Function at 0x1401b0600
Capabilities:
Read file on windows

Disassembly:
sub rdi, 0x1e2485b3
sub rdi, 0xffffffffb6d2b336
jmp 0x1401afef1
xor rdi, 0xffffffffaebb1312
lea rdi, [rdi + riz]
jmp 0x1401b30c9
sub r9d, 0x70a4e2c9
jmp 0x1401b0616
xor r9d, 0x4b043cb0
xor r9d, 0x49544351
jmp 0x1401b23f5
xor r9, 0xffffffffa45287b8
jmp 0x1401b069e
add r9, 0x17f07f88
add r9, 0x7f13a1a4
xor r9, 0x1fbd2823
xor r9, 0x5d6c65bd
xor r9, 0x59a2aed8
jmp 0x1401b07bf
sub r9, 0xffffffffef860f39
jmp 0x1401b4f5b
xor r8d, r8d
push r10
jmp 0x1401b0855
movabs r10, 0xffffffffa53504a2
xor r10, 0x35e9483b
sub r10, 0xffffffffef121d05
jmp 0x1401b08a3
add rdx, 0xffffffff9553ccaa
sub rdx, 0x429c4b6f
sub rdx, 0x2ab754a7
lea rdx, [rdx + riz]
mov rax, qword [rsp + rdx]
jmp 0x1401b089e
jmp 0x1401b998c
xor r10, 0x4a9e7134
add r10, 0x3af0693d
sub r10, 0xfffffffff158debb
sub r10, 0x2da89524
jmp 0x1401b091a
xor r10, 0x599ffd14
xor r10, 0x7c92a829
xor r10, 0x3ec4105e
add r10, 0xffffffffe375eaeb
lea r10, [r10 + riz]
jmp 0x1401b094d
mov rax, qword [rsp + r10]
pop r10
mov edx, dword [rax]
jmp 0x1401b096e
jmp 0x1401b09c8
push rax
movabs rax, 0x2541613d
jmp 0x1401b5a9d
add r8d, 0x97511009
jmp 0x1401b0ac9
add r8d, 0x65e4fba4
sub r8d, 0x7a70942f
jmp 0x1401b0b8c
lea rdx, [rsp + 0x60]
jmp 0x1401b0bad
xor r10, 0xfffffffff8465ea8
add r10, 0xffffffff86c62b08
sub r10, 0xfffffffff73a0f2d
jmp 0x1401b6b09
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rsp + 0x30], 0
jmp 0x1401b63eb
sub r8d, 0xbea584bd
jmp 0x1401b1441
add r8d, 0x12ea2f38
jmp 0x1401b3b64
add r10, 0x32019619
sub r10, 0xffffffff8b15d06f
jmp 0x1401b1581
jmp 0x1401b3b58
add edx, 0xe9419d07
jmp 0x1401b8da3
xor r8d, 0x186d80da
sub r8d, 0x65ada637
add r8d, 0xd34ff0b8
add r8d, 0xe72a6303
xor r8d, 0xe50937a2
sub r8d, 0x27082c62
jmp 0x1401b1abd
jmp 0x1401b1b0f
add r8d, 0x8ac766d
jmp 0x1401b2a9f
sub r8d, 0x54ac8628
jmp 0x1401b0a04
add r8d, 0xa304aed3
add r8d, 0x57c6c1ad
sub r8d, 0x9c92f404
add r8d, 0x9ec8d66d
jmp 0x1401b31e9
add r9d, 0x9a5a071b
mov r8d, 0xe6a1abd4
jmp 0x1401b241e
jmp 0x1401b239c
sub r10, 0xffffffffc0546edb
xor r10, 0xffffffffe8a3386e
xor r10, 0xffffffffb5191040
xor r10, 0xffffffffacafffb3
jmp 0x1401b0b93
add r8d, 0x98395525
add r8d, 0x3df73afa
jmp 0x1401b2b4b
mov edx, 0x2fb8befb
jmp 0x1401b2b5e
jmp 0x1401b75c5
xor edx, 0x2b5be999
sub edx, 0x8ac725ae
add edx, 0xd7cf989c
jmp 0x1401b2f43
add edx, 0xb5549c26
jmp 0x1401b2f70
jmp 0x1401b3031
add rdi, 0xfffffffffef6d019
add rdi, 0xffffffffb47ecbd5
jmp 0x1401b49c8
add edx, 0x59d7d927
jmp 0x1401b1704
mov rcx, qword [rsp + rdi]
pop rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1401b30eb
jmp 0x1401b72d6
push r9
movabs r9, 0x8937533e
jmp 0x1401b0682
add r8d, 0x3f608746
jmp 0x1401b324c
sub r8d, 0xbec6abe5
jmp 0x1401b13d3
add r10, 0x43d8586c
jmp 0x1401b2a5a
add r8d, 0x36815ccd
jmp 0x1401b3b9b
jmp 0x1401b3fff
sub r8d, 0xab0c1d3e
xor r8d, 0x43f6f428
mov edx, eax
xor ecx, ecx
jmp 0x1401b40bc
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
push r8
movabs r8, 0x8e879009
xor r8, 0xffffffff9fa742e2
sub r8, 0xffffffffefe9b0a1
jmp 0x1401b40e9
sub r8, 0xffffffff95a994d3
add r8, 0x71c91191
xor r8, 0xfffffffffd569f58
lea r8, [r8 + riz]
jmp 0x1401b41ab
mov qword [rsp + r8], rax
pop r8
jmp 0x1401b434c
cmp qword [rsp + 0x48], 0
jne 0x1401b4359
jmp 0x1401b72d6
mov r8d, 0x743aafa1
xor r8d, 0x5db7ee7a
jmp 0x1401b43f0
xor r8d, 0xf86a4e75
jmp 0x1401b237b
jmp 0x1401b72d6
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x58]
push rdx
movabs rdx, 0x89be0518
add rdx, 0x79a6d5d2
xor rdx, 0x48424f1
sub rdx, 0x36eb93b4
jmp 0x1401b640e
xor rdi, 0xcf10c06
add rdi, 0x4ea457a8
sub rdi, 0x3c902d5a
xor rdi, 0x3331e57a
jmp 0x1401b7172
xor rax, 0x683d0ccc
jmp 0x1401b4ae7
xor rax, 0x1687ed56
sub rax, 0xffffffffcf60e5ad
add rax, 0xffffffffc34f3bba
xor rax, 0x2e314820
xor rax, 0x2769db95
jmp 0x1401b4b42
xor rax, 0x6b9a0e2f
jmp 0x1401b4b6c
sub rax, 0xfffffffff034615e
jmp 0x1401b4ba7
xor rax, 0xffffffffaf77fa66
jmp 0x1401b982d
xor r9, 0x4b02ad4a
xor r9, 0xffffffffa496ab79
jmp 0x1401b4f7e
xor rax, 0xffffffffcda03bcf
xor rax, 0x666ffc3
jmp 0x1401b5ab6
jmp 0x1401b4ad1
xor rdx, 0xffffffffaf899a0d
xor rdx, 0x3e4d36f3
add rdx, 0x44b398bd
sub rdx, 0xffffffff8afe8516
jmp 0x1401b5c6a
jmp 0x1401b5c7c
add rdx, 0x1c78d9ab
jmp 0x1401b7fb3
movabs rdx, 0x8da65092
sub rdx, 0xffffffffd58f928a
jmp 0x1401b5b25
mov dword [rsp + 0x28], 0x80
jmp 0x1401b6401
mov dword [rsp + 0x20], 3
jmp 0x1401b67f1
xor rdx, 0x604461f9
jmp 0x1401b67e5
sub rdx, 0xffffffffd2e9baac
jmp 0x1401b8dab
xor r9d, r9d
mov r8d, 0xce4f27ba
xor r8d, 0xa85ceb2a
sub r8d, 0x49f82b47
jmp 0x1401b6890
jmp 0x1401b93f2
add r10, 0x4d12f8b3
lea r10, [r10 + riz]
mov rdx, qword [rsp + r10]
pop r10
jmp 0x1401b88ba
add rdi, 0xffffffff9c8d1bba
jmp 0x1401afec9
xor rdi, 0xfffffffff3195a0b
jmp 0x1401b6cbe
add rsp, 0x178
jmp 0x1401b89c1
sub edx, 0x2edaf8cd
jmp 0x1401b75e0
add edx, 0xd6b9a669
xor edx, 0xced24c4b
sub edx, 0xf0f6990b
jmp 0x1401b7635
sub edx, 0xd2f8a99b
jmp 0x1401b7665
jmp 0x1401b7a20
add edx, 0xe0432683
jmp 0x1401b7a4e
add edx, 0x64c5adc8
jmp 0x1401b7ab2
add edx, 0xc35b1c99
add edx, 0xe3116d06
jmp 0x1401b7d42
jmp 0x1401b2f0e
lea rdx, [rdx + riz]
mov qword [rsp + rdx], rax
pop rdx
cmp qword [rsp + 0x40], 0xffffffffffffffff
jne 0x1401b8367
jmp 0x1401b8171
jmp 0x1401b72d6
sub rax, 0xffffffffbf3724e1
jmp 0x1401b820f
lea rax, [rax + riz]
jmp 0x1401b8280
mov rcx, qword [rsp + rax]
pop rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x1401b8299
test eax, eax
jne 0x1401b4935
jmp 0x1401b8362
jmp 0x1401b4930
xor r9d, r9d
jmp 0x1401b07cb
push rdi
movabs rdi, 0x6492cdbe
jmp 0x1401b301e
ret
xor edx, 0x8c90a8a8
jmp 0x1401b8db7
add rdx, 0xfffffffffa38840a
jmp 0x1401b086f
add edx, 0x42680dad
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
push rdx
jmp 0x1401b5f5a
xor r8d, 0x4ecce909
add r8d, 0xb710976c
add r8d, 0x460392c7
xor r8d, 0xf4d94914
sub r8d, 0x19c988ab
add r8d, 0xd674bb40
sub r8d, 0x37a489d1
jmp 0x1401b1a34
xor rax, 0x74cdc919
xor rax, 0x391223a
sub rax, 0x6f688f58
jmp 0x1401b817b
pop rdx
mov r8d, dword [rax]
push r10
movabs r10, 0xffa8e7b3
sub r10, 0xffffffffa256a74e
xor r10, 0xffffffffa291f3d9
jmp 0x1401b99d1
jmp 0x1401b1542