Function at 0x1401158d0
Capabilities:
Hash data via bcrypt

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
sub rsp, 0xa0
mov r13d, edx
cmp edx, 0x14
jne 0x140115905
mov rdi, qword [0x1401d50f0]
lea rax, str.SHA1
jmp 0x140115949
cmp r13d, 0x20
jne 0x14011591b
mov rdi, qword [0x1401d50f8]
lea rax, str.SHA256
jmp 0x140115949
cmp r13d, 0x30
jne 0x140115931
mov rdi, qword [0x1401d5100]
lea rax, str.SHA384
jmp 0x140115949
cmp r13d, 0x40
jne 0x140115c1a
mov rdi, qword [0x1401d5108]
lea rax, str.SHA512
mov r12d, dword [rsp + 0xf8]
mov ecx, r12d
mov qword [rsp + 0x70], rax
mov esi, r12d
mov qword [rsp + 0x68], r12
call fcn.14003f380
mov qword [rsp + 0x50], rax
mov rbx, rax
test rax, rax
je 0x140115c1a
mov qword [rsp + 0x90], r14
mov rcx, r13
mov qword [rsp + 0x88], r15
call fcn.14003f380
mov r14, rax
mov rcx, rbx
test rax, rax
jne 0x1401159a8
call fcn.14003eedc
lea eax, [r14 - 1]
jmp 0x140115af0
mov rdx, qword [rsp + 0xf0]
mov r8, r12
mov qword [rsp + 0x98], rbp
call fcn.140017310
xor ebp, ebp
lea rax, [rsp + 0x44]
mov dword [rsp + 0x28], ebp
lea r8, [rsp + 0x40]
lea rdx, str.HashDigestLength
mov qword [rsp + 0x20], rax
mov rcx, rdi
lea r9d, [rbp + 4]
call sub.bcrypt.dll_BCryptGetProperty
test eax, eax
js 0x140115a8e
cmp dword [rsp + 0x40], r13d
jne 0x140115a8e
lea rax, [rsp + 0x44]
mov dword [rsp + 0x28], ebp
lea r9d, [rbp + 4]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0xd8]
mov rcx, rdi
lea rdx, str.ObjectLength
call sub.bcrypt.dll_BCryptGetProperty
test eax, eax
js 0x140115a8e
mov ecx, dword [rsp + 0xd8]
call fcn.14003f380
mov qword [rsp + 0x58], rax
mov rbx, rax
test rax, rax
je 0x140115a89
mov r9d, dword [rsp + 0xd8]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x30], ebp
mov r8, rax
mov dword [rsp + 0x28], ebp
mov rcx, rdi
mov qword [rsp + 0x20], rbp
call sub.bcrypt.dll_BCryptCreateHash
test eax, eax
jns 0x140115b0f
mov ecx, dword [rsp + 0xd8]
test rcx, rcx
je 0x140115a81
mov rdi, rbx
xor eax, eax
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003eedc
mov rbx, qword [rsp + 0x50]
mov r12d, 0xffffffff
test rsi, rsi
je 0x140115aa3
mov rdi, rbx
xor eax, eax
mov rcx, rsi
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003eedc
test r12d, r12d
jne 0x140115acc
mov edi, dword [rsp + 0xe8]
mov ecx, edi
mov esi, edi
call fcn.14003f380
mov rbx, rax
test rax, rax
jne 0x140115b92
test r13d, r13d
je 0x140115adb
mov rcx, r13
xor eax, eax
mov rdi, r14
rep stosb byte [rdi], al
mov rcx, r14
call fcn.14003eedc
mov eax, 0xffffffff
mov rbp, qword [rsp + 0x98]
mov r14, qword [rsp + 0x90]
mov r15, qword [rsp + 0x88]
add rsp, 0xa0
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rbx, qword [rsp + 0x60]
xor r9d, r9d
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
mov esi, dword [rsp + 0xd8]
mov r8d, r12d
mov edi, dword [rsp + 0x40]
call sub.bcrypt.dll_BCryptHashData
test eax, eax
mov r12d, ebp
mov r8d, edi
mov rdx, r14
setns r12b
mov rcx, rbx
xor r9d, r9d
dec r12d
call sub.bcrypt.dll_BCryptFinishHash
mov rcx, rbx
mov dword [rsp + 0x48], eax
call sub.bcrypt.dll_BCryptDestroyHash
mov rdx, qword [rsp + 0x58]
mov ecx, esi
test esi, esi
je 0x140115b6d
mov rdi, rdx
xor eax, eax
rep stosb byte [rdi], al
mov rcx, rdx
call fcn.14003eedc
mov rbx, qword [rsp + 0x50]
mov eax, ebp
cmp dword [rsp + 0x48], eax
mov rsi, qword [rsp + 0x68]
setge al
dec eax
or r12d, eax
jmp 0x140115a94
mov rdx, qword [rsp + 0xe0]
mov r8, rsi
mov rcx, rbx
call fcn.140017310
mov eax, dword [rsp + 0x100]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0xd0]
test al, 2
mov dword [rsp + 0x30], eax
mov r9d, r13d
cmove rdx, rbp
mov dword [rsp + 0x28], edi
mov r8, r14
mov qword [rsp + 0x20], rbx
mov rcx, qword [rcx]
call sub.bcrypt.dll_BCryptVerifySignature
mov r12d, eax
test r13d, r13d
je 0x140115bec
mov rdi, r14
xor eax, eax
mov rcx, r13
rep stosb byte [rdi], al
mov rcx, r14
call fcn.14003eedc
test rsi, rsi
je 0x140115c03
mov rdi, rbx
xor eax, eax
mov rcx, rsi
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003eedc
test r12d, r12d
setns bpl
lea eax, [rbp - 1]
jmp 0x140115ae8
mov eax, 0xffffffff
add rsp, 0xa0
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret