Function at 0x1401a2228
Capabilities:
Read file on windows

Disassembly:
sub r8, 0xfffffffff757fa36
xor r8, 0x254dd906
xor eax, 0x254dd906
xchg esi, eax
push rbx
add byte [rax], al
sub rdi, 0xffffffffda2d3522
add rdi, 0xffffffffb48db249
add edi, 0xb48db249
sub rdi, 0xffffffffb402eded
jmp 0x1401a1f32
sub rdi, 0x74d9e17
jmp 0x1401a1f4f
jmp 0x1401a1f5e
jmp 0x1401a1346
xor r9d, r9d
jmp 0x1401a8ef7
sub rdi, 0xffffffff90a6ecb9
jmp 0x1401a1f7d
jmp 0x1401a21af
sub rax, 0xffffffffec880952
add rax, 0xffffffffdd54cafe
add rax, 0x18c565cb
jmp 0x1401a1fb8
sub rax, 0x60bb916d
lea rax, [rax + riz]
jmp 0x1401a2058
mov rcx, qword [rsp + rax]
pop rax
jmp 0x1401a21aa
jmp 0x1401a8b41
sub rdi, 0xffffffffe90a91db
jmp 0x1401a21cb
sub rdi, 0x46260f43
add rdi, 0x3ba80744
add rdi, 0x6fcd92e9
add rdi, 0xffffffffd312087f
xor rdi, 0xffffffff964daed9
lea rdi, [rdi + riz]
mov qword [rsp + rdi], rax
jmp 0x1401a2228
pop rdi
jmp 0x1401a245b
sub r8, 0xffffffffb05ca3f6
sub r8, 0x67137c91
add r8, 0xffffffffc6afb0d3
add r8, 0xffffffff8a339c4c
xor r8, 0xc69f966
jmp 0x1401a22c6
jmp 0x1401a23d3
sub r8, 0x67582d82
jmp 0x1401aa9b7
cmp qword [rsp + 0x48], 0
jne 0x1401a2484
jmp 0x1401a1346
mov r8d, 0x5974b0dc
add r8d, 0xa537c51d
xor r8d, 0x941b3675
sub r8d, 0xd08f73d1
sub r8d, 0x548e9b0b
sub r8d, 0xc7d0d38c
xor r8d, 0x1fd6b92d
add r8d, 0x8457fe13
add r8d, 0xc154ece0
jmp 0x1401a2a99
jne 0x1401a24d0
jmp 0x1401a1346
mov qword [rsp + 0x20], 0
jmp 0x1401a9523
sub r8d, 0xd288e400
jmp 0x1401a27ae
xor r8d, 0x65e32ef
add r8d, 0x695ecdeb
sub r8d, 0xf56a8033
jmp 0x1401a27d8
mov edx, 0x8ce9d235
sub edx, 0x2a40b6b1
jmp 0x1401a27ff
jmp 0x1401a280d
sub edx, 0xe6d05292
sub edx, 0xbadf4a06
add edx, 0x2924f606
add edx, 0x8bb45aed
add edx, 0x5953eeb8
add edx, 0xcd79fb02
sub edx, 0x3564aa22
xor edx, 0xc584ee2a
jmp 0x1401a2859
xor edx, 0x11883128
jmp 0x1401a2874
add edx, 0x41094b07
jmp 0x1401a2896
jmp 0x1401a289f
add edx, 0x8bc5e484
jmp 0x1401aa4c8
add r8d, 0xb9499e33
xor r8d, 0x5ab638e9
sub r8d, 0x3ba358c2
jmp 0x1401a2ac3
jmp 0x1401a2ad2
jmp 0x1401aa040
add r10, 0x5f9e0b1a
sub r10, 0x35ccf972
jmp 0x1401ab071
sub rax, 0xffffffffd4bbf160
jmp 0x1401a486a
add rax, 0xffffffff82f27469
jmp 0x1401a4906
add rax, 0x41be0180
add rax, 0x28e3600c
xor rax, 0x69790e2a
sub rax, 0xffffffffd10bb73b
xor rax, 0xfffffffff1ddfd36
jmp 0x1401a4961
xor rax, 0x1779e502
jmp 0x1401a4afc
add rax, 0xffffffff9c3cbda5
sub rax, 0x4f20d1b1
jmp 0x1401a1f82
add rcx, 0x5adb7308
xor rcx, 0xffffffff93656d1e
jmp 0x1401a574e
sub rcx, 0xffffffffbd325620
add rcx, 0xffffffffc3bae4fb
jmp 0x1401a6630
push r8
jmp 0x1401a5ffe
jmp 0x1401aa9a6
movabs rcx, 0xffffffffcf6c134f
jmp 0x1401a64ce
xor rcx, 0xffffffffae10be30
jmp 0x1401a557e
sub r12, 0xffffffff9cab6771
add r12, 0x1c0a4ac
add r12, 0xffffffffc1bc93d9
jmp 0x1401a6574
add r12, 0x74c4c8da
jmp 0x1401a6588
add r12, 0xffffffffb92f5d98
xor r12, 0xffffffffbc4150a0
jmp 0x1401a65c3
lea r12, [r12]
jmp 0x1401a65ea
mov rdx, qword [rsp + r12]
jmp 0x1401a6699
add rcx, 0xffffffffe3023d5f
jmp 0x1401a6644
sub rcx, 0xffffffffff7dafeb
add rcx, 0x7e2bb1c6
xor rcx, 0xfffffffff8970180
add rcx, 0xffffffff9440520b
jmp 0x1401a7fa9
pop r12
jmp 0x1401a675f
push rax
jmp 0x1401a827d
lea r10, [r10 + riz]
mov qword [rsp + r10], rax
jmp 0x1401a6852
pop r10
cmp qword [rsp + 0x40], 0xffffffffffffffff
jne 0x1401a1f56
jmp 0x1401a686e
jmp 0x1401a1f51
add r15, 0x5f214c71
jmp 0x1401a6904
xor r15, 0xfffffffff51f0fdb
jmp 0x1401a6920
jmp 0x1401a7b51
mov r8d, 0x4fa3ea15
sub r8d, 0x986ffe38
jmp 0x1401a747e
jmp 0x1401a74fd
add r8d, 0xf322427b
jmp 0x1401a7ef3
add r11, 0x6286370f
xor r11, 0x509763d5
jmp 0x1401a77b4
jmp 0x1401a8a1f
lea r15, [r15 + riz]
mov rcx, qword [rsp + r15]
pop r15
jmp 0x1401a7d04
lea r8, [r8 + riz]
mov rax, qword [rsp + r8]
pop r8
mov r8d, dword [rax]
push r12
jmp 0x1401a7ce0
movabs r12, 0xffffffff008834d0
add r12, 0x3eb6f284
add r12, 0x5bab27f5
add r12, 0xffffffffcc910a21
jmp 0x1401a6546
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
test eax, eax
jmp 0x1401a24c9
push rcx
jmp 0x1401a6496
xor r8d, 0x64259098
add r8d, 0x7192b1a0
jmp 0x1401a7f24
xor r8d, 0x982785b6
jmp 0x1401a7f79
xor r8d, 0x84ff9170
jmp 0x1401a812c
xor rcx, 0xffffffffe01a5a9e
xor rcx, 0xffffffff888671ff
add rcx, 0xffffffffa8eed516
sub rcx, 0x15ac1ae6
lea rcx, [rcx + riz]
jmp 0x1401a7fda
mov rax, qword [rsp + rcx]
jmp 0x1401a8039
jmp 0x1401a8047
pop rcx
jmp 0x1401a80e6
jmp 0x1401a80f9
jmp 0x1401a5fee
jmp 0x1401a261b
movabs rax, 0xffffffff32e7e9af
sub rax, 0x4677ef74
jmp 0x1401a82ca
add rax, 0xffffffffcf8434c3
jmp 0x1401a8383
jmp 0x1401a46d2
add r11, 0xffffffff942452da
jmp 0x1401a8a18
jmp 0x1401a7784
add r11, 0xffffffffeec6d0d9
jmp 0x1401a8a42
jmp 0x1401a956d
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1401a7d19
jmp 0x1401a1346
xor r8d, r8d
push r11
movabs r11, 0xffffffff8a640a11
jmp 0x1401a8fb9
jmp 0x1401a9539
lea r9, [rsp + 0x58]
push r8
movabs r8, 0x173e5d5ad
jmp 0x1401a227b
add r11, 0xfffffffff111f389
jmp 0x1401a9548
xor r11, 0xffffffffca3d8c16
jmp 0x1401a8a09
xor r11, 0xffffffffa253f036
jmp 0x1401a959e
xor r11, 0x7f6e6a74
xor r11, 0x860e7a9
xor r11, 0xffffffffab066c05
add r11, 0xffffffffd57db3bf
xor r11, 0xffffffff94dd9819
jmp 0x1401a999f
add r11, 0x48bf9e58
sub r11, 0x41e8511f
lea r11, [r11 + riz]
mov rax, qword [rsp + r11]
jmp 0x1401aa681
lea rdx, [rsp + 0x60]
jmp 0x1401aa096
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleFileNameA]
jmp 0x1401aa0ac
jmp 0x1401aa0d9
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
jmp 0x1401aa13b
jmp 0x1401aa152
mov dword [rsp + 0x20], 3
xor r9d, r9d
jmp 0x1401aa16a
jmp 0x1401a742f
lea rcx, [rsp + 0x60]
call qword [sym.imp.kernel32.dll_CreateFileA]
push r10
movabs r10, 0x5b1f0d1d
xor r10, 0xfffffffff8a6edb9
jmp 0x1401a3d91
pop r11
mov edx, dword [rax]
jmp 0x1401ac359
movabs r8, 0xfffffffe00f9b317
jmp 0x1401ab2c6
xor r8, 0xffffffffeef7fed3
jmp 0x1401aa9e2
xor r8, 0xffffffffd72f32e2
jmp 0x1401a7b60
xor r15, 0x4491334e
jmp 0x1401aac9c
sub r15, 0xffffffffd238a644
add r15, 0xffffffffaf66a70d
add r15, 0xfffffffff3cb4418
xor r15, 0x5733f53f
sub r15, 0xffffffffece37bc8
jmp 0x1401aaccd
jmp 0x1401aad05
add r15, 0x4e665890
jmp 0x1401aaf1f
xor r15, 0x1a8bd7ec
sub r15, 0x6583eba6
xor r15, 0xffffffffac927863
jmp 0x1401aaf8f
jmp 0x1401ab05e
sub r15, 0xffffffffc29496f3
sub r15, 0xffffffff832daeaf
jmp 0x1401a687f
sub r10, 0xffffffff871ab0a5
sub r10, 0xffffffffd6685cd3
sub r10, 0x3ce46aab
add r10, 0xffffffffca570b1e
add r10, 0x3e1248ee
add r10, 0xffffffffc4733213
jmp 0x1401ab15e
jmp 0x1401a6837
sub r8, 0xffffffff93b14d74
add r8, 0xf97367a
add r8, 0xffffffff9df11552
sub r8, 0x1d2c8770
jmp 0x1401ab3dc
jmp 0x1401ab3f1
jmp 0x1401ab40d
add r8, 0x3af4c133
jmp 0x1401ab422
xor r8, 0x73b817dd
jmp 0x1401ab442
sub r8, 0xfffffffff9db1aa8
add r8, 0x109e10c6
add r8, 0x1f658d7a
jmp 0x1401ab470
add r8, 0xffffffffb4b30a3d
add r8, 0x550252ca
sub r8, 0xffffffffec79c917
jmp 0x1401ab4c3
xor r8, 0x6bbc1c5d
sub r8, 0xffffffff99ec13cb
jmp 0x1401ab51e
add r8, 0x5fcea5cd
xor r8, 0x46f75399
add r8, 0xffffffffb7a99d12
xor r8, 0xffffffffb5966697
jmp 0x1401ab7e7
lea r8, [r8 + riz]
mov rcx, qword [rsp + r8]
jmp 0x1401ab7fc
pop r8
mov qword [rax], rcx
push r8
movabs r8, 0xffffffff14dae505
xor r8, 0x70e5efb0
sub r8, 0xffffffffde9cbcae
jmp 0x1401ab87a
sub r8, 0xffffffffdefb679d
jmp 0x1401a1248
push r15
movabs r15, 0x12661244b
jmp 0x1401aac87