Function at 0x140006fc0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
mov rbx, r9
mov r13, r8
mov r12, rdx
mov r14, rcx
lea esi, [r15 + 0x5a]
mov ebp, r15d
mov qword [rsp + 0x30], r15
test rdx, rdx
jne 0x140006ffe
xor eax, eax
jmp 0x1400071ac
test r8, r8
je 0x1400072d8
test rbx, rbx
je 0x1400072d8
lea rdx, str.sha256__
mov r8d, 8
mov rcx, r12
mov qword [rsp + 0x70], rdi
call fcn.140186ef0
test eax, eax
jne 0x1400071cb
mov rax, qword [case.0x1400150ac.2]
cmp qword [rax + 0xb8], rbp
je 0x1400071a5
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [section..data]
mov rbp, rax
test rax, rax
je 0x1400070f6
mov r8, rax
mov rax, qword [case.0x1400150ac.2]
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rbx
mov rcx, r13
call qword [rax + 0xb8]
test eax, eax
jne 0x1400071a7
lea rax, [rsp + 0x38]
lea r9, [rsp + 0x78]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rbp
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.140021030
mov rcx, rbp
mov edi, eax
call qword [fcn.14017eed8]
test edi, edi
je 0x1400070b7
mov eax, edi
jmp 0x1400071a7
mov r8, qword [rsp + 0x78]
lea rdx, str._t_public_key_hash:_sha256___s_n
mov rcx, r14
call fcn.14000fe70
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r12
repne scasb al, byte [rdi]
not rcx
lea rdi, [rcx - 1]
call qword [section..data]
mov rbp, rax
test rax, rax
jne 0x140007100
mov rcx, qword [rsp + 0x78]
call qword [fcn.14017eed8]
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400071a7
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.1401756a0
mov rdi, rbp
nop word [rax + rax]
lea rdx, str._sha256__
mov rcx, rdi
call fcn.140175e48
mov rbx, rax
test rax, rax
je 0x14000713a
mov byte [rax], r15b
mov r8, qword [rsp + 0x38]
or rcx, 0xffffffffffffffff
lea rdx, [rdi + 8]
xor eax, eax
mov rdi, rdx
repne scasb al, byte [rdi]
mov rdi, qword [rsp + 0x78]
not rcx
dec rcx
cmp r8, rcx
jne 0x14000716a
mov rcx, rdi
call fcn.140175d80
test eax, eax
je 0x1400071c6
test rbx, rbx
je 0x14000718e
lea rdx, str.sha256__
mov rcx, rbx
mov byte [rbx], Ordinal_60
call fcn.140175e48
mov rdi, rax
test rax, rax
jne 0x140007120
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
call qword [fcn.14017eed8]
mov rcx, rbp
mov qword [rsp + 0x78], r15
call qword [fcn.14017eed8]
mov eax, esi
mov rdi, qword [rsp + 0x70]
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rsi
ret
mov esi, r15d
jmp 0x14000718e
lea rdx, [0x1401af90c]
mov rcx, r12
call fcn.140021070
mov r12, rax
test rax, rax
je 0x1400071a5
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.140180c8c
test eax, eax
jne 0x1400072b2
mov rcx, r12
call fcn.14018133c
xor r8d, r8d
xor edx, edx
mov rcx, r12
movsxd rdi, eax
call fcn.140180c8c
test eax, eax
jne 0x1400072b2
cmp edi, 0x100000
ja 0x1400072b2
mov rcx, rdi
call fcn.140013b20
mov rdi, rax
cmp rbx, rax
ja 0x1400072b2
lea rcx, [rax + 1]
call qword [section..data]
mov rbp, rax
test rax, rax
je 0x1400072b2
mov r9, r12
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.1401809b4
cmp eax, 1
jne 0x1400072b2
cmp rbx, rdi
jne 0x14000727b
mov r8, rbx
mov rdx, rbp
mov rcx, r13
call fcn.140175d80
test eax, eax
jne 0x1400072b2
mov esi, r15d
jmp 0x1400072b2
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x30]
mov rcx, rbp
mov byte [rdi + rbp], r15b
call fcn.140006eb0
test eax, eax
jne 0x1400072b2
cmp rbx, qword [rsp + 0x78]
jne 0x1400072b2
mov rdx, qword [rsp + 0x30]
mov r8, rbx
mov rcx, r13
call fcn.140175d80
test eax, eax
cmove esi, r15d
mov rcx, rbp
call qword [fcn.14017eed8]
mov rcx, qword [rsp + 0x30]
call qword [fcn.14017eed8]
mov rcx, r12
mov qword [rsp + 0x30], r15
call fcn.14017f550
jmp 0x1400071a5
mov eax, esi
jmp 0x1400071ac