Function at 0x1401b8577
Capabilities:
Read file on windows

Disassembly:
movabs r8, 0xfffffffe15389c68
add r8, 0x4b712b19
jmp 0x1401b24cd
pop r14
sub rsp, 0x178
call fcn.1401b1de6
push r12
jmp 0x1401b0257
jmp 0x1401b047b
movabs r12, 0x56b3d06b
sub r12, 0xffffffff98366366
add r12, 0xffffffffa32d9645
jmp 0x1401b04b3
jmp 0x1401bb1fd
xor r14, 0x6f000b5b
jmp 0x1401b0711
sub r8d, 0xdec88697
sub r8d, 0xa700af1b
jmp 0x1401b0547
xor r8d, 0x8996264a
xor r8d, 0x9fb86cac
jmp 0x1401b05a8
xor r8d, 0x10591c7d
sub r8d, 0x639a9f1d
jmp 0x1401b060a
xor r8d, 0x808067c6
jmp 0x1401b06f0
jmp 0x1401b3833
sub r14, 0x6a1d3792
add r14, 0xfffffffff6e55803
jmp 0x1401b076a
add r14, 0xffffffffc7337154
jmp 0x1401b09a6
sub r14, 0xfffffffff586cc78
jmp 0x1401b0a9b
sub r14, 0x76e15e95
jmp 0x1401b0ac1
jmp 0x1401b84a9
add rdx, 0x735fc807
xor rdx, 0x74fb50f4
sub rdx, 0xffffffffb6d3ce64
jmp 0x1401ba7b5
mov esp, 0xe994fe19
mov esp, 0xf000055
test dword [rdx - 0x16ffffa0], edi
add cl, ch
mov al, 0x60
add byte [rax], al
jmp 0x1401b010a
mov qword [rcx], rax
push r14
movabs r14, 0x8de97d51
jmp 0x1401b1554
xor r14, 0x15726a7c
sub r14, 0xffffffffac564ea3
jmp 0x1401b156b
add r14, 0xace2f50
jmp 0x1401b15a4
sub r14, 0x5693ffa8
add r14, 0xffffffffadf0f814
xor r14, 0xffffffff92a167c9
xor r14, 0x76bdc26b
xor r14, 0xffffffffaa735474
lea r14, [r14 + riz]
mov rax, qword [rsp + r14]
pop r14
jmp 0x1401b1682
jmp 0x1401ba584
add rsp, 0x178
ret
movabs rax, 0xffffffff653f2dd4
sub rax, 0x79be0f71
add rax, 0x70bac8d9
jmp 0x1401b22c9
add rax, 0x696ce87a
jmp 0x1401b2478
add rax, 0xffffffffa82f0fc1
jmp 0x1401b24a9
add rax, 0x4e69b5c3
jmp 0x1401bb8c9
sub r8, 0xfffffffff430bf90
jmp 0x1401b25b4
xor r8, 0x2835451b
add r8, 0xfffffffff79aadd8
sub r8, 0xffffffff81e40b4c
add r8, 0x3638e893
xor r8, 0xfffffffffb7bd1c1
jmp 0x1401b3a94
sub rdx, 0xffffffffae9d2de6
sub rdx, 0x63ddc29f
xor rdx, 0xffffffffe0934911
add rdx, 0xffffffffc8f192dc
jmp 0x1401b2a27
add rdx, 0xffffffffa7da9c2a
xor rdx, 0xffffffffd5d0567b
lea rdx, [rdx + riz]
mov rcx, qword [rsp + rdx]
pop rdx
jmp 0x1401b1501
xor rsi, 0x36c7e70a
xor rsi, 0x1a60022
xor rsi, 0xffffffffc0252aa8
jmp 0x1401b30bf
jmp 0x1401b3154
jmp 0x1401bb88e
sub r9, 0xffffffffe02036a7
add r9, 0xffffffffad5aec3a
jmp 0x1401b3585
xor r9, 0x16cbbd67
jmp 0x1401b35d5
jmp 0x1401b36fe
sub r9, 0x6245d5c8
jmp 0x1401b3728
jmp 0x1401b3752
sub r9, 0x4e403101
jmp 0x1401b3766
xor r9, 0x40143f5
jmp 0x1401b90b7
xor r14, 0x551fedae
jmp 0x1401b382a
xor r14, 0x70fa6472
jmp 0x1401b389b
add r8d, 0xe7d1c824
jmp 0x1401b386c
lea rdx, [rsp + 0x60]
xor ecx, ecx
jmp 0x1401b3896
jmp 0x1401b889c
sub r14, 0x4f370aae
jmp 0x1401b3918
add r14, 0x7752810f
jmp 0x1401b3a4f
xor r14, 0x5282686d
xor r14, 0x6f8802f3
add r14, 0xffffffffc8b4d429
xor r14, 0x303065ed
jmp 0x1401b3a88
jmp 0x1401b04f9
sub r8, 0x5efd2d55
add r8, 0x49068dbc
jmp 0x1401b3ab3
add r8, 0xffffffffbf80af94
add r8, 0xffffffffb9d315ae
add r8, 0xffffffffe1c679c3
jmp 0x1401b3d99
push rsi
movabs rsi, 0x3d028923
jmp 0x1401b3c44
xor rsi, 0xffffffff81ce1c85
jmp 0x1401b3d86
xor rsi, 0x2d9d47ee
sub rsi, 0xccafeb1
jmp 0x1401b309c
xor r8, 0x5063bf6c
jmp 0x1401b3df0
lea r8, [r8 + riz]
mov rax, qword [rsp + r8]
pop r8
push r9
movabs r9, 0x76fbfbe2
jmp 0x1401b3f13
sub r9, 0xffffffffc308d95d
sub r9, 0x4cc0f2f8
add r9, 0xffffffff8f386617
jmp 0x1401b3f36
jmp 0x1401b4104
xor r9, 0x41aa1c66
xor r9, 0x27896acb
add r9, 0xffffffffaeece5f4
jmp 0x1401b4135
sub r9, 0xffffffff8cce7a78
sub r9, 0x73928b4b
xor r9, 0xffffffff9248d538
jmp 0x1401b3569
movabs r14, 0xffffffff34813315
add r14, 0x55969ce2
jmp 0x1401b441e
jmp 0x1401b4430
jmp 0x1401b4466
add r14, 0xffffffffebf9ce12
jmp 0x1401b482c
sub r14, 0xffffffffb05b894d
sub r14, 0x3fec9b9b
jmp 0x1401b4893
jmp 0x1401b59f7
xor rdx, 0xfffffffffdb0e3a1
sub rdx, 0xffffffffb2d8bcda
xor rdx, 0xffffffffe0a1b706
xor rdx, 0x108a08c7
xor rdx, 0xffffffff86d64e56
jmp 0x1401b4f98
jmp 0x1401b0dcc
sub r14, 0xffffffffef4ff746
jmp 0x1401b5a06
sub r14, 0xffffffff96798183
jmp 0x1401b5a30
lea r14, [r14 + riz]
jmp 0x1401b5a50
mov rcx, qword [rsp + r14]
pop r14
jmp 0x1401b5aff
push rax
jmp 0x1401b5c1c
xor r8d, 0x9184a22e
add r8d, 0x76bc6cc9
jmp 0x1401b5bc2
jmp 0x1401b5c01
jmp 0x1401b5c0e
add r8d, 0xf6175848
mov edx, eax
jmp 0x1401b7a94
jmp 0x1401b227b
xor r9, 0xffffffff9d953d82
jmp 0x1401b7344
xor r9, 0xffffffffdc15af85
sub r9, 0xffffffffc0b77c87
jmp 0x1401b7421
jmp 0x1401b753d
mov eax, dword [rax + r9]
pop r9
push rdx
movabs rdx, 0x1734a2a96
jmp 0x1401b4aa6
xor r12, 0xffffffffa7139dbf
sub r12, 0x165df1cf
jmp 0x1401b79b4
add r12, 0x5b8ede84
jmp 0x1401b89d5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x1401b80fe
jmp 0x1401b3acd
xor r8d, 0x7524bc53
jmp 0x1401b813c
jmp 0x1401b8147
jmp 0x1401b81be
add r8d, 0xa035d3f2
jmp 0x1401b8364
sub r8d, 0x675902a4
jmp 0x1401b8399
jmp 0x1401b83a7
xor r8d, 0xd5803273
jmp 0x1401b5b05
add r14, 0xffffffffa30a0c89
jmp 0x1401b855c
sub r14, 0x37df8ff8
jmp 0x1401b8571
lea r14, [r14 + riz]
mov rax, qword [rsp + r14]
pop r14
mov eax, dword [rax]
mov r9d, 0x2e14f814
xor r9d, 0x675c9602
add r9d, 0xf574731f
jmp 0x1401b85bb
xor r9d, 0xf48d8137
jmp 0x1401b8600
sub r9d, 0x852a388c
add r9d, 0xd4821e96
jmp 0x1401b861d
jmp 0x1401b866f
xor r9d, 0xfe2860e8
jmp 0x1401b8684
jmp 0x1401b87c7
jmp 0x1401b8837
xor r9d, 0x27080e86
jmp 0x1401b8897
jmp 0x1401b8999
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
jmp 0x1401b88c8
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 0xf88772f
xor r8d, 0x343d6364
sub r8d, 0x90af86f0
jmp fcn.1401b6657
xor r9d, 0x5fd922a2
xor r9d, 0x9f700a80
mov r8d, 0x740a297e
sub r8d, 0x8b2425e4
sub r8d, 0xfd7d6e63
jmp 0x1401b89d0
jmp 0x1401b8124
jmp 0x1401b9e9c
xor r9, 0x3ba021b4
jmp 0x1401b90d3
jmp 0x1401b916b
jmp 0x1401b9482
jmp 0x1401b7190
lea r12, [r12]
mov qword [rsp + r12], rax
pop r12
push r8
jmp 0x1401afcfb
add rsi, 0xffffffff9ca9f4d9
jmp 0x1401ba4e4
jmp 0x1401ba55c
lea rsi, [rsi + riz]
mov qword [rsp + rsi], rax
pop rsi
cmp qword [rsp + 0x48], 0
jne 0x1401ba572
jmp 0x1401b1c4a
mov r8d, 0xc37a6fa3
add r8d, 0xbc8e6ee7
jmp 0x1401b050f
push r14
jmp 0x1401ba5be
jmp 0x1401b43b9
xor rdx, 0x2be29440
jmp 0x1401b29d1
add r12, 0x39a22bb0
add r12, 0xffffffffb3e50f41
sub r12, 0x3155b01f
jmp 0x1401b770e
sub rsi, 0x1873441b
xor rsi, 0x4a30c8cf
jmp 0x1401bb8aa
xor rsi, 0xffffffffea3dde7f
add rsi, 0x68123c2b
jmp 0x1401ba4c0
add rax, 0xffffffffafbe7e92
add rax, 0x6ef603e5
jmp 0x1401bb901
sub rax, 0xffffffffdaf613c5
jmp 0x1401bb941
mov ecx, dword [rcx + rax]
pop rax
mov dword [rax], ecx
push r14
movabs r14, 0x2068c4bd1
add r14, 0xffffffff9479145e
jmp 0x1401bb9bc
xor r14, 0x527c9606
jmp 0x1401b37ee