Function at 0x18000b0b0
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
lea eax, [rcx + 0x39c]
mov r10, rdx
mov dword [rsp + 0x38], eax
mov esi, ecx
cmp ecx, eax
jae 0x18000b485
mov r13d, dword [rsp + 0xb0]
mov r12d, dword [rsp + 0xb0]
mov ebx, dword [rsp + 0xb0]
lea rdx, [0x180000000]
cmp esi, 0x154
ja 0x18000b3fe
je 0x18000b380
mov eax, esi
sub eax, 0x58
je 0x18000b374
sub eax, 0x54
je 0x18000b36c
sub eax, 0x54
je 0x18000b181
sub eax, 3
je 0x18000b162
cmp eax, 0xe
jne 0x18000b446
cmp byte [0x18007e6c8], 0
je 0x18000b480
mov rcx, r9
call qword [0x18007e698]
mov byte [0x18007e6c9], al
jmp 0x18000b446
cmp byte [0x18007e6c9], 0
je 0x18000b446
call qword [0x18007e6c0]
mov byte [0x18007e6c9], 0
jmp 0x18000b446
cmp dword [r8], 0x10
jne 0x18000b446
mov r15d, 2
lea rdi, [0x180061bb8]
mov rbp, r9
mov r14d, 0x46
lea eax, [r14 - 0x40]
cmp eax, 8
ja case.0x18000b1b8.67
mov ecx, dword [rdx + rax*4 + 0xb49c]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp + 8]
lea rax, [rsp + 0x48]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0x800c
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
mov dword [rsp + 0x30], eax
jmp case.0x18000b1b8.67
test r15, r15
je 0x18000b337
movzx eax, byte [rdi]
movzx ebx, byte [rbp]
sub ebx, eax
jmp case.0x18000b1b8.67
mov ecx, dword [rsp + 0x30]
test ecx, ecx
je 0x18000b2cb
mov esi, 0x34
nop word [rax + rax]
mov eax, esi
sub eax, 0x34
je 0x18000b234
cmp eax, 1
jne 0x18000b2c0
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov ecx, dword [rsp + 0x30]
jmp 0x18000b2c0
movzx r8d, word [rdi]
lea rdx, [rdi + 4]
mov rcx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
mov dword [rsp + 0x30], eax
mov ecx, eax
test eax, eax
je 0x18000b2c0
mov ebx, 0x50
nop dword [rax]
mov eax, ebx
sub eax, 0x50
je 0x18000b2ad
sub eax, 1
je 0x18000b27b
cmp eax, 1
jne 0x18000b2b5
movzx eax, word [rsp + 0x34]
add word [rdi], ax
jmp 0x18000b2b5
movzx ecx, word [rdi]
lea rax, [rsp + 0x34]
add rcx, 4
mov qword [rsp + 0x28], rax
add rcx, rdi
xor r9d, r9d
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, qword [rsp + 0x48]
lea edx, [r9 + 2]
call qword [sym.imp.ADVAPI32.dll_CryptSignHashW]
mov ecx, eax
jmp 0x18000b2b5
mov dword [rsp + 0x34], 0x100
inc ebx
cmp ebx, 0x53
jb 0x18000b260
mov dword [rsp + 0x30], ecx
inc esi
cmp esi, 0x36
jb 0x18000b210
mov ebx, ecx
jmp case.0x18000b1b8.67
cmp byte [rbp], 0
je 0x18000b31c
cmp byte [rdi], 0
je 0x18000b31c
test r15, r15
je 0x18000b31c
mov ecx, 0xe0
mov eax, ecx
sub eax, 0xde
je 0x18000b309
sub eax, 1
je 0x18000b301
cmp eax, 1
jne 0x18000b30c
movzx eax, byte [rdi]
cmp byte [rbp], al
jne 0x18000b31c
jmp 0x18000b30c
inc rbp
inc rdi
jmp 0x18000b30c
dec r15
dec ecx
cmp ecx, 0xdd
ja 0x18000b2e4
cmp byte [rbp], 0
jne 0x18000b2d5
mov r14d, 0x46
inc r14d
cmp r14d, 0x4c
jae case.0x18000b1b8.66
lea rdx, [0x180000000]
jmp 0x18000b1a1
mov esi, dword [rsp + 0xb0]
xor ebx, ebx
add qword [rsp + 0xc8], 2
jmp 0x18000b446
test ebx, ebx
jne 0x18000b360
add qword [rsp + 0xc8], 2
nop dword [rax + rax]
mov esi, dword [rsp + 0xb0]
jmp 0x18000b446
xor r13d, r13d
jmp 0x18000b446
mov qword [rsp + 0x50], r9
jmp 0x18000b446
mov edx, 0x102
mov eax, edx
sub eax, 0x100
je 0x18000b3e7
sub eax, 1
je 0x18000b3e2
cmp eax, 1
jne 0x18000b3f2
movsx ecx, byte [r9]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x18000b3b0
mov eax, dword [r8]
lea r12d, [rcx - 0x30]
imul r13d, eax
jmp 0x18000b3f2
cmp dword [r8], 0x10
jne 0x18000b42c
lea eax, [rcx - 0x41]
cmp al, 5
ja 0x18000b3cc
mov eax, 0x10
lea r12d, [rcx - 0x37]
imul r13d, eax
jmp 0x18000b3f2
lea eax, [rcx - 0x61]
cmp al, 5
ja 0x18000b42c
mov eax, 0x10
lea r12d, [rcx - 0x57]
imul r13d, eax
jmp 0x18000b3f2
add r13d, r12d
jmp 0x18000b3f2
inc r9
mov qword [rsp + 0xc8], r9
dec edx
cmp edx, 0xff
ja 0x18000b385
jmp 0x18000b380
mov eax, esi
sub eax, 0x165
je 0x18000b43b
sub eax, 0x43
je 0x18000b42c
sub eax, 0x11
je 0x18000b485
sub eax, 0x43
je 0x18000b41d
cmp eax, 0x54
je 0x18000b485
jmp 0x18000b446
mov rax, r9
sub rax, qword [rsp + 0x50]
mov qword [rsp + 0x40], rax
jmp 0x18000b446
mov esi, 0x1a8
test r10, r10
je 0x18000b446
mov dword [r10], r13d
jmp 0x18000b446
movzx eax, byte [0x18007e6c9]
mov byte [rsp + 0x40], al
add esi, 0x54
mov dword [rsp + 0xb0], esi
cmp esi, dword [rsp + 0x38]
jae 0x18000b485
mov r9, qword [rsp + 0xc8]
mov r8, qword [rsp + 0xc0]
mov r10, qword [rsp + 0xb8]
jmp 0x18000b101
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x40]
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret