, 5
jne 0x14000f40c
mov rcx, r9
sub rdx, rdi
movzx eax, word [rdi]
cmp word [rdx + rdi], ax
jne 0x14000f40c
add rdi, 2
sub rcx, 1
jne 0x14000f3f4
jmp 0x14000f81e
lea r8, [rbp + 0x18]
cmp r12, 8
cmovae r8, r13
lea r10, [0x140089970]
cmp r9, 5
jne 0x14000f449
mov rdx, r9
mov rcx, r10
sub r8, r10
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x14000f449
add rcx, 2
sub rdx, 1
jne 0x14000f430
jmp 0x14000f81e
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 5
mov rdx, r10
lea rcx, [rsp + 0x78]
call fcn.1400020e0
nop
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov r8d, 4
lea rdx, [0x140089bd8]
lea rcx, [rsp + 0x58]
call fcn.1400020e0
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14000f4b2
mov r9, qword [r9]
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae r8, qword [rsp + 0x78]
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000f4e1
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14000f529
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f524
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa30
call fcn.14002e8b4
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14000f81e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f819
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa1e
jmp 0x14000f819
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
mov r8d, 4
lea rdx, [0x140089bd8]
lea rcx, [rsp + 0x78]
call fcn.1400020e0
mov rax, qword [r14]
mov rcx, qword [rax + 0x530]
mov r9, qword [rcx]
cmp qword [r9 + 0x18], 8
jb 0x14000f5c7
mov r9, qword [r9]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r8, qword [rbp - 0x68]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
add rcx, 8
cmp qword [rcx + 0x18], 8
jb 0x14000f5f3
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14000f63b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f635
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa36
call fcn.14002e8b4
nop
movdqa xmm0, xmmword [0x14008c810]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov dword [rsp + 0x30], 3
mov rdx, qword [rbp - 0x58]
add rdx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140002cf0
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x14000f6b4
lea rsi, [rcx + 0x1c]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0x38
lea rdx, [0x140089bf8]
call fcn.14004cf20
mov word [rdi + rsi*2], r15w
jmp 0x14000f6d3
mov qword [rsp + 0x20], 0x1c
lea r9, [0x140089bf8]
mov edx, 0x1c
lea rcx, [rsp + 0x58]
call fcn.140002fb0
lea r9, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae r9, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x58]
mov r15, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, r15
cmp rsi, rax
ja 0x14000f730
lea rax, [r15 + rsi]
mov qword [rsp + 0x68], rax
lea rdi, [rsp + 0x58]
cmp rcx, 8
cmovae rdi, qword [rsp + 0x58]
lea r8, [rsi + rsi]
lea rcx, [rdi + r15*2]
mov rdx, r9
call fcn.14004cf20
lea rax, [r15 + rsi]
xor r15d, r15d
mov word [rdi + rax*2], r15w
jmp 0x14000f745
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.140002fb0
xor r15d, r15d
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x14000f795
lea rsi, [rcx + 5]
mov qword [rsp + 0x68], rsi
lea rdi, [rsp + 0x58]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x58]
lea rcx, [rdi + rcx*2]
mov r8d, 0xa
lea rdx, [0x140089be8]
call fcn.14004cf20
mov word [rdi + rsi*2], r15w
lea rax, [rsp + 0x58]
jmp 0x14000f7b4
mov qword [rsp + 0x20], 5
lea r9, [0x140089be8]
mov edx, 5
lea rcx, [rsp + 0x58]
call fcn.140002fb0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rcx, [rbp - 0x48]
call fcn.140001ee0
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm7
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14000f81e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f819
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa3c
call fcn.14002e8b4
lea rdi, [0x1400a4950]
mov qword [rsp + 0x50], rdi
mov rcx, rdi
call fcn.14002d46c
test eax, eax
je 0x14000f83e
mov ecx, eax
call fcn.14002cf28
nop
mov rcx, qword [r14]
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x30]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov r8d, 7
lea rdx, [0x140089c38]
lea rcx, [rsp + 0x78]
call fcn.140002290
lea rdx, [rsp + 0x78]
mov rcx, qword [r14]
call fcn.140009590
mov rcx, qword [r14]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x38]
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [rsp + 0x30], 1
jne 0x14000f8ef
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x78]
call fcn.1400102e0
mov rdx, rax
mov rcx, qword [r14]
call fcn.140009650
nop
mov rcx, rdi
call fcn.14002d490
test eax, eax
je 0x14000f903
mov ecx, eax
call fcn.14002cf28
nop
cmp r12, 8
jb 0x14000f93f
lea rdx, [r12*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x14000f936
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa42
mov rcx, r13
call fcn.14002e8b4
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x14000f980
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f97a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa48
call fcn.14002e8b4
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14000f9bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f9b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fa18
call fcn.14002e8b4
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
mov rcx, rbx
call fcn.14002d490
test eax, eax
je 0x14000f9e1
mov ecx, eax
call fcn.14002cf28
nop
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.14002e890
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004fe44
nop
call fcn.14004fe44
nop
call fcn.14004fe44
nop
call fcn.14004fe44
nop
call fcn.14004fe44
nop
call fcn.14004fe44
int3
call fcn.14004fe44
nop
call fcn.14004fe44
nop
call fcn.14004fe44
int3