Function at 0x1400cbef0
Capabilities:
Hash data via bcrypt

Disassembly:
mov qword [rsp + 8], rbx
push rsi
push rdi
push r14
sub rsp, 0xb0
mov rax, qword [0x14022e2a0]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov r14, r9
mov rsi, r8
xor edi, edi
test edx, edx
je 0x1400cbf4c
sub edx, 1
je 0x1400cbf43
sub edx, 1
je 0x1400cbf3a
cmp edx, 1
jne 0x1400cbfb1
lea rdx, [0x1401bfc60]
jmp 0x1400cbf53
lea rdx, str.SHA512
jmp 0x1400cbf53
lea rdx, str.SHA256
jmp 0x1400cbf53
lea rdx, str.SHA1
mov qword [rsp + 0x48], rdi
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
js 0x1400cbfb1
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x44], edi
mov dword [rsp + 0x28], edi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x44]
lea rdx, str.HashDigestLength
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptGetProperty]
test eax, eax
jns 0x1400cbfd7
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
xor al, al
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.14013b390
mov rbx, qword [rsp + 0xd0]
add rsp, 0xb0
pop r14
pop rdi
pop rsi
ret
mov ebx, dword [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x48]
test rax, rax
jne 0x1400cc005
xor edx, edx
jmp 0x1400cbfab
mov qword [rsp + 0x58], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCreateHash]
test eax, eax
jns 0x1400cc052
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400cbfb1
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x14020c6e0]
movdqu xmmword [rsp + 0x78], xmm1
mov byte [rsp + 0x68], dil
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.1400846f0
lea rdx, [rsp + 0x68]
cmp qword [rsp + 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
xor r9d, r9d
mov r8d, dword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptHashData]
test eax, eax
jns 0x1400cc110
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x1400cbfb1
inc rdx
mov rcx, qword [rsp + 0x68]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400cc106
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cc275
call fcn.14013b70c
jmp 0x1400cbfb1
xor r9d, r9d
mov r8d, dword [rsp + 0x44]
mov rdx, rbx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptFinishHash]
test eax, eax
js 0x1400cc0a5
mov esi, dword [rsp + 0x44]
lea edx, [rsi + rsi]
mov r8b, 0x20
lea rcx, [rsp + 0x88]
call fcn.140080a00
test esi, esi
je 0x1400cc1ba
mov r10, rbx
lea r11, [0x1401b6e00]
lea rdx, [rsp + 0x88]
cmp qword [rsp + 0xa0], 0x10
cmovae rdx, qword [rsp + 0x88]
lea r9d, [rdi + rdi]
movzx eax, byte [r10]
shr rax, 4
movzx eax, byte [rax + r11]
mov byte [r9 + rdx], al
lea r8, [rsp + 0x88]
cmp qword [rsp + 0xa0], 0x10
cmovae r8, qword [rsp + 0x88]
movzx edx, byte [r10]
and edx, 0xf
lea ecx, [r9 + 1]
movzx eax, byte [rdx + r11]
mov byte [rcx + r8], al
inc edi
lea r10, [r10 + 1]
cmp edi, esi
jb 0x1400cc153
lea rcx, [rsp + 0x88]
cmp qword [rsp + 0xa0], 0x10
cmovae rcx, qword [rsp + 0x88]
mov rdx, r14
call fcn.140084900
mov dil, 1
lea rcx, [rsp + 0x88]
call fcn.1400668e0
nop
jmp 0x1400cc1f9
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400cc20b
xor edx, edx
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400cc21b
call qword [sym.imp.bcrypt.dll_BCryptDestroyHash]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0x10
jb 0x1400cc26c
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cc267
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cc275
call fcn.14013b70c
movzx eax, dil
jmp 0x1400cbfb3
call fcn.1401408a0
int3