Function at 0x1401166b8
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov qword [rax + 8], rcx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
xor ebx, ebx
mov rdi, r9
mov qword [rax + 8], rbx
mov r12, r8
mov r14, rdx
mov esi, ebx
lea ebp, [rbx + 0x5a]
test rdx, rdx
jne 0x1401166f3
xor eax, eax
jmp 0x140116973
test r12, r12
je 0x140116971
test rdi, rdi
je 0x140116971
mov r8d, 8
lea rdx, str.sha256__
mov rcx, r14
call fcn.14014efd0
test eax, eax
jne 0x140116865
mov rax, qword [0x14018bc58]
cmp qword [rax + 0xb8], rbx
je 0x140116971
mov r15d, 0x20
mov ecx, r15d
call qword [fcn.1401472e4]
mov rsi, rax
test rax, rax
jne 0x140116757
mov eax, 0x1b
jmp 0x140116973
mov rax, qword [0x14018bc58]
mov r9, r15
mov r8, rsi
mov rdx, rdi
mov rcx, r12
call qword [rax + 0xb8]
test eax, eax
jne 0x140116973
lea r9, [rsp + 0x58]
mov rdx, r15
lea r8, [rsp + 0x50]
mov rcx, rsi
call fcn.140128804
mov rcx, rsi
mov edi, eax
call qword [fcn.1401472ec]
test edi, edi
je 0x1401167a3
mov eax, edi
jmp 0x140116973
or r12, 0xffffffffffffffff
mov rdi, r12
inc rdi
cmp byte [r14 + rdi], bl
jne 0x1401167aa
lea rcx, [rdi + 1]
call qword [fcn.1401472e4]
mov r15, rax
test rax, rax
jne 0x1401167d5
mov rcx, qword [rsp + 0x50]
call qword [fcn.1401472ec]
jmp 0x14011674d
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, r15
call fcn.140142010
mov rsi, r15
lea rdx, str._sha256__
mov rcx, rsi
call fcn.140142c50
mov rdi, rax
test rax, rax
je 0x140116800
mov byte [rax], bl
lea rdx, [rsi + 8]
mov rax, r12
inc rax
cmp byte [rdx + rax], bl
jne 0x140116807
cmp qword [rsp + 0x58], rax
jne 0x140116829
mov r8, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
call fcn.140142a80
test eax, eax
je 0x14011684a
test rdi, rdi
je 0x14011684c
lea rdx, str.sha256__
mov byte [rdi], 0x3b
mov rcx, rdi
call fcn.140142c50
mov rsi, rax
test rax, rax
je 0x14011684c
jmp 0x1401167e7
mov ebp, ebx
mov rcx, qword [rsp + 0x50]
call qword [fcn.1401472ec]
mov rcx, r15
call qword [fcn.1401472ec]
jmp 0x140116971
lea rdx, [0x14017cf34]
mov rcx, r14
call fcn.140129208
mov r15, rax
test rax, rax
je 0x140116971
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.14014eda0
test eax, eax
jne 0x140116957
mov rcx, r15
call fcn.14014e900
xor r8d, r8d
movsxd r14, eax
xor edx, edx
mov rcx, r15
call fcn.14014eda0
test eax, eax
jne 0x140116957
cmp r14d, 0x100000
ja 0x140116957
mov rcx, r14
call fcn.14011ade0
mov r14, rax
cmp rdi, rax
ja 0x140116957
lea rcx, [rax + 1]
call qword [fcn.1401472e4]
mov rsi, rax
test rax, rax
je 0x140116957
mov r9, r15
mov r8d, 1
mov rdx, r14
mov rcx, rax
call fcn.14014deb4
cmp eax, 1
jne 0x140116957
cmp rdi, r14
jne 0x14011691d
mov r8, rdi
mov rdx, rsi
mov rcx, r12
call fcn.140142a80
test eax, eax
jne 0x140116957
mov ebp, ebx
jmp 0x140116957
lea r8, [rsp + 0x58]
mov byte [r14 + rsi], bl
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1401165c8
mov rbx, qword [rsp + 0x50]
test eax, eax
jne 0x140116957
cmp rdi, qword [rsp + 0x58]
jne 0x140116957
mov r8, rdi
mov rdx, rbx
mov rcx, r12
call fcn.140142a80
neg eax
sbb ecx, ecx
and ebp, ecx
mov rcx, rsi
call qword [fcn.1401472ec]
mov rcx, rbx
call qword [fcn.1401472ec]
mov rcx, r15
call fcn.14014eab8
mov eax, ebp
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret