Function at 0x1401b5cad
Capabilities:
Read file on windows

Disassembly:
push rdi
jmp 0x1401b028c
jmp 0x1401b1fd6
sub r15, 0xffffffff90247228
xor r15, 0x69ac6e36
jmp 0x1401b07cf
add r15, 0x3303f4eb
jmp 0x1401b07f4
jmp 0x1401b0864
add r15, 0x1fecd09e
add r15, 0x5f48df3f
sub r15, 0xffffffff9b8a06c3
out dx, eax
ret
invalid
mov bl, byte [rbx + 0x17b5e9]
invalid
add r12, 0xfffffffff7dfb0b4
xor r12, 0x206815cb
xor r12, 0x22c82ee5
xor r12, 0x2bc2778e
lea r12, [r12]
mov qword [rsp + r12], rax
pop r12
jmp 0x1401b14cc
sub rdx, 0xb97be91
jmp 0x1401b14c0
xor rdx, 0xffffffffc25c8203
jmp 0x1401b99f9
cmp qword [rsp + 0x40], 0xffffffffffffffff
jmp 0x1401b14e7
sub rdx, 0xffffffffb02de2b9
xor rdx, 0xffffffff94fe19bc
mov esp, 0xe994fe19
invalid
push rbp
add byte [rax], al
jne 0x1401b75a7
jmp 0x1401b75a2
sub rdi, 0xffffffff837ef0b3
xor rdi, 0xffffffffafd1d80d
jmp 0x1401b1538
xor rdi, 0x70da4799
lea rdi, [rdi + riz]
mov rax, qword [rsp + rdi]
jmp 0x1401b154f
jmp 0x1401bad88
lea r10, [r10 + riz]
jmp 0x1401b1c3e
mov rcx, qword [rsp + r10]
pop r10
call qword [sym.imp.KERNEL32.dll_CloseHandle]
pop rdx
push rsi
movabs rsi, 0xfffffffe3159a554
add rsi, 0x5895006a
xor rsi, 0x59a32492
sub rsi, 0xffffffff8f366446
add rsi, 0xffffffffdf8c1dff
xor rsi, 0xffffffffcd37789c
jmp 0x1401b3059
movabs rdi, 0x578e5db2
jmp 0x1401b202e
jmp 0x1401b20c5
sub r15, 0x7715c074
sub r15, 0x7c11a3a2
sub r15, 0x5995cf7d
lea r15, [r15 + riz]
mov rdx, qword [rsp + r15]
pop r15
jmp 0x1401b2070
push rsi
jmp 0x1401b20af
movabs rsi, 0xfffffffee0576269
sub rsi, 0x383906a0
jmp 0x1401bb89e
add rdi, 0x75c95452
jmp 0x1401b20d9
add rdi, 0x6e6ba94f
add rdi, 0x38a6b13c
jmp 0x1401b2142
sub rdi, 0x753a0305
xor rdi, 0xffffffff9fd6e940
sub rdi, 0x1f25350d
xor rdi, 0x5befc59b
sub rdi, 0xffffffffd0a56c93
xor rdi, 0x103e4826
sub rdi, 0x54331b63
add rdi, 0xffffffffc0dbc592
sub rdi, 0xffffffff9a80b1a2
sub rdi, 0xffffffffd4fa13d4
xor rdi, 0x346fa0a1
jmp 0x1401b1512
add r10, 0xfffffffffa8881ee
sub r10, 0xffffffffbcb7aa21
sub r10, 0xffffffffcd240549
add r10, 0x7a7d8cdf
sub r10, 0x2915ebfd
jmp 0x1401b2546
add r10, 0xffffffffcabc1885
xor r10, 0x420f70ae
add r10, 0x48e4b2df
add r10, 0x67aa870d
sub r10, 0xffffffffedcf673d
xor r10, 0xffffffff9f1b652f
sub r10, 0xffffffffd5e11da4
add r10, 0xffffffff92e62bc2
add r10, 0x799ab9d
jmp 0x1401b2593
sub r10, 0x75ef6003
add r10, 0xffffffff9a735607
add r10, 0xffffffffd9c8c5ae
sub r10, 0x314a6105
jmp 0x1401b1bf4
sub rsi, 0x5bd29258
sub rsi, 0x1a71d21e
jmp 0x1401b307b
sub rsi, 0x774fddb3
lea rsi, [rsi + riz]
mov rcx, qword [rsp + rsi]
pop rsi
jmp 0x1401b6129
mov edx, 0xda7aaf88
jmp 0x1401b314f
jmp 0x1401bb391
sub r8d, 0x540c4339
add r8d, 0x5ca53c81
xor r8d, 0x6e33246a
add r8d, 0x4314ea57
jmp 0x1401b344a
add r8d, 0x12a9f94
jmp 0x1401b345e
add r8d, 0xdf99c45b
jmp 0x1401b3f3b
xor r8d, 0x97ff06f5
add r8d, 0xd268bfd5
jmp 0x1401b4074
jmp 0x1401b30c4
jne 0x1401b4122
jmp 0x1401b1c4a
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x58]
jmp 0x1401b5a00
xor rsi, 0x3870b83f
jmp 0x1401b46ac
sub rsi, 0xffffffffabee9d23
jmp 0x1401b473a
xor rsi, 0xffffffff80d9f706
jmp 0x1401b4756
add rsi, 0x5b08a732
jmp 0x1401b47a3
sub rsi, 0xffffffffe9bfaaf4
add rsi, 0xffffffff8cce06cb
jmp 0x1401b47f4
xor rsi, 0xffffffffaa6a0270
xor rsi, 0xffffffffa82d5596
add rsi, 0x36f76c4f
add rsi, 0x33fd1dcc
sub rsi, 0xffffffffcf565dec
lea rsi, [rsi + riz]
mov rcx, qword [rsp + rsi]
jmp 0x1401b4827
jmp 0x1401ba64b
mov rcx, qword [rsp + rdx]
pop rdx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
test eax, eax
jmp 0x1401b4f80
jmp 0x1401b411b
sub r15, 0xffffffffe9c46c95
jmp 0x1401b4fe0
jmp 0x1401b5c4e
sub rdx, 0xfffffffff3ea3017
add rdx, 0xfffffffff8688158
xor rdx, 0xffffffffa9143916
jmp 0x1401bb43b
push rdx
jmp 0x1401bb557
xor r15, 0x1247bcc
sub r15, 0x16bff478
jmp 0x1401b5cad
add r15, 0x65d5780c
sub r15, 0x588dee0d
xor r15, 0xffffffff8bc957b3
xor r15, 0x2bd752fd
add r15, 0x7eb1589c
xor r15, 0x35c87651
sub r15, 0xfffffffffe00ca51
jmp 0x1401b5cef
jmp 0x1401b0776
sub r8d, 0x259b2b64
add r8d, 0x5a0d0cd3
jmp 0x1401b60e3
jmp 0x1401b6263
mov qword [rax], rcx
jmp 0x1401b613f
jmp 0x1401b625e
jmp 0x1401b8c33
xor r8d, 0x2371c6f
jmp 0x1401b6283
sub r8d, 0x61ffc906
xor r8d, 0x7eecb587
sub r8d, 0x777277af
jmp 0x1401b62c5
jmp 0x1401b6321
sub r8d, 0x1a0368f7
jmp 0x1401b63ce
jmp 0x1401b33ca
xor r8d, 0x9f998db3
sub r8d, 0x5ccbb9e
jmp 0x1401b6678
jmp 0x1401b6070
sub rdx, 0x57919f04
jmp 0x1401b6ab9
jmp 0x1401b6ac7
xor rdx, 0xffffffff991d06d4
lea rdx, [rdx + riz]
jmp 0x1401b6af5
mov rax, qword [rsp + rdx]
pop rdx
mov r8d, dword [rax]
push r15
jmp 0x1401b6b51
jmp 0x1401b6c23
movabs r15, 0xed5c8d34
jmp 0x1401b4fcc
xor rsi, 0xffffffffbaa43b00
jmp 0x1401b4472
jmp 0x1401b1c4a
xor r9d, r9d
jmp 0x1401bb698
sub rdx, 0x1c691551
add rdx, 0x4e3346ef
jmp 0x1401b8b13
xor rdx, 0x6e08d72a
sub rdx, 0x14a73f64
xor rdx, 0xffffffffbf759292
add rdx, 0x70ab8efa
jmp 0x1401b8b48
xor rdx, 0x5cc4d197
sub rdx, 0xffffffff9cb9004c
xor rdx, 0x7ee4d38b
jmp 0x1401b8c25
jmp 0x1401b14a8
push r10
movabs r10, 0xfffffffddfba40a3
jmp 0x1401b8c54
jmp 0x1401b24d9
add rdx, 0x68d6baa2
sub rdx, 0xffffffffe856fb3a
add rdx, 0xffffffffb19e51fc
xor rdx, 0xffffffffe9e25dc8
lea rdx, [rdx + riz]
jmp 0x1401b4d45
pop rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1401ba65b
jmp 0x1401b1c4a
push rdx
jmp 0x1401ba694
movabs rdx, 0x14769f4b8
sub rdx, 0x52d51afc
xor rdx, 0x10037d9b
jmp 0x1401ba718
jmp 0x1401ba74f
add rdx, 0xffffffffaa46590e
sub rdx, 0x61afc9d3
add rdx, 0xffffffff9db6e2ff
xor rdx, 0xffffffffcae517e9
lea rdx, [rdx + riz]
jmp 0x1401ba79c
mov rax, qword [rsp + rdx]
jmp 0x1401b1f29
pop rdi
mov edx, dword [rax]
jmp 0x1401bada4
push rdx
jmp 0x1401bb54b
sub edx, 0x27878d7d
xor edx, 0x101d190c
jmp 0x1401bb3af
sub edx, 0xfdb7ac87
jmp 0x1401bb3e3
add edx, 0xa7dc6900
jmp 0x1401bb40e
xor edx, 0xb3b308f7
jmp 0x1401bb439
jmp 0x1401bb45c
add rdx, 0xffffffff877b6339
xor rdx, 0x3ef48840
jmp 0x1401b14d4
sub edx, 0x5319fe33
add edx, 0x2f644026
jmp 0x1401bb549
jmp 0x1401bb580
movabs rdx, 0x39bd4a24
jmp 0x1401bb57b
movabs rdx, 0x80efd2e6
add rdx, 0x7e65db18
xor rdx, 0xfffffffff1438a99
xor rdx, 0xb8a8a06
jmp 0x1401b54c8
jmp 0x1401b89bd
sub edx, 0xdcf2a461
xor edx, 0xe0706918
xor edx, 0xeeb0d812
jmp 0x1401bb5c0
sub edx, 0x1be6c37d
xor edx, 0x145a23e1
jmp 0x1401bb5e8
jmp 0x1401bb62e
add edx, 0x79f75783
xor edx, 0xe3c0308b
sub edx, 0x662bee20
jmp 0x1401bb682
xor edx, 0x18cccdc1
sub edx, 0xe1df6980
lea rcx, [rsp + 0x60]
jmp 0x1401bb72e
xor r8d, r8d
jmp 0x1401bb729
jmp 0x1401b0261
call qword [sym.imp.KERNEL32.dll_CreateFileA]
push r12
movabs r12, 0x41abfb10
jmp 0x1401bb751
sub r12, 0x7179d92f
xor r12, 0xffffffffe1b0bdd5
jmp 0x1401b1480
add rsi, 0x6df33a63
jmp 0x1401b6f47