Function at 0x1800061f0
Capabilities:
Create new key via cryptacquirecontext
Get file size
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x180148040]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r12, rdx
mov r14, rcx
mov qword [rbp - 0x51], rcx
mov qword [rbp - 0x49], rdx
mov r15, qword [rdx]
mov r13, qword [rdx + 8]
cmp r15, r13
je 0x1800064ed
xor edi, edi
nop word [rax + rax]
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x18000624d
mov rcx, qword [r14]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18000648c
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp eax, 0xffffffff
je 0x180006481
mov ecx, edi
call fcn.1800ec838
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x3d], eax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x3d]
mov r8d, edi
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180006479
cmp dword [rbp - 0x3d], edi
jne 0x180006479
mov dword [rsp + 0x20], 0xf0000000
mov r9d, 0x18
lea r8, str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider
xor edx, edx
lea rcx, [rbp - 0x31]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x180006479
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8004
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x18000645a
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
mov rcx, rsi
test eax, eax
je 0x180006431
call fcn.1800ec3ac
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp - 0x41], socket
xor edi, edi
mov dword [rsp + 0x20], edi
lea r9, [rbp - 0x41]
lea r8, [rbp + 7]
mov edx, 2
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
mov rcx, qword [rbp - 0x39]
test eax, eax
je 0x180006443
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
xor edx, edx
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rax
mov byte [rbp - 1], al
mov ebx, edi
cmp dword [rbp - 0x41], eax
jbe 0x1800063da
nop dword [rax]
mov eax, ebx
movzx r9d, byte [rbp + rax + 7]
lea ecx, [rbx + rbx]
lea rax, [rbp - 0x29]
add rcx, rax
lea r8, str._02x
mov edx, 3
call fcn.180012560
inc ebx
cmp ebx, dword [rbp - 0x41]
jb 0x1800063b0
mov r8, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x1800063e7
mov r8, qword [r15]
lea rax, [rbp - 0x29]
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180006403
inc rax
test ecx, ecx
jne 0x1800063f0
test edx, edx
je 0x180006419
add r15, 0x20
cmp r15, r13
jne 0x180006240
jmp 0x1800064ed
mov rcx, r14
call fcn.18002d480
nop
mov rcx, r12
call fcn.180012640
mov al, 1
jmp 0x180006500
call fcn.1800ec3ac
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x39]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
xor edx, edx
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
jmp 0x1800064ed
mov rcx, rsi
call fcn.1800ec3ac
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, qword [rbp - 0x31]
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
jmp 0x1800064ed
mov rcx, rsi
call fcn.1800ec3ac
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800064ed
xorps xmm0, xmm0
movups xmmword [rbp - 0x71], xmm0
mov qword [rbp - 0x61], rdi
mov qword [rbp - 0x59], rdi
mov r8d, socket
lea rdx, str.Invalid_Handle_Value
lea rcx, [rbp - 0x71]
call fcn.180016750
nop
mov byte [rbp - 0x79], 0
mov dword [rbp - 0x75], edi
lea rax, [rbp - 0x79]
mov qword [rsp + 0x28], rax
lea rax, [0x18014aff8]
mov qword [rsp + 0x20], rax
lea r9, [0x18014afe8]
lea r8, [rbp - 0x71]
lea rdx, [rbp - 0x75]
call fcn.1800288e0
nop
lea rcx, [rbp - 0x71]
call fcn.18002d710
nop
mov rcx, r14
call fcn.18002d480
nop
mov rcx, r12
call fcn.180012640
xor al, al
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1800ec360
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret