Function at 0x1800256b0
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push rbp
sub rsp, 0xd0
lea rbp, [rsp + 0x80]
mov dword [rbp - 0x64], r9d
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], rdx
mov qword [rbp - 0x50], rcx
mov rax, qword [rbp + 0x88]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp - 0x40], rax
mov rax, qword [0x1800760a8]
xor rax, rbp
mov qword [rbp + 0x48], rax
mov dword [rbp - 0x34], 0xa1a0a406
mov eax, dword [rbp - 0x34]
mov dword [rbp - 0x68], eax
sub eax, 0x863a973d
je 0x1800259c1
jmp 0x180025711
mov eax, dword [rbp - 0x68]
sub eax, 0x9eda3638
je 0x180025be9
jmp 0x180025724
mov eax, dword [rbp - 0x68]
sub eax, 0xa17c08fa
je 0x180025bca
jmp 0x180025737
mov eax, dword [rbp - 0x68]
sub eax, 0xa1a0a406
je 0x180025892
jmp 0x18002574a
mov eax, dword [rbp - 0x68]
sub eax, 0xa8af920e
je 0x1800259e0
jmp 0x18002575d
mov eax, dword [rbp - 0x68]
sub eax, 0xacabf01c
je 0x180025b91
jmp 0x180025770
mov eax, dword [rbp - 0x68]
sub eax, 0xb23ef1f2
je 0x180025bfb
jmp 0x180025783
mov eax, dword [rbp - 0x68]
sub eax, 0xb9a906d3
je 0x180025938
jmp 0x180025796
mov eax, dword [rbp - 0x68]
sub eax, 0xc3aae06c
je 0x180025b4a
jmp 0x1800257a9
mov eax, dword [rbp - 0x68]
sub eax, 0xccd3c511
je 0x180025bae
jmp 0x1800257bc
mov eax, dword [rbp - 0x68]
sub eax, 0xdd1809e2
je 0x180025b1b
jmp 0x1800257cf
mov eax, dword [rbp - 0x68]
sub eax, 0xe2116ca7
je 0x180025a7f
jmp 0x1800257e2
mov eax, dword [rbp - 0x68]
sub eax, 0xf12b74ea
je 0x180025acb
jmp 0x1800257f5
mov eax, dword [rbp - 0x68]
sub eax, 0xf94fba45
je 0x1800259a6
jmp 0x180025808
mov eax, dword [rbp - 0x68]
sub eax, 0xffd3b878
je 0x180025a92
jmp 0x18002581b
mov eax, dword [rbp - 0x68]
sub eax, 0x24c36e22
je 0x1800259d4
jmp 0x18002582e
mov eax, dword [rbp - 0x68]
sub eax, 0x267fa252
je 0x180025a01
jmp 0x180025841
mov eax, dword [rbp - 0x68]
sub eax, 0x39f67af2
je 0x180025a5d
jmp 0x180025854
mov eax, dword [rbp - 0x68]
sub eax, 0x45c6da1f
je 0x180025bdd
jmp 0x180025867
mov eax, dword [rbp - 0x68]
sub eax, 0x4f4a6909
je 0x180025b0f
jmp 0x18002587a
mov eax, dword [rbp - 0x68]
sub eax, 0x50c1a799
je 0x180025ae6
jmp 0x18002588d
jmp 0x180025c1a
mov rcx, qword [rbp - 0x48]
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp - 0x18], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp - 0x10], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp - 8], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp + 8], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdx, rsp
mov qword [rbp + 0x10], rdx
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x34], 0xb9a906d3
jmp 0x180025c1a
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x60]
mov r9d, dword [rbp - 0x64]
mov rax, qword [rbp - 0x18]
mov dword [rax], r9d
mov rax, qword [rbp - 0x10]
mov qword [rax], r8
mov rax, qword [rbp - 8]
mov qword [rax], rdx
mov rax, qword [rbp]
mov qword [rax], rcx
mov rax, qword [rbp]
mov rax, qword [rax]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 8]
mov dword [rax], 0
mov rcx, qword [rbp + 0x20]
add rcx, 8
sub rsp, 0x20
call fcn.1800220d0
add rsp, 0x20
cmp rax, 0
sete al
and al, 1
mov byte [rbp + 0x2f], al
mov dword [rbp - 0x34], 0xf94fba45
jmp 0x180025c1a
mov dl, byte [rbp + 0x2f]
mov eax, 0xa8af920e
mov ecx, 0x863a973d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180025c1a
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x34], 0x24c36e22
jmp 0x180025c1a
mov dword [rbp - 0x34], 0x9eda3638
jmp 0x180025c1a
mov rax, qword [rbp + 0x20]
add rax, 0x18
mov qword [rbp + 0x30], rax
mov rax, qword [rbp - 0x18]
mov eax, dword [rax]
mov dword [rbp + 0x38], eax
mov dword [rbp - 0x34], 0x267fa252
jmp 0x180025c1a
mov rcx, qword [rbp + 0x20]
add rcx, 8
sub rsp, 0x20
call fcn.1800220d0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x30]
mov edx, dword [rbp + 0x38]
xor r8d, r8d
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax], ecx
mov rdx, qword [rbp + 0x10]
mov eax, 0xffd3b878
mov ecx, 0x39f67af2
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180025c1a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 8]
mov dword [rax], ecx
mov dword [rbp - 0x34], 0xe2116ca7
jmp 0x180025c1a
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x34], 0x9eda3638
jmp 0x180025c1a
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov r8d, eax
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + 0x18]
xor r9d, r9d
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
add rsp, 0x20
mov dword [rbp + 0x3c], eax
mov dword [rbp - 0x34], 0xf12b74ea
jmp 0x180025c1a
mov edx, dword [rbp + 0x3c]
mov eax, 0xdd1809e2
mov ecx, 0x50c1a799
cmp edx, 0
cmove eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180025c1a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 8]
mov dword [rax], ecx
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x34], 0x4f4a6909
jmp 0x180025c1a
mov dword [rbp - 0x34], 0x9eda3638
jmp 0x180025c1a
mov rax, qword [rbp - 0x28]
mov ecx, eax
mov rax, qword [rbp + 0x18]
mov dword [rax], ecx
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
xor edx, edx
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov dword [rbp - 0x34], 0xc3aae06c
jmp 0x180025c1a
mov r8, qword [rbp - 0x30]
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + 0x18]
mov r9, qword [rbp + 0x18]
mov edx, 2
xor eax, eax
sub rsp, 0x30
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
add rsp, 0x30
mov edx, eax
mov eax, 0xa17c08fa
mov ecx, 0xacabf01c
cmp edx, 0
cmove eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180025c1a
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x40], eax
mov dword [rbp - 0x34], 0xccd3c511
jmp 0x180025c1a
mov rax, qword [rbp + 8]
mov ecx, dword [rbp + 0x40]
mov dword [rax], ecx
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x34], 0x9eda3638
jmp 0x180025c1a
mov dword [rbp - 0x1c], 0
mov dword [rbp - 0x34], 0x45c6da1f
jmp 0x180025c1a
mov dword [rbp - 0x34], 0x9eda3638
jmp 0x180025c1a
mov eax, dword [rbp - 0x1c]
mov dword [rbp + 0x44], eax
mov dword [rbp - 0x34], 0xb23ef1f2
jmp 0x180025c1a
mov eax, dword [rbp + 0x44]
mov dword [rbp - 0x74], eax
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
sub rsp, 0x20
call fcn.18006c560
mov eax, dword [rbp - 0x74]
lea rsp, [rbp + 0x50]
pop rbp
ret
jmp 0x1800256fb