Function at 0x1400373f0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0xf0
lea rdi, [rsp + 0x30]
mov ecx, Ordinal_50
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x54], 0x5a
cmp qword [rsp + 0x108], 0
jne 0x140037451
xor eax, eax
jmp 0x140037943
cmp qword [rsp + 0x110], 0
je 0x140037467
cmp qword [rsp + 0x118], 0
jne 0x140037470
mov eax, dword [rsp + 0x54]
jmp 0x140037943
mov r8d, 8
lea rdx, [0x1400d0840]
mov rcx, qword [rsp + 0x108]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x14003773c
mov rax, qword [0x1400d0778]
cmp qword [rax + 0xb8], 0
jne 0x1400374ac
mov eax, dword [rsp + 0x54]
jmp 0x140037943
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [section..data]
mov qword [rsp + 0xb0], rax
cmp qword [rsp + 0xb0], 0
jne 0x1400374d4
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140037943
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov r8, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x110]
mov rax, qword [0x1400d0778]
call qword [rax + 0xb8]
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x140037513
mov eax, dword [rsp + 0x58]
jmp 0x140037943
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x88]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x100]
call fcn.14006c0e0
mov dword [rsp + 0x58], eax
mov rcx, qword [rsp + 0xb0]
call qword [0x1400ce008]
mov qword [rsp + 0xb0], 0
xor eax, eax
test eax, eax
jne 0x140037544
cmp dword [rsp + 0x58], 0
je 0x140037574
mov eax, dword [rsp + 0x58]
jmp 0x140037943
mov r8, qword [rsp + 0x88]
lea rdx, str._t_public_key_hash:_sha256___s_n
mov rcx, qword [rsp + 0x100]
call fcn.1400421c0
mov rcx, qword [rsp + 0x108]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
inc rax
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
call qword [section..data]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x1400375ed
mov rcx, qword [rsp + 0x88]
call qword [0x1400ce008]
mov qword [rsp + 0x88], 0
xor eax, eax
test eax, eax
jne 0x1400375c3
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140037943
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x98]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xa0], rax
lea rdx, str._sha256__
mov rcx, qword [rsp + 0xa0]
call sub.VCRUNTIME140.dll_strstr
mov qword [rsp + 0xa8], rax
cmp qword [rsp + 0xa8], 0
je 0x140037653
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0xa8]
mov byte [rcx + rax], 0
mov rax, qword [rsp + 0xa0]
add rax, 8
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp qword [rsp + 0x68], rax
jne 0x14003769d
mov rax, qword [rsp + 0xa0]
add rax, 8
mov r8, qword [rsp + 0x68]
mov rdx, rax
mov rcx, qword [rsp + 0x88]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003769d
mov dword [rsp + 0x54], 0
jmp 0x1400376f3
cmp qword [rsp + 0xa8], 0
je 0x1400376d9
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0xa8]
mov byte [rcx + rax], Ordinal_60
lea rdx, str.sha256__
mov rcx, qword [rsp + 0xa8]
call sub.VCRUNTIME140.dll_strstr
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa8], 0
je 0x1400376f3
cmp qword [rsp + 0xa0], 0
jne 0x140037617
mov rcx, qword [rsp + 0x88]
call qword [0x1400ce008]
mov qword [rsp + 0x88], 0
xor eax, eax
test eax, eax
jne 0x1400376f3
mov rcx, qword [rsp + 0x98]
call qword [0x1400ce008]
mov qword [rsp + 0x98], 0
xor eax, eax
test eax, eax
jne 0x140037713
mov eax, dword [rsp + 0x54]
jmp 0x140037943
lea rdx, [0x1400d081c]
mov rcx, qword [rsp + 0x108]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x140037766
mov eax, dword [rsp + 0x54]
jmp 0x140037943
mov r8d, 2
xor edx, edx
mov rcx, qword [rsp + 0x30]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fseek
test eax, eax
je 0x140037781
jmp 0x140037901
mov rcx, qword [rsp + 0x30]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ftell
mov dword [rsp + 0xb8], eax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x30]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fseek
test eax, eax
je 0x1400377aa
jmp 0x140037901
cmp dword [rsp + 0xb8], 0
jl 0x1400377c1
cmp dword [rsp + 0xb8], 0x100000
jle 0x1400377c6
jmp 0x140037901
movsxd rax, dword [rsp + 0xb8]
mov rcx, rax
call fcn.140046bb0
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
cmp qword [rsp + 0x118], rax
jbe 0x1400377f5
jmp 0x140037901
mov rax, qword [rsp + 0xc0]
inc rax
mov rcx, rax
call qword [section..data]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x14003781b
jmp 0x140037901
mov r9, qword [rsp + 0x30]
mov r8d, 1
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x38]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fread
cmp eax, 1
je 0x140037842
jmp 0x140037901
mov rax, qword [rsp + 0xc0]
cmp qword [rsp + 0x118], rax
jne 0x14003787f
mov r8, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x110]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003787a
mov dword [rsp + 0x54], 0
jmp 0x140037901
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov byte [rax], 0
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
call fcn.140038010
mov dword [rsp + 0xe4], eax
cmp dword [rsp + 0xe4], 0
je 0x1400378bf
jmp 0x140037901
mov rax, qword [rsp + 0xd8]
cmp qword [rsp + 0x118], rax
jne 0x1400378f7
mov r8, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x110]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400378f7
mov dword [rsp + 0x54], 0
xor eax, eax
test eax, eax
jne 0x140037766
mov rcx, qword [rsp + 0x38]
call qword [0x1400ce008]
mov qword [rsp + 0x38], 0
xor eax, eax
test eax, eax
jne 0x140037901
mov rcx, qword [rsp + 0x48]
call qword [0x1400ce008]
mov qword [rsp + 0x48], 0
xor eax, eax
test eax, eax
jne 0x14003791b
mov rcx, qword [rsp + 0x30]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov eax, dword [rsp + 0x54]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_connect
call fcn.1400abe64
mov rax, rdi
add rsp, 0xf0
pop rdi
ret