Function at 0x140001090
Capabilities:
Read file on windows

Disassembly:
xor r8d, r8d
jmp 0x1400012d0
push rbp
push rsi
push rdi
push r12
lea rbp, [rsp - 0x648]
sub rsp, 0x748
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rbp + 0x620], rax
mov dword [rsp + 0x64], r8d
mov r12d, ecx
mov qword [rsp + 0x78], rdx
mov r8d, pe_nt_image_headers64
mov dword [rsp + 0x60], ecx
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor esi, esi
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [rsi + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
xor r9d, r9d
lea rdx, [rbp + 0x10]
mov rcx, rax
mov r8d, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleA]
lea rcx, [rbp + 0x10]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], sil
jne 0x140001367
lea rcx, [rbp + 0x10]
add rax, rcx
lea rcx, [rbp + 0x10]
cmp rax, rcx
jbe 0x140001394
cmp byte [rax], 0x2e
je 0x140001394
mov byte [rax], sil
lea rcx, [rbp + 0x10]
dec rax
cmp rax, rcx
ja 0x140001380
lea rcx, [rbp + 0x10]
mov byte [rax], sil
dec rcx
nop
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x1400013a0
movzx eax, word [0x140003338]
xor edx, edx
movsd xmm0, qword [str._script.py]
movsd qword [rcx], xmm0
mov word [rcx + 8], ax
movzx eax, byte [0x14000333a]
mov byte [rcx + 0xa], al
lea rcx, [rbp + 0x10]
call sub.api_ms_win_crt_stdio_l1_1_0.dll__open
mov edi, eax
cmp eax, 0xffffffff
jne 0x140001401
lea ecx, [rax + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, [rbp + 0x10]
lea rdx, str.Cannot_open__s_n
call fcn.140001040
lea eax, [rdi + 3]
jmp 0x1400019b2
mov qword [rsp + 0x780], rbx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x738], r14
mov r8d, pe_nt_image_headers64
mov ecx, edi
mov qword [rsp + 0x730], r15
call sub.api_ms_win_crt_stdio_l1_1_0.dll__read
movsxd rcx, eax
lea rbx, [rbp + 0x110]
add rbx, rcx
mov ecx, edi
call sub.api_ms_win_crt_stdio_l1_1_0.dll__close
lea rax, [rbp + 0x110]
dec rax
nop dword [rax + rax]
inc rax
cmp rax, rbx
jae 0x140001469
movzx ecx, byte [rax]
test cl, cl
je 0x140001469
cmp cl, 0xa
je 0x140001469
cmp cl, 0xd
jne 0x140001450
mov r8d, 2
mov byte [rax], sil
lea rdx, [0x140003350]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1400014b3
mov eax, dword [0x140003360]
movsd xmm0, qword [str._python.exe]
mov dword [rbp + 0x118], eax
movzx eax, byte [0x140003364]
mov byte [rbp + 0x11c], al
movsd qword [rbp + 0x110], xmm0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x112]
call fcn.1400010a0
mov r14, rax
mov rbx, qword [rax]
mov rcx, rbx
movzx edx, byte [rbx]
test dl, dl
je 0x1400014ea
mov r8, rcx
inc rcx
cmp dl, 0x2f
jne 0x1400014e3
mov byte [r8], 0x5c
movzx edx, byte [rcx]
test dl, dl
jne 0x1400014d4
lea rax, [rbp + 0x310]
mov rcx, rbx
lea r9, [rbp + 0x410]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath]
cmp byte [rsp + 0x50], sil
jne 0x1400015f1
cmp byte [rbp + 0x210], 0x5c
je 0x1400015f1
lea rax, [rbp + 0x310]
lea r9, [rbp + 0x410]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath]
lea rcx, [rbp + 0x210]
mov rax, 0xffffffffffffffff
cmp byte [rcx + rax + 1], sil
lea rax, [rax + 1]
jne 0x140001561
movzx r8d, byte [rbp + rax + 0x20f]
lea rcx, [rbp + rax + 0x20f]
cmp r8b, 0x5c
jne 0x140001588
movzx r8d, byte [rcx - 1]
lea rax, [rcx - 1]
cmovne rax, rcx
cmp r8b, 0x5c
je 0x1400015b7
nop word [rax + rax]
lea rcx, [rbp + 0x210]
cmp rax, rcx
jb 0x1400015b7
mov byte [rax], sil
dec rax
cmp byte [rax], 0x5c
jne 0x1400015a0
mov r9, rbx
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x510]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__makepath]
mov edx, 1
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
lea rdx, [rbp + 0x510]
jmp 0x140001604
mov edx, 1
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdx, rbx
mov r8d, 0x104
mov rcx, rax
mov r15, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
test r15, r15
jne 0x140001643
mov rbx, qword [r14]
lea ecx, [r15 + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str.Cannot_find_Python_executable__s_n
mov rcx, rax
call fcn.140001040
lea eax, [r15 + 2]
jmp 0x14000199a
mov edi, dword [rsp + 0x58]
mov edx, 8
mov qword [rsp + 0x740], r13
lea eax, [r12 + rdi]
movsxd r13, eax
mov qword [rsp + 0x68], r13
lea rcx, [r13 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, r15
mov qword [rsp + 0x58], rax
mov rbx, rax
call fcn.140001200
mov qword [rbx], rax
lea rsi, [rbx + 8]
cmp edi, 1
jle 0x1400016a9
lea rbx, [r14 + 8]
dec edi
nop dword [rax]
mov rcx, qword [rbx]
call fcn.140001200
mov qword [rsi], rax
lea rbx, [rbx + 8]
add rsi, 8
sub rdi, 1
jne 0x140001690
lea rax, [rbp + 0x10]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400016b4
lea eax, [rbx + rbx]
mov edx, 1
movsxd rcx, eax
add rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
xor r14d, r14d
movsxd r12, ebx
mov qword [rsp + 0x70], rax
mov ecx, r14d
mov byte [rax], 0x22
lea rdi, [rax + 1]
test ebx, ebx
jle 0x140001757
xor r13d, r13d
nop
movzx eax, byte [rbp + r14 + 0x10]
cmp al, 0x5c
jne 0x1400016fe
inc ecx
jmp 0x140001726
cmp al, 0x22
jne 0x140001723
test ecx, ecx
jle 0x14000171b
mov ebx, ecx
mov dl, 0x5c
mov r8d, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
add rdi, rbx
mov ecx, r13d
mov byte [rdi], 0x5c
inc rdi
jmp 0x140001726
mov ecx, r13d
movzx eax, byte [rbp + r14 + 0x10]
inc r14
mov byte [rdi], al
inc rdi
cmp r14, r12
jl 0x1400016f0
mov r13, qword [rsp + 0x68]
test ecx, ecx
jle 0x140001754
mov ebx, ecx
mov dl, 0x5c
mov r8d, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
add rdi, rbx
xor r14d, r14d
mov rax, qword [rsp + 0x70]
mov word [rdi], 0x22
movsxd rdi, dword [rsp + 0x60]
mov qword [rsi], rax
add rsi, 8
cmp rdi, 1
jle 0x140001798
mov r12, qword [rsp + 0x78]
mov ebx, 1
nop dword [rax]
mov rcx, qword [r12 + rbx*8]
call fcn.140001200
mov qword [rsi], rax
inc rbx
add rsi, 8
cmp rbx, rdi
jl 0x140001780
cmp dword [rsp + 0x64], 0
mov qword [rsi], r14
je 0x1400017d7
mov rdx, qword [rsp + 0x58]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_process_l1_1_0.dll__execv]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, r15
lea rdx, str.Could_not_exec__s
mov rcx, rax
call fcn.140001040
mov eax, 2
jmp 0x140001992
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400017e0
mov r12, qword [rsp + 0x58]
add ecx, 2
cmp r13, 1
jle 0x140001825
mov r8d, 1
nop
mov rdx, qword [r12 + r8*8]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140001810
inc ecx
inc r8
add ecx, eax
cmp r8, r13
jl 0x140001800
movsxd rcx, ecx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r8, r15
lea rdx, [0x140003328]
mov rcx, rax
mov rsi, rax
call fcn.1400019d0
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r15 + rbx], 0
jne 0x140001850
cmp r13, 1
jle 0x1400018a6
mov edi, 1
nop word [rax + rax]
mov r8, qword [r12 + rdi*8]
lea rdx, [0x14000332c]
movsxd rcx, ebx
add rcx, rsi
call fcn.1400019d0
mov rcx, qword [r12 + rdi*8]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140001891
inc ebx
inc rdi
add ebx, eax
cmp rdi, r13
jl 0x140001870
xorps xmm1, xmm1
mov dword [rsp + 0x50], r14d
xor eax, eax
mov dword [rbp - 0x60], 0x68
xorps xmm0, xmm0
mov qword [rbp - 0x70], rax
lea rcx, [0x140001010]
mov dword [rbp + 4], eax
movups xmmword [rbp - 0x80], xmm0
lea edx, [rax + 1]
movups xmmword [rbp - 0x5c], xmm1
movups xmmword [rbp - 0x4c], xmm1
movups xmmword [rbp - 0x3c], xmm1
movups xmmword [rbp - 0x2c], xmm1
movups xmmword [rbp - 0x1c], xmm1
movups xmmword [rbp - 0xc], xmm1
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rax, [rbp - 0x80]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [rbp - 0x60]
mov rdx, rsi
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140001945
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.failed_to_create_process._n
call fcn.140001040
jmp 0x14000198f
mov eax, dword [rbp - 0x70]
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x80]
mov dword [0x140005040], eax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x80]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000198a
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.failed_to_get_exit_code_from_process._n
call fcn.140001040
jmp 0x14000198f
mov r14d, dword [rsp + 0x50]
mov eax, r14d
mov r13, qword [rsp + 0x740]
mov r14, qword [rsp + 0x738]
mov rbx, qword [rsp + 0x780]
mov r15, qword [rsp + 0x730]
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.140001ac0
add rsp, 0x748
pop r12
pop rdi
pop rsi
pop rbp
ret