Function at 0x14001becc
Capabilities:
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor ebx, ebx
mov rdi, r9
mov qword [rax + 0x10], rbx
mov r12, r8
mov r15, rdx
mov r13, rcx
mov ebp, ebx
lea r14d, [rbx + 0x5a]
test rdx, rdx
jne 0x14001bf0c
xor eax, eax
jmp 0x14001c1a2
test r12, r12
je 0x14001c19f
test rdi, rdi
je 0x14001c19f
mov r8d, 8
lea rdx, str.sha256__
mov rcx, r15
call fcn.1400c0a20
test eax, eax
jne 0x14001c093
mov rax, qword [0x140198c08]
cmp qword [rax + 0xb8], rbx
je 0x14001c19f
mov ebp, reloc.WLDAP32.dll_Ordinal_32
mov ecx, ebp
call qword [fcn.1400bac0c]
mov rsi, rax
test rax, rax
jne 0x14001bf6e
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14001c1a2
mov rax, qword [0x140198c08]
mov r9, rbp
mov r8, rsi
mov rdx, rdi
mov rcx, r12
call qword [rax + 0xb8]
test eax, eax
jne 0x14001c1a2
lea rax, [rsp + 0x78]
mov r8, rbp
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.140043bf8
mov rcx, rsi
mov edi, eax
call qword [fcn.1400b8804]
test edi, edi
je 0x14001bfbf
mov eax, edi
jmp 0x14001c1a2
mov rbp, qword [rsp + 0x30]
lea rdx, str._t_public_key_hash:_sha256___s_n
mov r8, rbp
mov rcx, r13
call fcn.140010bf0
or r13, 0xffffffffffffffff
mov rdi, r13
inc rdi
cmp byte [r15 + rdi], bl
jne 0x14001bfdd
lea rcx, [rdi + 1]
call qword [fcn.1400bac0c]
mov r12, rax
test rax, rax
jne 0x14001c006
mov rcx, rbp
call qword [fcn.1400b8804]
jmp 0x14001bf64
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, r12
call fcn.1400919b0
mov rsi, r12
lea rdx, str._sha256__
mov rcx, rsi
call fcn.140091fc0
mov rdi, rax
test rax, rax
je 0x14001c031
mov byte [rax], bl
lea rdx, [rsi + 8]
mov rax, r13
inc rax
cmp byte [rdx + rax], bl
jne 0x14001c038
cmp qword [rsp + 0x78], rax
jne 0x14001c058
mov r8, qword [rsp + 0x78]
mov rcx, rbp
call fcn.1400918b0
test eax, eax
je 0x14001c079
test rdi, rdi
je 0x14001c07c
lea rdx, str.sha256__
mov byte [rdi], Ordinal_60
mov rcx, rdi
call fcn.140091fc0
mov rsi, rax
test rax, rax
je 0x14001c07c
jmp 0x14001c018
mov r14d, ebx
mov rcx, rbp
call qword [fcn.1400b8804]
mov rcx, r12
call qword [fcn.1400b8804]
jmp 0x14001c19f
lea rdx, [0x14016c118]
mov rcx, r15
call fcn.1400bde14
mov r15, rax
test rax, rax
je 0x14001c19f
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.1400a001c
test eax, eax
jne 0x14001c185
mov rcx, r15
call fcn.1400d5c84
xor r8d, r8d
movsxd rsi, eax
xor edx, edx
mov rcx, r15
call fcn.1400a001c
test eax, eax
jne 0x14001c185
cmp esi, 0x100000
ja 0x14001c185
mov rcx, rsi
call fcn.1400115d0
mov rsi, rax
cmp rdi, rax
ja 0x14001c185
lea rcx, [rax + 1]
call qword [fcn.1400bac0c]
mov rbp, rax
test rax, rax
je 0x14001c185
mov r9, r15
mov r8d, 1
mov rdx, rsi
mov rcx, rax
call fcn.14009fbbc
cmp eax, 1
jne 0x14001c185
cmp rdi, rsi
jne 0x14001c14b
mov r8, rdi
mov rdx, rbp
mov rcx, r12
call fcn.1400918b0
test eax, eax
jne 0x14001c185
mov r14d, ebx
jmp 0x14001c185
lea r8, [rsp + 0x30]
mov byte [rsi + rbp], bl
lea rdx, [rsp + 0x78]
mov rcx, rbp
call fcn.14001bddc
mov rbx, qword [rsp + 0x78]
test eax, eax
jne 0x14001c185
cmp rdi, qword [rsp + 0x30]
jne 0x14001c185
mov r8, rdi
mov rdx, rbx
mov rcx, r12
call fcn.1400918b0
neg eax
sbb ecx, ecx
and r14d, ecx
mov rcx, rbp
call qword [fcn.1400b8804]
mov rcx, rbx
call qword [fcn.1400b8804]
mov rcx, r15
call fcn.14009f2bc
mov eax, r14d
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret