Function at 0x1400b00d0
Capabilities:
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push rbp
push rbx
push rsi
push r14
lea rbp, [rsp - 0x28]
sub rsp, 0x128
mov rax, qword [0x1401a3008]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov rsi, qword [rbp + 0x78]
mov rbx, r9
mov r14, qword [rbp + 0x80]
test rsi, rsi
jne 0x1400b010a
xor al, al
jmp 0x1400b0312
mov qword [rsp + 0x120], r15
xor r15d, r15d
mov dword [rbp - 0x7c], 0x6602
mov dword [rbp - 0x80], 0x208
mov dword [rbp - 0x78], r8d
cmp r8, 0x80
ja 0x1400b0275
lea rcx, [rbp - 0x74]
call sub.VCRUNTIME140.dll_memcpy
lea r9d, [r15 + 1]
mov qword [rsp + 0x40], r15
xor r8d, r8d
mov dword [rsp + 0x20], 0xf0000048
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x1400b0275
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rdx, [rbp - 0x80]
xor r9d, r9d
mov dword [rsp + 0x20], 0x100
mov r8d, 0x8c
mov qword [rsp + 0x48], r15
call qword [sym.imp.ADVAPI32.dll_CryptImportKey]
mov rcx, qword [rsp + 0x40]
test eax, eax
jne 0x1400b01ad
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor al, al
jmp 0x1400b030a
mov r8, qword [rsp + 0x48]
lea rax, [rsp + 0x38]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov edx, 0x8009
mov qword [rsp + 0x38], r15
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x1400b025d
mov rcx, qword [rsp + 0x38]
lea r8, [rsp + 0x50]
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
lea edx, [rax + 5]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x50], 0x8004
call qword [sym.imp.ADVAPI32.dll_CryptSetHashParam]
mov rcx, qword [rsp + 0x38]
test eax, eax
je 0x1400b0257
mov r8d, dword [rbp + 0x70]
xor r9d, r9d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
mov rcx, qword [rsp + 0x38]
test eax, eax
je 0x1400b0257
xor r8d, r8d
mov dword [rsp + 0x30], r15d
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], r15d
lea edx, [r8 + 2]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x1400b027c
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor al, al
jmp 0x1400b030a
mov ecx, dword [rsp + 0x30]
mov qword [rsp + 0x150], rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0x30]
mov r8, rax
mov dword [rsp + 0x20], r15d
mov edx, 2
mov rdi, rax
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x1400b02e2
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov rcx, qword [rsp + 0x40]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor al, al
jmp 0x1400b0302
mov ebx, dword [rsp + 0x30]
mov rdx, rdi
mov r8d, ebx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
mov qword [r14], rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov al, 1
mov rdi, qword [rsp + 0x150]
mov r15, qword [rsp + 0x120]
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.1400ca980
add rsp, 0x128
pop r14
pop rsi
pop rbx
pop rbp
ret