Function at 0x140031560
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
mov rbx, r9
mov r13, r8
mov r12, rdx
mov r14, rcx
lea esi, [r15 + 0x5a]
mov rbp, r15
mov qword [rsp + 0x30], r15
test rdx, rdx
jne 0x14003159e
xor eax, eax
jmp 0x140031653
test r8, r8
je 0x140031874
test rbx, rbx
je 0x140031874
lea rdx, str.sha256__
mov r8d, 8
mov rcx, r12
mov qword [rsp + 0x70], rdi
call fcn.140071c50
test eax, eax
jne 0x140031761
mov rax, qword [case.0x14003217c.2]
cmp qword [rax + 0xb8], rbp
je 0x14003186d
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [fcn.14006efe4]
mov rbp, rax
test rax, rax
je 0x1400316ac
mov r8, rax
mov rax, qword [case.0x14003217c.2]
mov r9d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rbx
mov rcx, r13
call qword [rax + 0xb8]
test eax, eax
jne 0x14003164e
lea rax, [rsp + 0x38]
lea r9, [rsp + 0x78]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rbp
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.14005b7a0
mov rcx, rbp
mov edi, eax
call qword [fcn.14006d598]
test edi, edi
je 0x14003166d
mov eax, edi
mov rdi, qword [rsp + 0x70]
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rsi
ret
mov r8, qword [rsp + 0x78]
lea rdx, str._t_public_key_hash:_sha256___s_n
mov rcx, r14
call fcn.140037d10
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r12
repne scasb al, byte [rdi]
not rcx
lea rdi, [rcx - 1]
call qword [fcn.14006efe4]
mov rbp, rax
test rax, rax
jne 0x1400316b3
mov rcx, qword [rsp + 0x78]
call qword [fcn.14006d598]
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14003164e
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.14006ecb0
mov rdi, rbp
nop word [rax + rax]
lea rdx, str._sha256__
mov rcx, rdi
call fcn.140070e98
mov rbx, rax
test rax, rax
je 0x1400316ea
mov byte [rax], r15b
mov r8, qword [rsp + 0x38]
or rcx, 0xffffffffffffffff
lea rdx, [rdi + 8]
xor eax, eax
mov rdi, rdx
repne scasb al, byte [rdi]
mov rdi, qword [rsp + 0x78]
not rcx
dec rcx
cmp r8, rcx
jne 0x14003171a
mov rcx, rdi
call fcn.1400710a0
test eax, eax
je 0x14003175c
test rbx, rbx
je 0x14003173e
lea rdx, str.sha256__
mov rcx, rbx
mov byte [rbx], Ordinal_60
call fcn.140070e98
mov rdi, rax
test rax, rax
jne 0x1400316d0
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
call qword [fcn.14006d598]
mov rcx, rbp
mov qword [rsp + 0x78], r15
call qword [fcn.14006d598]
mov eax, esi
jmp 0x14003164e
mov esi, r15d
jmp 0x14003173e
lea rdx, [0x1400a6f9c]
mov rcx, r12
call fcn.140057c80
mov r12, rax
test rax, rax
je 0x14003186d
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 2]
call fcn.14006e2e4
test eax, eax
jne 0x14003184c
mov rcx, r12
call fcn.140070224
xor r8d, r8d
xor edx, edx
mov rcx, r12
movsxd rdi, eax
call fcn.14006e2e4
test eax, eax
jne 0x14003184c
cmp edi, 0x100000
ja 0x14003184c
mov rcx, rdi
call fcn.140034240
mov rdi, rax
cmp rbx, rax
ja 0x14003184c
lea rcx, [rax + 1]
call qword [fcn.14006efe4]
mov rbp, rax
test rax, rax
je 0x14003184c
mov r9, r12
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.140070040
cmp eax, 1
jne 0x14003184c
cmp rbx, rdi
jne 0x140031815
mov r8, rbx
mov rdx, rbp
mov rcx, r13
call fcn.1400710a0
test eax, eax
jne 0x14003184c
mov esi, r15d
jmp 0x14003184c
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x30]
mov rcx, rbp
mov byte [rdi + rbp], r15b
call fcn.140031450
test eax, eax
jne 0x14003184c
cmp rbx, qword [rsp + 0x78]
jne 0x14003184c
mov rdx, qword [rsp + 0x30]
mov r8, rbx
mov rcx, r13
call fcn.1400710a0
test eax, eax
cmove esi, r15d
mov rcx, rbp
call qword [fcn.14006d598]
mov rcx, qword [rsp + 0x30]
call qword [fcn.14006d598]
mov rcx, r12
mov qword [rsp + 0x30], r15
call fcn.14006e47c
mov eax, esi
jmp 0x14003164e
mov eax, esi
jmp 0x140031653