Function at 0x1800897b0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x50
xor r14d, r14d
mov rbx, r9
mov r13, r8
mov rbp, rdx
mov r12, rcx
lea esi, [r14 + 0x5a]
mov edi, r14d
mov qword [rsp + 0x30], r14
test rdx, rdx
jne 0x1800897ed
xor eax, eax
jmp 0x180089a86
test r8, r8
je 0x180089a84
test rbx, rbx
je 0x180089a84
lea rdx, str.sha256__
mov r8d, 8
mov rcx, rbp
call fcn.1801db160
test eax, eax
jne 0x180089978
lea ecx, [rax + 0x20]
call qword [fcn.1801d17e4]
mov rdi, rax
test rax, rax
je 0x1800898c3
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov r8, rax
mov rdx, rbx
mov rcx, r13
call fcn.18009f1c0
lea r11, [rsp + 0x38]
lea r9, [rsp + 0x88]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rdi
mov rcx, r12
mov qword [rsp + 0x20], r11
call fcn.1800a07c0
mov rcx, rdi
mov ebx, eax
call qword [fcn.1801cc408]
test ebx, ebx
je 0x18008987e
mov eax, ebx
jmp 0x180089a86
mov r8, qword [rsp + 0x88]
lea rdx, str._t_public_key_hash:_sha256___s_n
mov rcx, r12
call fcn.180094e10
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
lea rdi, [rcx - 1]
call qword [fcn.1801d17e4]
mov r12, rax
test rax, rax
jne 0x1800898cd
mov rcx, qword [rsp + 0x88]
call qword [fcn.1801cc408]
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x180089a86
lea r8, [rdi + 1]
mov rdx, rbp
mov rcx, rax
call fcn.1801c9a10
mov rdi, r12
nop
lea rdx, str._sha256__
mov rcx, rdi
call fcn.1801ca34c
mov rbx, rax
test rax, rax
je 0x1800898fa
mov byte [rax], r14b
mov r8, qword [rsp + 0x38]
or rcx, 0xffffffffffffffff
lea rdx, [rdi + 8]
xor eax, eax
mov rdi, rdx
repne scasb al, byte [rdi]
mov rdi, qword [rsp + 0x88]
not rcx
dec rcx
cmp r8, rcx
jne 0x18008992d
mov rcx, rdi
call fcn.1801ca0b0
test eax, eax
je 0x180089973
test rbx, rbx
je 0x180089954
lea rdx, str.sha256__
mov rcx, rbx
mov byte [rbx], Ordinal_60
call fcn.1801ca34c
mov rdi, rax
test rax, rax
jne 0x1800898e0
mov rdi, qword [rsp + 0x88]
mov rcx, rdi
call qword [fcn.1801cc408]
mov rcx, r12
mov qword [rsp + 0x88], r14
call qword [fcn.1801cc408]
jmp 0x180089a84
mov esi, r14d
jmp 0x180089954
lea rdx, [0x1802248b8]
mov rcx, rbp
call fcn.1801dc3dc
mov r12, rax
test rax, rax
je 0x180089a84
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.1801dd7e8
test eax, eax
jne 0x180089a63
mov rcx, r12
call fcn.1801dd5d8
xor r8d, r8d
xor edx, edx
mov rcx, r12
movsxd rbp, eax
call fcn.1801dd7e8
test eax, eax
jne 0x180089a63
cmp ebp, 0x100000
ja 0x180089a63
mov rcx, rbp
call fcn.180110cd0
mov rbp, rax
cmp rbx, rax
ja 0x180089a63
lea rcx, [rax + 1]
call qword [fcn.1801d17e4]
mov rdi, rax
test rax, rax
je 0x180089a63
mov r9, r12
mov r8d, 1
mov rdx, rbp
mov rcx, rax
call fcn.1801dc7b8
cmp eax, 1
jne 0x180089a63
cmp rbx, rbp
jne 0x180089a2c
mov r8, rbx
mov rdx, rdi
mov rcx, r13
call fcn.1801ca0b0
test eax, eax
jne 0x180089a63
mov esi, r14d
jmp 0x180089a63
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov rcx, rdi
mov byte [rdi + rbp], r14b
call fcn.1800896a0
test eax, eax
jne 0x180089a63
cmp rbx, qword [rsp + 0x40]
jne 0x180089a63
mov rdx, qword [rsp + 0x30]
mov r8, rbx
mov rcx, r13
call fcn.1801ca0b0
test eax, eax
cmove esi, r14d
mov rcx, rdi
call qword [fcn.1801cc408]
mov rcx, qword [rsp + 0x30]
call qword [fcn.1801cc408]
mov rcx, r12
mov qword [rsp + 0x30], r14
call fcn.1801dc46c
mov eax, esi
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret