Function at 0x14000864c
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xfc0]
mov eax, 0x10c0
call fcn.1400289e0
sub rsp, rax
mov rax, qword [0x14003a010]
xor rax, rsp
mov qword [rbp + 0xfb0], rax
mov r13, qword [rbp + 0x1028]
mov rbx, r9
mov qword [rsp + 0x30], r8
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x38], rbx
or r12d, 0xffffffff
mov qword [rsp + 0x40], r13
xor edx, edx
lea rcx, [rsp + 0x50]
lea r8d, [r12 + 0x41]
call fcn.14000f4f0
xor edx, edx
lea r8d, [r12 + 0x21]
lea rcx, [rbp - 0x70]
call fcn.14000f4f0
test rbx, rbx
je 0x140008a51
test r13, r13
je 0x140008a51
and dword [r13], 0
mov edi, dword [rbp + 0x1020]
test edi, edi
jne 0x1400086fb
lea ecx, [rdi + 2]
call fcn.140012920
lea rdx, str.ERROR:_There_must_be_at_least_one_signature._n
jmp 0x140008a62
xor r14d, r14d
lea r13d, [r14 + 1]
test edi, edi
je 0x140008750
lea rbx, [rsp + 0x50]
test r15, r15
je 0x14000873d
test rbx, rbx
je 0x14000873d
and qword [rbx], 0
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov edx, 0x800d
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
neg eax
sbb ecx, ecx
neg ecx
sub ecx, r13d
jmp 0x140008740
mov ecx, r12d
test ecx, ecx
jne 0x140008777
add r14d, r13d
add rbx, 8
cmp r14d, edi
jb 0x14000870b
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.1400170cc
test eax, eax
je 0x14000878d
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Could_not_seek_to_start_of_the_file_n
jmp 0x140008a62
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Could_not_initialize_signature_handle._n
jmp 0x140008a62
lea rax, str.signature_block
mov r8d, 0x14
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x50]
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x20], edi
mov rcx, rsi
call fcn.140007fc4
test eax, eax
jne 0x140008a6a
xor r14d, r14d
test edi, edi
je 0x140008863
lea rbx, [rbp - 0x70]
lea rax, str.signature_algorithm_ID
mov r8d, 4
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x50]
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x20], edi
mov rcx, rsi
call fcn.140007fc4
test eax, eax
jne 0x140008a6a
lea rax, str.signature_length
mov r8d, 4
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x70]
lea rdx, [rdx + r14*4]
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x50]
mov rcx, rsi
call fcn.140007fc4
test eax, eax
jne 0x140008a6a
mov ecx, dword [rbx]
call qword [sym.imp.WSOCK32.dll_ntohl]
mov dword [rbx], eax
cmp eax, 0x800
ja 0x1400088e0
mov edx, eax
mov r8d, r13d
mov rcx, rsi
call fcn.1400170cc
test eax, eax
jne 0x1400088ca
add r14d, r13d
add rbx, 4
cmp r14d, edi
jb 0x1400087cb
mov rcx, rsi
call fcn.1400178c4
test eax, eax
jne 0x14000893a
mov r9, rsi
lea rcx, [rbp - 0x50]
mov r8d, 0x1000
mov rdx, r13
call fcn.140011814
mov rcx, rsi
mov r15, rax
call fcn.1400178f0
test eax, eax
jne 0x140008924
xor r14d, r14d
test edi, edi
je 0x140008863
lea rbx, [rsp + 0x50]
test rbx, rbx
je 0x1400088f6
mov rcx, qword [rbx]
lea rdx, [rbp - 0x50]
xor r9d, r9d
mov r8d, r15d
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
neg eax
sbb ecx, ecx
neg ecx
sub ecx, r13d
jmp 0x1400088f9
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Could_not_seek_past_signature._n
jmp 0x140008a62
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Embedded_signature_length_is_too_large._n
jmp 0x140008a62
mov ecx, r12d
test ecx, ecx
jne 0x14000890e
add r14d, r13d
add rbx, 8
cmp r14d, edi
jb 0x1400088a7
jmp 0x140008863
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Error_updating_verify_context_with_data_block._n
jmp 0x140008a62
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Error_reading_data_block._n
jmp 0x140008a62
xor r14d, r14d
test edi, edi
je 0x140008a4c
mov rax, qword [rsp + 0x30]
lea rcx, [rsp + 0x50]
sub rax, rcx
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
lea rsi, [rsp + 0x50]
sub rcx, rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea r12, [rbp - 0x70]
mov ebx, dword [r12]
add rax, rsi
test rsi, rsi
je 0x140008a03
test rax, rax
je 0x140008a03
mov r13, qword [rcx + rsi]
test r13, r13
je 0x140008a03
cmp ebx, 1
jb 0x140008a03
mov ecx, ebx
call fcn.140011578
mov r15, rax
test rax, rax
je 0x140008a2d
xor edx, edx
test ebx, ebx
je 0x1400089c7
mov r8, rax
mov ecx, ebx
sub ecx, edx
inc edx
dec ecx
mov cl, byte [rcx + r13]
mov byte [r8], cl
inc r8
cmp edx, ebx
jb 0x1400089b1
mov r8, qword [rsp + 0x30]
mov rdx, r15
and dword [rsp + 0x28], 0
mov rcx, qword [rsi]
and qword [rsp + 0x20], 0
mov r9, qword [r8 + rsi]
mov r8d, ebx
call qword [sym.imp.ADVAPI32.dll_CryptVerifySignatureA]
mov rcx, r15
mov ebx, eax
call fcn.140011538
mov rcx, qword [rsp + 0x38]
neg ebx
sbb eax, eax
neg eax
dec eax
jmp 0x140008a06
or eax, 0xffffffff
test eax, eax
jne 0x140008a2d
mov r13, qword [rsp + 0x40]
inc r14d
add r12, 4
add rsi, 8
inc dword [r13]
cmp r14d, edi
jae 0x140008a4c
mov rax, qword [rsp + 0x30]
jmp 0x140008972
mov ecx, 2
call fcn.140012920
mov rcx, rax
lea rdx, str.ERROR:_Error_verifying_signature._n
call fcn.140002508
or r12d, 0xffffffff
jmp 0x140008a6a
xor r12d, r12d
jmp 0x140008a6a
mov ecx, 2
call fcn.140012920
lea rdx, str.ERROR:_Invalid_parameter_specified._n
mov rcx, rax
call fcn.140002508
mov eax, r12d
mov rcx, qword [rbp + 0xfb0]
xor rcx, rsp
call fcn.14000d4c0
mov rbx, qword [rsp + 0x1118]
add rsp, 0x10c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret