Function at 0x180026587
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x11917c01
pushf
not eax
add eax, 0xc9888337
xor eax, 0xfbf38cb7
rol eax, 0
popf
pushf
not eax
add eax, 0xfe505cfb
xor eax, 0xea6ba7dd
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb18d7098
xor eax, 0x89ff645b
rol eax, 0x15
popf
pushf
not eax
add eax, 0xd1b6d5f8
xor eax, 0xade545ad
rol eax, 0x3d
popf
cmp eax, 4
jne 0x1800265ea
popf
pop rax
jmp 0x180026a8c
cmp eax, 0
jne 0x1800265f9
popf
pop rax
jmp 0x1800266bc
cmp eax, 3
jne 0x180026608
popf
pop rax
jmp 0x1800269c6
cmp eax, 1
jne 0x180026617
popf
pop rax
jmp 0x18002686e
cmp eax, 0xd
jne 0x180026626
popf
pop rax
jmp 0x180026f17
cmp eax, 7
jne 0x180026635
popf
pop rax
jmp 0x180026bd5
cmp eax, 0xe
jne 0x180026644
popf
pop rax
jmp 0x180026f60
cmp eax, 0xb
jne 0x180026653
popf
pop rax
jmp 0x180026e5d
cmp eax, 0xc
jne 0x180026662
popf
pop rax
jmp 0x180026eca
cmp eax, 8
jne 0x180026671
popf
pop rax
jmp 0x180026c67
cmp eax, 5
jne 0x180026680
popf
pop rax
jmp 0x180026b4b
cmp eax, 2
jne 0x18002668f
popf
pop rax
jmp 0x180026913
cmp eax, 9
jne 0x18002669e
popf
pop rax
jmp 0x180026cec
cmp eax, 0xa
jne 0x1800266ad
popf
pop rax
jmp 0x180026d83
cmp eax, 6
jne 0x1800266bc
popf
pop rax
jmp 0x180026bcb
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x18], r8d
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xfa8]
mov eax, 0x5bde4c53
pushf
not eax
add eax, 0xd97949e4
xor eax, 0xa4c4221d
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xe1b316ff
xor eax, 0xaa4d8b00
rol eax, 0
popf
call fcn.18005644b
sub rsp, rax
mov eax, dword [rcx + 8]
xor esi, esi
mov rbx, rdx
mov dword [rbp + 0xfc0], esi
mov rdi, rcx
mov dword [rbp + 0xfb0], esi
xor edx, edx
mov dword [rsp + 0x30], 0x30b0005
lea r8d, [rsi + 0x38]
mov dword [rsp + 0x34], 0x10
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x38], 0x48
lea r12d, [rsi + 5]
mov dword [rsp + 0x3c], eax
call sub.VCRUNTIME140.dll_memset
lea r14d, [rsi + 1]
mov qword [rsp + 0x40], 0x10001000
lea rdx, [rsp + 0x50]
mov byte [rsp + 0x48], r14b
mov rcx, rbx
mov dword [rsp + 0x4c], 0x10000
mov r15d, 0xf05f9fbd
pushf
not r15d
add r15d, 0x9433ec9b
xor r15d, 0xe4c3123c
rol r15d, 0x7c
popf
pushf
not r15d
add r15d, 0xaa911c47
xor r15d, 0xdcb5b520
rol r15d, 0xfa
popf
pushf
not r15d
add r15d, 0x985ba1f1
xor r15d, 0x93083985
rol r15d, 0x83
popf
pushf
not r15d
add r15d, 0xce821d38
xor r15d, 0xecbc1c06
rol r15d, 0x2e
popf
mov dword [rsp + 0x74], 2
call fcn.180028db6
test eax, eax
jne 0x180026828
push rax
pushf
mov eax, 0x9877842c
pushf
not eax
add eax, 0x9643a731
xor eax, 0xa640f46b
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc7756d84
xor eax, 0xf9fe7fcb
rol eax, 0x95
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xc56d73f0
pushf
not eax
add eax, 0xe08d5b9e
xor eax, 0x95a52c3d
rol eax, 0x84
popf
pushf
not eax
add eax, 0xbbd3d57e
xor eax, 0xd172e739
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf3e402f4
xor eax, 0xede357f7
rol eax, 0x23
popf
jmp 0x1800265db
lea rdx, [rsp + 0x64]
mov dword [rsp + 0x60], 2
lea rcx, [0x1fdc0c946]
pushf
sub rcx, 0x7dbf4c7e
popf
call fcn.180028db6
test eax, eax
jne 0x1800268cd
push rax
pushf
mov eax, 0xcb886c29
pushf
not eax
add eax, 0xbac482fd
xor eax, 0xbe4be377
rol eax, 6
popf
pushf
not eax
add eax, 0xe68ca23e
xor eax, 0x888f3129
rol eax, 0x76
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xfc9ded02
pushf
not eax
add eax, 0xb78453d5
xor eax, 0xf04c34ef
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xf1b6156e
xor eax, 0xeda12be2
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xe2a0bf98
xor eax, 0xd72ba181
rol eax, 2
popf
jmp 0x1800265db
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x10]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x30]
jmp 0x18002692c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180026980
push rax
pushf
mov eax, 0x5d78ede4
pushf
not eax
add eax, 0x867bea4c
xor eax, 0xda860f58
rol eax, 2
popf
pushf
not eax
add eax, 0xefb6121e
xor eax, 0xf6a7a7c0
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xc4a2976a
xor eax, 0xd1c3c064
rol eax, 4
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0x26c97083
pushf
not eax
add eax, 0x892f0984
xor eax, 0xf86293fa
rol eax, 0x29
popf
pushf
not eax
add eax, 0x8462f87b
xor eax, 0xca1563fc
rol eax, 0x44
popf
pushf
not eax
add eax, 0xbff315ab
xor eax, 0xfa6e49ff
rol eax, 0x72
popf
jmp 0x1800265db
mov rcx, qword [rdi]
lea r9, [rbp + 0xfc0]
lea r8d, [rsi + 0x38]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x40]
jmp 0x1800269df
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x180026a46
push rax
pushf
mov eax, 0x50232910
pushf
not eax
add eax, 0x8d49ae65
xor eax, 0xb7d2c77a
rol eax, 0x36
popf
pushf
not eax
add eax, 0x86e770d4
xor eax, 0xc7d4964d
rol eax, 0x38
popf
pushf
not eax
add eax, 0xde512496
xor eax, 0xb29dffef
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd21fb9ac
xor eax, 0x80f247af
rol eax, 0xb9
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0x273c7edb
pushf
not eax
add eax, 0xb1c5c122
xor eax, 0x85fd1e49
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x915045b1
xor eax, 0xbcbe9d7b
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xe72d8fbb
xor eax, 0xa4c1e124
rol eax, 0
popf
jmp 0x1800265db
add dword [rdi + 8], r14d
lea rcx, [rbp - 0x80]
mov r8d, r15d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rdi]
lea r9, [rbp + 0xfb0]
mov r8d, r15d
mov qword [rsp + 0x20], rsi
lea rdx, [rbp - 0x80]
jmp 0x180026ab5
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180026af2
push rax
pushf
mov eax, 0x1a5ae510
pushf
not eax
add eax, 0x830ae01f
xor eax, 0xb6700b1b
rol eax, 0x68
popf
pushf
not eax
add eax, 0x879e3838
xor eax, 0xe7ae2258
rol eax, 0xe2
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0x9a319b74
pushf
not eax
add eax, 0xa78f171a
xor eax, 0x949d9881
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9332cf95
xor eax, 0xad42c0f1
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8d9f6086
xor eax, 0x954327ea
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa93e67da
xor eax, 0xa1f1272d
rol eax, 0x27
popf
jmp 0x1800265db
cmp word [rbp - 0x80], r12w
jne 0x180026b98
push rax
pushf
mov eax, 0xdbfb9129
pushf
not eax
add eax, 0xbafd5149
xor eax, 0xc343ddb4
rol eax, 0xf
popf
pushf
not eax
add eax, 0xc7cd1b93
xor eax, 0x81a1116a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xfde9c32f
xor eax, 0xd29bb593
rol eax, 0x42
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0x46411ada
pushf
not eax
add eax, 0x8b7a901a
xor eax, 0x985e6011
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xcf61b877
xor eax, 0xe2cb4724
rol eax, 0xea
popf
jmp 0x1800265db
cmp byte [rbp - 0x7e], 0xc
jne 0x180026f17
cmp byte [rbp - 0x7d], 3
jne 0x180026c21
push rax
pushf
mov eax, 0x37a09f07
pushf
not eax
add eax, 0xb576f4a1
xor eax, 0x80cf8b9c
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xfa97c248
xor eax, 0xc15b1547
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xa9019ec5
xor eax, 0xe624b53b
rol eax, 0x25
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xc303c0fb
pushf
not eax
add eax, 0xae0a86bb
xor eax, 0xaebb26f1
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf4453639
xor eax, 0x83af50e9
rol eax, 0xee
popf
pushf
not eax
add eax, 0xb976b441
xor eax, 0xa5076d26
rol eax, 0x1d
popf
jmp 0x1800265db
movzx eax, word [rbp - 0x78]
cmp eax, dword [rbp + 0xfb0]
jne 0x180026cb9
push rax
pushf
mov eax, 0xe4e3b434
pushf
not eax
add eax, 0xc2ff7bfe
xor eax, 0x8480835d
rol eax, 0x70
popf
pushf
not eax
add eax, 0xe50b36c8
xor eax, 0xb5a0587c
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd6e49a5b
xor eax, 0xf463eba4
rol eax, 0x62
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xe9af771c
pushf
not eax
add eax, 0xa4774ceb
xor eax, 0x9183eac9
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb185b875
xor eax, 0x8e2d7f1a
rol eax, 0xab
popf
jmp 0x1800265db
mov eax, 0x1ecc4052
pushf
not eax
add eax, 0xbec897b6
xor eax, 0xfd920bdc
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd44475e2
xor eax, 0xd93902fc
rol eax, 0x35
popf
cmp word [rbp - 0x68], ax
ja 0x180026d50
push rax
pushf
mov eax, 0x174e07a
pushf
not eax
add eax, 0xf7e0df8b
xor eax, 0xca2d2d2a
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x8af85050
xor eax, 0xfc699e9b
rol eax, 0x14
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xcbb50036
pushf
not eax
add eax, 0xed89b869
xor eax, 0xcf7634e7
rol eax, 0x44
popf
pushf
not eax
add eax, 0x89c48c1f
xor eax, 0x9fafbec0
rol eax, 0xe
popf
jmp 0x1800265db
movzx ecx, word [rbp - 0x68]
lea rdx, [rcx + 5]
and rdx, 0xfffffffffffffffc
sub rdx, rcx
sub rdx, 2
mov edx, edx
push rcx
not rcx
sub rdx, rcx
pop rcx
sub rdx, 1
cmp dword [rbp + rdx - 0x66], r14d
jne 0x180026e04
push rax
pushf
mov eax, 0x4dc1ea90
pushf
not eax
add eax, 0xece01e5a
xor eax, 0xdb71ed18
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xef5ca5e2
xor eax, 0xc8a4b550
rol eax, 0x59
popf
pushf
not eax
add eax, 0x8fdf5c88
xor eax, 0xa9de8071
rol eax, 0x32
popf
pushf
not eax
add eax, 0xaefa9c34
xor eax, 0xb4fbdbd6
rol eax, 0xbd
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0xeab5310
pushf
not eax
add eax, 0x9b38d666
xor eax, 0xbbb8d738
rol eax, 0xb
popf
pushf
not eax
add eax, 0x85c13f7f
xor eax, 0xf31aa831
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xe1bb9307
xor eax, 0xf53946d1
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xf4ad6b53
xor eax, 0xd7c39756
rol eax, 0x75
popf
jmp 0x1800265db
cmp word [rbp + rdx - 0x62], si
jne 0x180026e97
push rax
pushf
mov eax, 0xc9810487
pushf
not eax
add eax, 0x98973308
xor eax, 0xd83bb7c8
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x857e08cd
xor eax, 0xabe99f5a
rol eax, 0x77
popf
jmp 0x1800265db
push rax
pushf
mov eax, 0x98686747
pushf
not eax
add eax, 0xc3fd24e0
xor eax, 0xbdb54522
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xbe4c747c
xor eax, 0xd3f0ac99
rol eax, 0xf2
popf
jmp 0x1800265db
xor eax, eax
jmp 0x180026f60
mov eax, r14d
push rax
pushf
mov eax, 0x457710c1
pushf
not eax
add eax, 0xe9c322c9
xor eax, 0xe75a6a5c
rol eax, 0x33
popf
pushf
not eax
add eax, 0x877cbcd4
xor eax, 0x8bc56230
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe3f5aba6
xor eax, 0xc356dc17
rol eax, 0x20
popf
jmp 0x1800265db
lea r11, [rsp + 0x1080]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret