Function at 0x14000bce0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1400bb388]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r13, r9
mov r15, r8
mov r14, rdx
mov rdi, qword [rbp + 0x60]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
xor r12d, r12d
mov qword [rbp - 0x18], r12
movabs rcx, 0x7fffffffffffffff
test rdi, rdi
je 0x14000bda6
cmp rdi, rcx
ja 0x14000bf54
cmp rdi, 0x1000
jb 0x14000bd71
lea rsi, [rdi + 0x27]
cmp rsi, rdi
jbe 0x14000bf5a
mov rcx, rsi
call fcn.140057a2c
mov rcx, rax
test rax, rax
je 0x14000bf4e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000bd7d
mov rcx, rdi
call fcn.140057a2c
lea rsi, [rdi + 0x27]
mov qword [rbp - 0x28], rax
lea rbx, [rdi + rax]
mov qword [rbp - 0x18], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140059fe0
mov qword [rbp - 0x20], rbx
movabs rcx, 0x7fffffffffffffff
jmp 0x14000bdaa
lea rsi, [rdi + 0x27]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov qword [rbp - 0x30], r12
test rdi, rdi
je 0x14000be1d
cmp rdi, rcx
ja 0x14000bf60
cmp rdi, 0x1000
jb 0x14000bdf8
cmp rsi, rdi
jbe 0x14000bf66
mov rcx, rsi
call fcn.140057a2c
mov rcx, rax
test rax, rax
je 0x14000bf6c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000be00
mov rcx, rdi
call fcn.140057a2c
mov qword [rbp - 0x40], rax
lea rbx, [rdi + rax]
mov qword [rbp - 0x30], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140059fe0
mov qword [rbp - 0x38], rbx
mov qword [rsp + 0x20], r12
mov r9, r15
mov r8d, edi
mov rdx, qword [rbp - 0x28]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x14000be42
lea rdx, str.error_read_for_decrypt
jmp 0x14000be90
lea rcx, [r13 + 8]
mov rax, qword [rcx]
mov r9, rdi
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x40]
call qword [rax + 0x40]
mov edx, edi
neg edx
mov r9d, 1
xor r8d, r8d
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov qword [rsp + 0x20], r12
mov r9, r15
mov r8d, edi
mov rdx, qword [rbp - 0x40]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000beae
lea rdx, str.error_write_for_decrypt
lea rcx, [0x1400c32a0]
call fcn.140015290
mov rcx, rax
call fcn.140015830
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14000bef4
mov rdx, qword [rbp - 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bee3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf6c
call fcn.1400574e0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14000bf2a
mov rdx, qword [rbp - 0x18]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bf25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bf4e
call fcn.1400574e0
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400574c0
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140069478
int3
call fcn.1400126f0
int3
call fcn.1400017f0
nop
call fcn.1400126f0
nop
call fcn.1400017f0
int3
call fcn.140069478
int3