Function at 0x18008cb40
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push r14
mov eax, 0x10c0
call fcn.18008f2e0
sub rsp, rax
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rsp + 0x1090], rax
lea eax, [rcx + 0x11]
mov r14, rdx
mov dword [rsp + 0x30], eax
cmp ecx, eax
jae 0x18008cfd0
mov qword [rsp + 0x10d0], rbx
lea r8, [0x180000000]
mov qword [rsp + 0x10e0], rbp
xor edx, edx
mov rbp, qword [rsp + 0x50]
movabs r9, 0x2e00320033005f
mov qword [rsp + 0x10e8], rsi
mov rsi, qword [rsp + 0x50]
mov qword [rsp + 0x10b8], rdi
lea edi, [rcx - 0xf6]
mov qword [rsp + 0x10b0], r12
mov ecx, eax
mov r12, qword [rsp + 0x50]
mov qword [rsp + 0x10a8], r13
mov r13, qword [rsp + 0x48]
mov qword [rsp + 0x10a0], r15
mov r15, qword [rsp + 0x38]
mov dword [rsp + 0x40], edi
cmp edi, 0x24
ja case.default.0x18008cc00
movzx eax, byte [r8 + rdi + 0x8d034]
mov ecx, dword [r8 + rax*4 + 0x8cfec]
add rcx, r8
jmp rcx
mov rcx, qword [r14]
mov edx, 2
call qword [rsp + 0x58]
lea r8, [0x180000000]
movabs r9, 0x2e00320033005f
jmp case.0x18008cc00.17
mov word [rsp + 0x8c], dx
jmp case.0x18008cc00.17
xor r8d, r8d
lea rax, [rsp + 0x78]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea edx, [r8 + 0x1d]
call fcn.180010940
mov r9d, 0x6f
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
xor ecx, ecx
call fcn.18000ee10
test al, al
je 0x18008cf98
jmp 0x18008cc0e
mov r15, rdx
mov qword [rsp + 0x38], rdx
jmp case.0x18008cc00.17
mov byte [r14 + 0x284], 1
mov dword [r14 + 0x28], 0x238
jmp case.0x18008cc00.17
mov byte [rsp + 0x68], 0
jmp case.0x18008cc00.17
mov rsi, qword [r14 + 0x90]
mov rbp, qword [rsi + 8]
sub rbp, qword [rsi + 0x10]
jmp case.0x18008cc00.17
mov qword [rsp + 0x7e], r9
jmp case.0x18008cc00.17
mov eax, dword [0x180099112]
mov dword [rsp + 0x86], eax
movzx eax, word [0x180099116]
mov word [rsp + 0x8a], ax
jmp case.0x18008cc00.17
mov r8d, 1
lea rdx, [0x180099133]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18008cc0e
mov word [rsp + 0x7e], dx
jmp case.0x18008cc00.17
mov r8d, 3
lea rdx, [0x1800991c8]
lea rcx, [rsp + 0x78]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18008cc0e
mov r8d, 5
lea rdx, str.shutdownSSL
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x18009926d]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18008cc0e
mov word [rsp + 0x86], dx
jmp case.0x18008cc00.17
xor edx, edx
mov r8d, 0x288
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
jmp 0x18008cc0e
mov eax, dword [rsi + 0x28]
cmp eax, 1
jne 0x18008ce6f
mov r13, qword [rsp + 0x60]
mov ebx, 0x7b
cmp ebx, 0x7b
je 0x18008ce41
cmp ebx, 0xd74
je 0x18008ce1a
cmp ebx, 0x1a6d
jne 0x18008ce45
test r15, r15
je 0x18008ce45
mov rax, qword [rsi + 8]
cmp qword [rsi + 0x10], rax
jge 0x18008ce06
mov r9, qword [rsi]
lea rcx, [rsp + 0x90]
mov r8, r15
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdi, rax
test rax, rax
je 0x18008ce06
mov r9, r14
mov dword [rsp + 0x38], edi
mov r8d, 0x1a
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x90]
call fcn.180067330
add qword [rsi + 0x10], rdi
jmp 0x18008ce45
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
lea edx, [r9 + 0x66]
call fcn.18002fe20
jmp 0x18008ce45
mov ecx, 0x1000
sub rcx, qword [r13 + 8]
cmp qword [r13 + 8], 0x1000
cmovae rcx, r15
mov r15, rcx
test rbp, rbp
jle 0x18008ce45
cmp rcx, rbp
jbe 0x18008ce45
mov r15, rbp
jmp 0x18008ce45
lea r13, [r14 + 0x58]
add ebx, 0xcf9
cmp ebx, 0x26eb
jbe 0x18008cd90
mov edi, dword [rsp + 0x40]
mov qword [rsp + 0x60], r13
mov r13, qword [rsp + 0x48]
mov qword [rsp + 0x38], r15
jmp 0x18008cc0e
cmp eax, 2
jne 0x18008cf3c
mov r15, qword [rsp + 0x50]
mov ebx, 0xad
mov eax, ebx
sub eax, 0xad
je 0x18008cf21
sub eax, 1
je 0x18008cee0
cmp eax, 1
jne 0x18008cec2
test r13, r13
je 0x18008cea8
mov rax, qword [rsi + 8]
cmp qword [rsi + 0x10], rax
jl 0x18008cec2
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
lea edx, [r9 + 0x66]
call fcn.18002fe20
nop word [rax + rax]
xor edx, edx
inc ebx
cmp ebx, 0xb0
jb 0x18008ce82
mov qword [rsp + 0x50], r15
mov r15, qword [rsp + 0x38]
mov qword [rsp + 0x48], r13
jmp 0x18008cc0e
mov r9, qword [rsi]
mov r8, r12
mov rcx, qword [r15]
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov r13, rax
test rax, rax
je 0x18008cec0
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
mov qword [rsp + 0x20], r15
mov edx, 0xeb
lea rcx, [rsp + 0x48]
call fcn.1800755b0
add qword [rsi + 0x10], r13
jmp 0x18008cec0
lea r15, [r14 + 0x40]
test rbp, rbp
jg 0x18008cf2f
mov r12, rdx
jmp 0x18008cec2
mov r12, qword [r15 + 8]
cmp rbp, r12
cmovl r12, rbp
jmp 0x18008cec2
cmp eax, 3
jne case.0x18008cc00.17
mov r8, qword [rsi + 0x20]
test r8, r8
je 0x18008cf5c
mov r9, r14
lea edx, [rax + 0x43]
xor ecx, ecx
call fcn.18002b550
jmp 0x18008cc0e
or dword [r14 + 0xc0], 0x400
lea r8, [0x180000000]
jmp case.0x18008cc00.17
mov qword [r14 + 0x260], 0xffffffffffffffff
mov ecx, dword [rsp + 0x30]
inc edi
mov edx, 0
mov dword [rsp + 0x40], edi
lea eax, [rdi + 0xf6]
cmp eax, ecx
jb 0x18008cbe3
mov r13, qword [rsp + 0x10a8]
mov r12, qword [rsp + 0x10b0]
mov rdi, qword [rsp + 0x10b8]
mov rsi, qword [rsp + 0x10e8]
mov rbp, qword [rsp + 0x10e0]
mov rbx, qword [rsp + 0x10d0]
mov r15, qword [rsp + 0x10a0]
mov rcx, qword [rsp + 0x1090]
xor rcx, rsp
call fcn.18008f350
add rsp, 0x10c0
pop r14
ret