Function at 0x140115960
Capabilities:
Hash data via bcrypt

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
sub rsp, 0xa0
mov r13d, edx
cmp edx, 0x14
jne 0x140115995
mov rdi, qword [0x1401d6930]
lea rax, str.SHA1
jmp 0x1401159d9
cmp r13d, 0x20
jne 0x1401159ab
mov rdi, qword [0x1401d6938]
lea rax, str.SHA256
jmp 0x1401159d9
cmp r13d, 0x30
jne 0x1401159c1
mov rdi, qword [0x1401d6940]
lea rax, str.SHA384
jmp 0x1401159d9
cmp r13d, 0x40
jne 0x140115caa
mov rdi, qword [0x1401d6948]
lea rax, str.SHA512
mov r12d, dword [rsp + 0xf8]
mov ecx, r12d
mov qword [rsp + 0x70], rax
mov esi, r12d
mov qword [rsp + 0x68], r12
call fcn.14003f410
mov qword [rsp + 0x50], rax
mov rbx, rax
test rax, rax
je 0x140115caa
mov qword [rsp + 0x90], r14
mov rcx, r13
mov qword [rsp + 0x88], r15
call fcn.14003f410
mov r14, rax
mov rcx, rbx
test rax, rax
jne 0x140115a38
call fcn.14003ef6c
lea eax, [r14 - 1]
jmp 0x140115b80
mov rdx, qword [rsp + 0xf0]
mov r8, r12
mov qword [rsp + 0x98], rbp
call fcn.1400173a0
xor ebp, ebp
lea rax, [rsp + 0x44]
mov dword [rsp + 0x28], ebp
lea r8, [rsp + 0x40]
lea rdx, str.HashDigestLength
mov qword [rsp + 0x20], rax
mov rcx, rdi
lea r9d, [rbp + 4]
call sub.bcrypt.dll_BCryptGetProperty
test eax, eax
js 0x140115b1e
cmp dword [rsp + 0x40], r13d
jne 0x140115b1e
lea rax, [rsp + 0x44]
mov dword [rsp + 0x28], ebp
lea r9d, [rbp + 4]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0xd8]
mov rcx, rdi
lea rdx, str.ObjectLength
call sub.bcrypt.dll_BCryptGetProperty
test eax, eax
js 0x140115b1e
mov ecx, dword [rsp + 0xd8]
call fcn.14003f410
mov qword [rsp + 0x58], rax
mov rbx, rax
test rax, rax
je 0x140115b19
mov r9d, dword [rsp + 0xd8]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x30], ebp
mov r8, rax
mov dword [rsp + 0x28], ebp
mov rcx, rdi
mov qword [rsp + 0x20], rbp
call sub.bcrypt.dll_BCryptCreateHash
test eax, eax
jns 0x140115b9f
mov ecx, dword [rsp + 0xd8]
test rcx, rcx
je 0x140115b11
mov rdi, rbx
xor eax, eax
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003ef6c
mov rbx, qword [rsp + 0x50]
mov r12d, 0xffffffff
test rsi, rsi
je 0x140115b33
mov rdi, rbx
xor eax, eax
mov rcx, rsi
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003ef6c
test r12d, r12d
jne 0x140115b5c
mov edi, dword [rsp + 0xe8]
mov ecx, edi
mov esi, edi
call fcn.14003f410
mov rbx, rax
test rax, rax
jne 0x140115c22
test r13d, r13d
je 0x140115b6b
mov rcx, r13
xor eax, eax
mov rdi, r14
rep stosb byte [rdi], al
mov rcx, r14
call fcn.14003ef6c
mov eax, 0xffffffff
mov rbp, qword [rsp + 0x98]
mov r14, qword [rsp + 0x90]
mov r15, qword [rsp + 0x88]
add rsp, 0xa0
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov rbx, qword [rsp + 0x60]
xor r9d, r9d
mov rdx, qword [rsp + 0x50]
mov rcx, rbx
mov esi, dword [rsp + 0xd8]
mov r8d, r12d
mov edi, dword [rsp + 0x40]
call sub.bcrypt.dll_BCryptHashData
test eax, eax
mov r12d, ebp
mov r8d, edi
mov rdx, r14
setns r12b
mov rcx, rbx
xor r9d, r9d
dec r12d
call sub.bcrypt.dll_BCryptFinishHash
mov rcx, rbx
mov dword [rsp + 0x48], eax
call sub.bcrypt.dll_BCryptDestroyHash
mov rdx, qword [rsp + 0x58]
mov ecx, esi
test esi, esi
je 0x140115bfd
mov rdi, rdx
xor eax, eax
rep stosb byte [rdi], al
mov rcx, rdx
call fcn.14003ef6c
mov rbx, qword [rsp + 0x50]
mov eax, ebp
cmp dword [rsp + 0x48], eax
mov rsi, qword [rsp + 0x68]
setge al
dec eax
or r12d, eax
jmp 0x140115b24
mov rdx, qword [rsp + 0xe0]
mov r8, rsi
mov rcx, rbx
call fcn.1400173a0
mov eax, dword [rsp + 0x100]
lea rdx, [rsp + 0x70]
mov rcx, qword [rsp + 0xd0]
test al, 2
mov dword [rsp + 0x30], eax
mov r9d, r13d
cmove rdx, rbp
mov dword [rsp + 0x28], edi
mov r8, r14
mov qword [rsp + 0x20], rbx
mov rcx, qword [rcx]
call sub.bcrypt.dll_BCryptVerifySignature
mov r12d, eax
test r13d, r13d
je 0x140115c7c
mov rdi, r14
xor eax, eax
mov rcx, r13
rep stosb byte [rdi], al
mov rcx, r14
call fcn.14003ef6c
test rsi, rsi
je 0x140115c93
mov rdi, rbx
xor eax, eax
mov rcx, rsi
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.14003ef6c
test r12d, r12d
setns bpl
lea eax, [rbp - 1]
jmp 0x140115b78
mov eax, 0xffffffff
add rsp, 0xa0
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret