Function at 0x14004da36
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x8f544fb
pushf
not eax
add eax, 0x6157efe1
xor eax, 0x131b7b5f
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x50a92ae
xor eax, 0x66033ea
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x5b0bd370
xor eax, 0x180e9f71
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x726616da
xor eax, 0x2d675c61
rol eax, 0x82
popf
cmp eax, 7
jne 0x14004da99
popf
pop rax
jmp 0x14004e0f6
cmp eax, 0xd
jne 0x14004daa8
popf
pop rax
jmp 0x14004e40b
cmp eax, 8
jne 0x14004dab7
popf
pop rax
jmp 0x14004e189
cmp eax, 2
jne 0x14004dac6
popf
pop rax
jmp 0x14004dcd8
cmp eax, 5
jne 0x14004dad5
popf
pop rax
jmp 0x14004df64
cmp eax, 1
jne 0x14004dae4
popf
pop rax
jmp 0x14004dc66
cmp eax, 0xc
jne 0x14004daf3
popf
pop rax
jmp 0x14004e3a6
cmp eax, 0xa
jne 0x14004db02
popf
pop rax
jmp 0x14004e27c
cmp eax, 4
jne 0x14004db11
popf
pop rax
jmp 0x14004deae
cmp eax, 0
jne 0x14004db20
popf
pop rax
jmp 0x14004db6b
cmp eax, 0xe
jne 0x14004db2f
popf
pop rax
jmp 0x14004e440
cmp eax, 0xb
jne 0x14004db3e
popf
pop rax
jmp 0x14004e322
cmp eax, 6
jne 0x14004db4d
popf
pop rax
jmp 0x14004e088
cmp eax, 9
jne 0x14004db5c
popf
pop rax
jmp 0x14004e209
cmp eax, 3
jne 0x14004db6b
popf
pop rax
jmp 0x14004ddf9
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0xf40]
mov eax, 0x49ee3e77
pushf
not eax
add eax, 0x55772e1d
xor eax, 0x6df7269c
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x765772d
xor eax, 0x74f2ae3d
rol eax, 0xe2
popf
call fcn.1400a9a64
sub rsp, rax
xor esi, esi
mov rbx, rcx
mov dword [rbp + 0xf70], esi
mov dword [rbp + 0xf80], esi
cmp dword [rcx + 0x10], esi
je 0x14004dc20
push rax
pushf
mov eax, 0x14df69c2
pushf
not eax
add eax, 0x2c538c87
xor eax, 0x2802bdb0
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x21f91bb8
xor eax, 0xb02b80
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x5746c94b
xor eax, 0x55d01c11
rol eax, 0x17
popf
pushf
not eax
add eax, 0x11c35fe2
xor eax, 0x56bed980
rol eax, 0xfa
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x6097630c
pushf
not eax
add eax, 0x611db0fb
xor eax, 0x39e1aac0
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x7e72380b
xor eax, 0x48edc31c
rol eax, 0xb
popf
pushf
not eax
add eax, 0x19bbffbf
xor eax, 0x1fcfd5e0
rol eax, 0x97
popf
jmp 0x14004da8a
mov dword [rcx + 0x10], esi
cmp dword [rcx + 0xc], esi
jne 0x14004dca5
push rax
pushf
mov eax, 0xe82bccf3
pushf
not eax
add eax, 0x404957e0
xor eax, 0x317f7805
rol eax, 0x31
popf
pushf
not eax
add eax, 0x47700b16
xor eax, 0x619d3840
rol eax, 0x1d
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x74ce700c
pushf
not eax
add eax, 0x181206b1
xor eax, 0x6629a802
rol eax, 0x35
popf
pushf
not eax
add eax, 0x4b61662e
xor eax, 0x7692b8e6
rol eax, 0x4f
popf
jmp 0x14004da8a
xor eax, eax
mov qword [rsp + 0x20], rsi
lea r8d, [rsi + 0x10]
mov ecx, r8d
lea rdi, [rsp + 0x30]
rep stosb byte [rdi], al
movzx eax, word [rbx + 0x814]
lea rdi, [rbp + 0xf88]
add ax, 0x18
mov dword [rsp + 0x30], 0x3000005
mov word [rsp + 0x38], ax
lea ecx, [rsi + 8]
mov eax, dword [rbx + 8]
lea r9, [rbp + 0xf70]
mov dword [rsp + 0x3c], eax
lea r14d, [rsi + 5]
xor eax, eax
mov dword [rsp + 0x34], r8d
rep stosb byte [rdi], al
mov rcx, qword [rbx]
mov word [rbp + 0xf8e], dx
lea rdx, [rsp + 0x30]
mov word [rsp + 0x3a], si
mov dword [rbp + 0xf88], esi
mov word [rbp + 0xf8c], si
jmp 0x14004dd4c
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004dda0
push rax
pushf
mov eax, 0x2711e07b
pushf
not eax
add eax, 0x3481b2ae
xor eax, 0x25c6f418
rol eax, 0x11
popf
pushf
not eax
add eax, 0x522ad69b
xor eax, 0x37122738
rol eax, 0x88
popf
pushf
not eax
add eax, 0x2d34d00a
xor eax, 0x6893dfd7
rol eax, 0x71
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x65dd47e0
pushf
not eax
add eax, 0x4f4140dc
xor eax, 0x3ebf635d
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x790fe746
xor eax, 0x67a56b14
rol eax, 0x69
popf
pushf
not eax
add eax, 0x5edaf8cb
xor eax, 0x1f53c4db
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x60b29b83
xor eax, 0x5ea859e
rol eax, 0x51
popf
jmp 0x14004da8a
mov rcx, qword [rbx]
lea r9, [rbp + 0xf70]
lea r8d, [rsi + 8]
mov qword [rsp + 0x20], rsi
lea rdx, [rbp + 0xf88]
jmp 0x14004de14
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004de68
push rax
pushf
mov eax, 0x85fc1728
pushf
not eax
add eax, 0x5c8e24
xor eax, 0x72505f80
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x2ef59c6d
xor eax, 0x52f088b2
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x4263ad77
xor eax, 0x202f10de
rol eax, 0xe
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x5d03e95e
pushf
not eax
add eax, 0xbdf62c3
xor eax, 0x43d1917d
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x7f07660c
xor eax, 0x72a98bda
rol eax, 0x15
popf
pushf
not eax
add eax, 0x71afde06
xor eax, 0x2a5a3f3e
rol eax, 0xf5
popf
jmp 0x14004da8a
mov r8d, dword [rbx + 0x814]
lea rdx, [rbx + 0x14]
mov rcx, qword [rbx]
lea r9, [rbp + 0xf70]
mov qword [rsp + 0x20], rsi
jmp 0x14004dec9
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x14004df1d
push rax
pushf
mov eax, 0x8afb0e6d
pushf
not eax
add eax, 0x750e9036
xor eax, 0xcc1f60d
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x1f9751a
xor eax, 0x7533d905
rol eax, 0x75
popf
pushf
not eax
add eax, 0x462d6aff
xor eax, 0x6ba7655f
rol eax, 0xe7
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x107a7d5f
pushf
not eax
add eax, 0x2d32079d
xor eax, 0x25d8dd25
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x6fa03ad2
xor eax, 0x4e3c0945
rol eax, 6
popf
pushf
not eax
add eax, 0x4f60c0ef
xor eax, 0x155ae90c
rol eax, 0x24
popf
jmp 0x14004da8a
inc dword [rbx + 8]
lea rdi, [rsp + 0x40]
mov r8d, 0xfab9e638
pushf
not r8d
add r8d, 0x1c3faced
xor r8d, 0x77caf521
rol r8d, 0xbd
popf
pushf
not r8d
add r8d, 0x51900136
xor r8d, 0x18fa64f4
rol r8d, 0x48
popf
pushf
not r8d
add r8d, 0x3f673927
xor r8d, 0x62e6e391
rol r8d, 0xbb
popf
pushf
not r8d
add r8d, 0x3c2bf239
xor r8d, 0x712b7b21
rol r8d, 0x81
popf
mov qword [rsp + 0x20], rsi
mov ecx, r8d
lea r9, [rbp + 0xf80]
xor eax, eax
lea rdx, [rsp + 0x40]
rep stosb byte [rdi], al
mov rcx, qword [rbx]
jmp 0x14004dff2
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14004e055
push rax
pushf
mov eax, 0xb6b98752
pushf
not eax
add eax, 0x512b72f6
xor eax, 0x3e61efc4
rol eax, 0x85
popf
pushf
not eax
add eax, 0x7132238c
xor eax, 0x3032221
rol eax, 0x35
popf
pushf
not eax
add eax, 0x45a29585
xor eax, 0x4b1bfdb8
rol eax, 0xae
popf
pushf
not eax
add eax, 0x9c55a21
xor eax, 0x4d1fa069
rol eax, 0x5b
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x6d573a26
pushf
not eax
add eax, 0x32b72ebd
xor eax, 0x3889d451
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x23129212
xor eax, 0xa12d757
rol eax, 0x1f
popf
jmp 0x14004da8a
cmp word [rsp + 0x40], r14w
jne 0x14004e0c3
push rax
pushf
mov eax, 0xd82b626b
pushf
not eax
add eax, 0x10f35102
xor eax, 0x41375788
rol eax, 0x11
popf
pushf
not eax
add eax, 0x38d29225
xor eax, 0x46959e40
rol eax, 0xc1
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0xfecd131
pushf
not eax
add eax, 0x7abc7cae
xor eax, 0x10683c9c
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x1aef55f7
xor eax, 0x27fe46a2
rol eax, 0x30
popf
jmp 0x14004da8a
cmp byte [rsp + 0x42], 2
jne 0x14004e143
push rax
pushf
mov eax, 0x9f0343cf
pushf
not eax
add eax, 0x7e0099e4
xor eax, 0x77649c84
rol eax, 0x95
popf
pushf
not eax
add eax, 0x73220d42
xor eax, 0x23ab6956
rol eax, 0x60
popf
pushf
not eax
add eax, 0x31b595b8
xor eax, 0x2f0dc259
rol eax, 0x56
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x314b686d
pushf
not eax
add eax, 0x4e404f99
xor eax, 0x2cc5967c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x18f4a34a
xor eax, 0x317facbe
rol eax, 0x23
popf
pushf
not eax
add eax, 0x496ad00e
xor eax, 0x36e37e82
rol eax, 0xdc
popf
jmp 0x14004da8a
cmp byte [rsp + 0x43], 3
jne 0x14004e1d6
push rax
pushf
mov eax, 0xb5a271dc
pushf
not eax
add eax, 0x4dc58f7f
xor eax, 0x2e5bc6ee
rol eax, 0x21
popf
pushf
not eax
add eax, 0x47b8f70e
xor eax, 0x246d7ec6
rol eax, 0x75
popf
pushf
not eax
add eax, 0x49c7fbc4
xor eax, 0x73682675
rol eax, 0xc0
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0xa7c27782
pushf
not eax
add eax, 0x16274bfa
xor eax, 0x1aa25f47
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x6d548f99
xor eax, 0x4a1bc4c
rol eax, 0x16
popf
jmp 0x14004da8a
movzx edi, word [rsp + 0x48]
cmp edi, dword [rbp + 0xf80]
jne 0x14004e249
push rax
pushf
mov eax, 0x3731ceba
pushf
not eax
add eax, 0x1ff0d206
xor eax, 0x2af415e2
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x5c3f2398
xor eax, 0x3897585
rol eax, 0x34
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x3f8426ec
pushf
not eax
add eax, 0x374abd0
xor eax, 0x5f8cbd72
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x4d54c4cc
xor eax, 0x338d015a
rol eax, 0xfd
popf
jmp 0x14004da8a
cmp word [rsp + 0x54], si
jne 0x14004e2c9
push rax
pushf
mov eax, 0x113172bf
pushf
not eax
add eax, 0x270ab6b3
xor eax, 0x2e15762d
rol eax, 0x16
popf
pushf
not eax
add eax, 0x51772a3e
xor eax, 0x3d701bb9
rol eax, 0x38
popf
pushf
not eax
add eax, 0x19936209
xor eax, 0xfaec9d9
rol eax, 0x21
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0xc33f954f
pushf
not eax
add eax, 0x196fee55
xor eax, 0x6d9b6b98
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xfa63ae5
xor eax, 0x54d7131b
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x70ad0b8
xor eax, 0x59cbfc8
rol eax, 0x89
popf
pushf
not eax
add eax, 0x2dbc326c
xor eax, 0x2eba3c9d
rol eax, 6
popf
jmp 0x14004da8a
add edi, 0xffffffe8
cmp edi, 0x800
ja 0x14004e360
push rax
pushf
mov eax, 0x801635a7
pushf
not eax
add eax, 0x1add1b81
xor eax, 0x496f2da
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x3985267d
xor eax, 0xb1de9dc
rol eax, 0xed
popf
jmp 0x14004da8a
push rax
pushf
mov eax, 0x92dbdaad
pushf
not eax
add eax, 0x4ed4fbae
xor eax, 0x562f2595
rol eax, 0x15
popf
pushf
not eax
add eax, 0x22c8af34
xor eax, 0x1804054
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xd23cbc8
xor eax, 0x669ed996
rol eax, 0xa4
popf
jmp 0x14004da8a
mov r8d, edi
lea rcx, [rbx + 0x818]
lea rdx, [rsp + 0x58]
call fcn.14001ab70
lea eax, [rsi + 1]
mov dword [rbx + 0x1018], edi
jmp 0x14004e440
xor eax, eax
push rax
pushf
mov eax, 0x7a40566c
pushf
not eax
add eax, 0x715ce6a7
xor eax, 0x24108c81
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x4826db3d
xor eax, 0x17b3ebf7
rol eax, 0x21
popf
jmp 0x14004da8a
add rsp, 0x1040
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret