Function at 0x1401ba8fc
Capabilities:
Read file on windows

Disassembly:
mov r8d, 0x513fe6ce
jmp 0x1401afd28
jmp 0x1401b741c
sub r8d, 0xad3e2157
jmp 0x1401afede
xor r8d, 0x84a485a0
jmp 0x1401afef4
jmp 0x1401b8e7d
xor rbx, 0xffffffffc6de9de2
xor rbx, 0x9bc1db0
jmp 0x1401b2a3c
pop r14
jmp 0x1401b0022
mov eax, dword [rax]
jmp 0x1401b1e94
mov rcx, qword [rsp + r14]
pop r14
jmp 0x1401b04a2
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
test eax, eax
jmp 0x1401b0540
jmp 0x1401b7f4b
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x58]
push r14
jmp 0x1401b052d
jmp 0x1401b4c04
jne 0x1401b04d0
jmp 0x1401b054f
jmp 0x1401b04af
sub r8d, 0x779dc219
sub r8d, 0xc710ba56
add r8d, 0x4f670444
jmp 0x1401b08c2
jmp 0x1401b0947
jmp 0x1401bab39
add r10, 0x3acef512
jmp 0x1401b0a9f
movabs r14, 0xffffffffeabbdc59
add r14, 0x5f173c65
jmp 0x1401b8d43
jmp 0x1401b0c1c
xor r8d, 0xc06c896f
xor r8d, 0xa280f9ef
sub r8d, 0xa6ceb75a
sub r8d, 0xabdf5901
jmp 0x1401b0b4b
sub r8d, 0xdf5e4993
jmp 0x1401b0c17
jmp 0x1401baf5c
add r10, 0x6bfdc682
sub r10, 0x2baa2b58
jmp 0x1401b0e87
sub r10, 0xffffffffd489b8b0
xor r10, 0xffffffff8f565ff9
add r10, 0xffffffff8815ac1a
lea r10, [r10 + riz]
mov qword [rsp + r10], rax
pop r10
jmp 0x1401b99b2
sub r10, 0x52447065
jmp 0x1401b0eaf
jmp 0x1401b0dd6
add r8d, 0x3c16018b
jmp 0x1401b93ef
add r8d, 0x632f25d7
xor r8d, 0x31a9ebfa
xor ecx, ebp
cdq
add dword [rax], eax
invalid
add r8d, 0x95955cf2
jmp 0x1401b138c
add r8d, 0xba03d564
xor r8d, 0xcc34b3e5
jmp 0x1401b14f6
jmp 0x1401ba90f
add rbx, 0xffffffff97ffd222
xor rbx, 0xffffffff8d19ba75
add rbx, 0xffffffffaa1591ba
sub rbx, 0xffffffffc84e84a7
jmp 0x1401b164d
sub rbx, 0x728eed0c
jmp 0x1401b6570
mov r9d, 0x689703e3
jmp 0x1401b1fc1
pop r12
jmp 0x1401b88be
add r9d, 0x5c72a7b5
xor r9d, 0x2a09ae1e
jmp 0x1401b6d6c
add r8d, 0xe31321b8
mov edx, 0xd6b40d0d
jmp 0x1401b285f
jmp 0x1401b7cba
lea rbx, [rbx + riz]
jmp 0x1401b2ae0
jmp 0x1401b2b34
jmp 0x1401b2b9d
mov rdx, qword [rsp + rbx]
pop rbx
push rdi
movabs rdi, 0x92f3c2e0
jmp 0x1401b2bbb
add rdi, 0xffffffffa1bdb422
sub rdi, 0x33460c1c
jmp 0x1401b2bde
xor r14, 0x57f02c60
jmp 0x1401b2eba
sub r14, 0x2e80bb35
xor r14, 0xffffffff9c8dbb10
jmp 0x1401babf2
jmp 0x1401b7f4b
mov r8d, 0x338b64d5
sub r8d, 0xe56620c4
xor r8d, 0x1623666f
add r8d, 0x2c0cca42
add r8d, 0x8a8c3e20
sub r8d, 0xa194b4e5
jmp 0x1401b3441
sub r8d, 0x9dba7871
jmp 0x1401b9510
jmp 0x1401b0ae4
xor r8d, 0xa2e97a94
jmp 0x1401b1136
sub r14, 0xfffffffffc37db6b
sub r14, 0xffffffff9b2b128c
add r14, 0x35680623
xor r14, 0x37fa2d63
jmp 0x1401b37d1
jmp 0x1401b3841
xor r14, 0x54dfea61
lea r14, [r14 + riz]
jmp 0x1401b0333
push rbx
movabs rbx, 0x1521de7bb
add rbx, 0xffffffffecf38759
sub rbx, 0x757c491e
xor rbx, 0x6e90d669
jmp 0x1401b400e
sub rbx, 0x66e76599
jmp 0x1401b414f
sub rbx, 0x453cf03a
jmp 0x1401b5944
sub edx, 0xcd9eba2c
jmp 0x1401b43b4
xor edx, 0xdcf68c3f
add edx, 0xd25304d8
add edx, 0xd8f9b84
sub edx, 0x7c1f74ea
xor edx, 0x66887bb0
sub edx, 0xc98a069e
sub edx, 0xd0797e16
lea rcx, [rsp + 0x60]
jmp 0x1401b4401
call qword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x1401b447c
push r12
jmp 0x1401b44af
jmp 0x1401b5067
movabs r14, 0xffffffff2cc4c9ee
add r14, 0x5bb34fe8
sub r14, 0xffffffff944392f4
jmp 0x1401b4c2a
jmp 0x1401b4c40
xor r14, 0xfffffffffc109d84
add r14, 0xffffffffaadb29cb
sub r14, 0xffffffffb2ff43a1
lea r14, [r14 + riz]
jmp 0x1401b4c67
mov rax, qword [rsp + r14]
pop r14
jmp 0x1401b4cb2
mov r8d, dword [rax]
jmp 0x1401b3fd4
movabs r12, 0xffffffff780491aa
add r12, 0x92b3111
sub r12, 0xffffffff9bc5b99d
jmp 0x1401ba31e
sub rbx, 0xfffffffff5b0bbfc
xor rbx, 0xffffffffe2fd3e50
xor rbx, 0x17fd462a
xor rbx, 0x209a04d9
jmp 0x1401b598a
jmp 0x1401b5a07
add rbx, 0xffffffffe363c49d
add rbx, 0x4a72c688
jmp 0x1401b5a86
sub rbx, 0x2f1ea896
jmp 0x1401aff98
xor r10, 0xffffffffbbeb6c48
xor r10, 0x1ff46c2f
jmp 0x1401b0a80
sub rbx, 0x70f3ff20
jmp 0x1401b658f
xor rbx, 0xffffffffbafca715
jmp 0x1401b662c
xor rbx, 0xffffffffd5e1248c
xor rbx, 0x70a41de
lea rbx, [rbx + riz]
mov rax, qword [rsp + rbx]
jmp 0x1401b8ab8
sub r9d, 0xc05a99e4
jmp 0x1401b7166
add r9d, 0xb77e1e54
xor r9d, 0x8de60e4
jmp 0x1401b73db
xor r9d, 0x2506c341
sub r9d, 0xa509a3a8
xor r9d, 0xd5e3f5af
sub r9d, 0x374accbf
add r9d, 0x90fe0989
add r9d, 0x69596988
xor r9d, 0x2cf62aee
xor r9d, 0x8e78ff14
add r9d, 0xeb6e3394
jmp 0x1401b7444
xor r8d, 0x6d7b0364
jmp 0x1401b9c63
jmp 0x1401afca8
add rbx, 0x3ed3c0c
jmp 0x1401b7a9c
jmp 0x1401babe6
sub r14, 0x262d9abc
sub r14, 0x491a9ac6
sub r14, 0x61178670
jmp 0x1401b2d36
xor r8d, 0xd93600c
sub r8d, 0x3d1a5f3e
jmp 0x1401b36ec
xor edx, 0xf70b6872
jmp 0x1401b7e0e
sub edx, 0xc0e340f5
jmp 0x1401b7e53
jmp 0x1401b7efb
xor edx, 0x61145a4d
sub edx, 0xe6e45591
sub edx, 0xc6bf48c6
xor edx, 0xdda9f220
xor edx, 0xcdbda5
jmp 0x1401b7f3c
jmp 0x1401b7f49
jmp 0x1401b7fa5
add rsp, 0x178
jmp 0x1401b7f67
jmp 0x1401b7f7f
ret
add edx, 0x1e9fe48d
sub edx, 0x16037aa9
jmp 0x1401b4229
cmp qword [rsp + 0x40], 0xffffffffffffffff
jne 0x1401b88f2
jmp 0x1401b88ed
jmp 0x1401b7f4b
xor r9d, r9d
jmp 0x1401b8911
xor r8d, r8d
jmp 0x1401ba6e5
pop rbx
mov edx, dword [rax]
push r14
jmp 0x1401b0a89
add r14, 0x5337436a
sub r14, 0x4c5098c9
jmp 0x1401b8e60
add r14, 0x1afef0e4
jmp 0x1401b7b14
sub r8d, 0x5ea97e3f
jmp 0x1401b90a8
xor r8d, 0xf93bbefe
jmp 0x1401b333f
xor r8d, 0x143ad541
jmp 0x1401b1193
add r8d, 0xa34acdf6
jmp 0x1401b952f
jmp 0x1401b2545
cmp qword [rsp + 0x48], 0
jmp 0x1401b9b6c
jne 0x1401b300e
jmp 0x1401b2fed
xor r8d, 0x526f7797
jmp 0x1401baaa9
sub r12, 0x176d6c68
add r12, 0xfffffffff70b6f66
jmp 0x1401ba47f
xor r12, 0xffffffff8222dc1e
jmp 0x1401ba493
xor r12, 0xffffffff9c1d739b
jmp 0x1401ba4b6
xor r12, 0xffffffffb38ad97a
sub r12, 0xffffffff8cd82d90
add r12, 0xffffffff93d6ec11
sub r12, 0x6c2c89c0
jmp 0x1401ba4fb
add r12, 0xffffffff9e9ffe29
add r12, 0x5b4339fa
jmp 0x1401ba514
add r12, 0xffffffff87ee3f94
jmp 0x1401ba6d9
add r12, 0xffffffffad081d00
jmp 0x1401ba882
push rbx
jmp 0x1401ba70f
movabs rbx, 0xffffffff907e4193
jmp 0x1401ba74a
jmp 0x1401b7992
add r12, 0x69d5df12
sub r12, 0xffffffffd750f12f
xor r12, 0xffffffffc4ee3276
lea r12, [r12]
jmp 0x1401ba8f8
mov qword [rsp + r12], rax
jmp 0x1401ba90a
jmp 0x1401b1f7d
sub r8d, 0xb08f8be5
jmp 0x1401ba9a6
jmp 0x1401b0802
add r8d, 0xfdde36bc
xor r8d, 0xa1f218f3
jmp 0x1401b7b3c
xor r8d, 0x80b59e28
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
push r10
jmp 0x1401babbf
movabs r10, 0x78a4cf
jmp 0x1401b6455
sub rbx, 0x47a13724
jmp 0x1401bad3a
xor r14, 0xffffffffcdffc757
sub r14, 0xa39b59d
jmp 0x1401b3796
jmp 0x1401b1623
xor r8d, 0x89d6377d
sub r8d, 0xd7797a6a
xor r8d, 0x54e35028
jmp 0x1401baf7f
add r8d, 0xd78a8e56
jmp 0x1401bafa5
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rsp + 0x30], 0
jmp 0x1401bafe0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 0xc0203fea
sub r8d, 0x97570f2a
xor r8d, 0xd685bc98
add r8d, 0x52fc5415
sub r8d, 0x46405eb3
xor r8d, 0x7dfad28a
jmp 0x1401afd6c