Function at 0x1400114b0
Capabilities:
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2c0
mov rax, qword [0x1401cb558]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov r14, r8
mov rbx, rdx
mov r13, rcx
cmp qword [rcx + 0xa90], 0
jne 0x1400114ef
xor al, al
jmp 0x140011700
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], r15b
mov ecx, 0x2000
call fcn.140096ba0
mov rdi, rax
mov qword [rsp + 0x50], rax
mov ecx, 0x1000
call fcn.140096ba0
mov rsi, rax
mov qword [rsp + 0x58], rax
test rdi, rdi
je 0x140011862
test rax, rax
je 0x140011862
lea rdx, [0x1401832f8]
mov rcx, rbx
call fcn.140096e10
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140011723
lea rdx, [0x1401832f8]
mov rcx, r14
call fcn.140096e10
mov r14, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140011740
mov r9, r14
mov edx, 1
mov r8d, 0x1000
mov rcx, rsi
call fcn.14009748c
mov r12, rax
mov rcx, r14
call fcn.1400971a0
test eax, eax
jne 0x14001175d
mov rcx, r14
call fcn.140097174
test eax, eax
je 0x14001177a
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8004
mov rcx, qword [r13 + 0xa88]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x140011797
mov r9, r12
shr r9, 1
je 0x140011620
mov rdx, rsi
lea r8, [rsi - 1]
add r8, r12
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdx]
movzx eax, byte [r8]
mov byte [rdx], al
mov byte [r8], cl
lea rdx, [rdx + 1]
lea r8, [r8 - 1]
sub r9, 1
jne 0x140011600
nop word [rax + rax]
mov rcx, rbx
call fcn.140097174
test eax, eax
jne 0x140011671
mov r9, rbx
lea edx, [rax + 1]
mov r8d, 0x2000
mov rcx, rdi
call fcn.14009748c
mov r15, rax
mov rcx, rbx
call fcn.1400971a0
test eax, eax
jne 0x1400117ba
xor r9d, r9d
mov r8d, r15d
mov rdx, rdi
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x1400117dd
jmp 0x140011620
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9, qword [r13 + 0xa90]
mov r8d, r12d
mov rdx, rsi
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
je 0x140011800
mov byte [rsp + 0x30], 1
jmp 0x1400116bc
mov rcx, rbx
call fcn.1400970ac
test r14, r14
je 0x1400116d1
mov rcx, r14
call fcn.1400970ac
test rdi, rdi
je 0x1400116de
mov rcx, rdi
call fcn.140096b8c
test rsi, rsi
je 0x1400116eb
mov rcx, rsi
call fcn.140096b8c
cmp qword [rsp + 0x38], 0
jne 0x1400116fb
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
movzx eax, byte [rsp + 0x30]
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.14002a970
add rsp, 0x2c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
lea rax, str.Could_not_open_data_file
mov qword [rsp + 0x60], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x60]
call fcn.1400611e4
lea rax, str.Could_not_open_signature_file
mov qword [rsp + 0x68], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x68]
call fcn.1400611e4
lea rax, str.Could_not_read_signature_file
mov qword [rsp + 0x70], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x70]
call fcn.1400611e4
lea rax, str.Invalid_signature_file
mov qword [rsp + 0x78], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x78]
call fcn.1400611e4
lea rax, str.Could_not_create_hash_object
mov qword [rsp + 0x80], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x80]
call fcn.1400611e4
lea rax, str.Error_reading_data_file
mov qword [rsp + 0x88], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x88]
call fcn.1400611e4
lea rax, str.Error_while_hashing_data
mov qword [rsp + 0x90], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x90]
call fcn.1400611e4
movups xmm0, xmmword [str.Bad_update_signature]
movaps xmmword [rsp + 0xb0], xmm0
movups xmm1, xmmword [0x140183160]
movaps xmmword [rsp + 0xc0], xmm1
movsd xmm0, qword [0x140183170]
movsd qword [rsp + 0xd0], xmm0
movzx eax, word [0x140183178]
mov word [rsp + 0xd8], ax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x98], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0x98]
call fcn.1400611e4
lea rax, str.Could_not_allocate_memory_for_reading_file
mov qword [rsp + 0xa0], rax
lea rdx, [0x1401bb448]
lea rcx, [rsp + 0xa0]
call fcn.1400611e4
int3