Function at 0x140030744
Capabilities:
Hash data using sha1
Initialize hashing via wincrypt

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x110
mov qword [rbp - 0x48], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x14005b010]
xor rax, rsp
mov qword [rbp + 8], rax
mov r14, r8
mov rsi, rdx
mov qword [rbp - 0x50], rcx
mov qword [rsp + 0x48], rcx
mov qword [rbp - 8], rdx
mov qword [rbp], r8
xor ebx, ebx
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8004
mov rcx, qword [0x14006b6e8]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
lea r15d, [rbx + 7]
mov r13d, 0x80070000
test eax, eax
jne 0x1400307ff
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], rbx
mov word [rbp - 0x70], bx
lea r8d, [rbx + 0xf]
lea rdx, [0x140048d88]
lea rcx, [rbp - 0x78]
call fcn.1400053ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, r13d
test eax, eax
cmovle ecx, eax
lea rdx, [rbp - 0x78]
call fcn.140012d24
lea r12, [rsi + 8]
cmp qword [rsi + 0x20], 8
jb 0x140030810
mov rcx, qword [r12]
jmp 0x140030813
mov rcx, r12
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
mov qword [rbp - 0x40], rax
cmp rax, 0xffffffffffffffff
jne 0x14003087d
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x60], rbx
mov word [rbp - 0x70], bx
lea r8d, [rax + 0xb]
lea rdx, str.CreateFile
lea rcx, [rbp - 0x78]
call fcn.1400053ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, r13d
test eax, eax
cmovle ecx, eax
lea rdx, [rbp - 0x78]
call fcn.140012d24
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x80], r15
mov qword [rsp + 0x78], rbx
mov word [rsp + 0x68], bx
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.140005514
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x60]
call fcn.14002cb0c
mov r15, qword [rbp - 0x70]
test r15, r15
je 0x1400308d5
mov r13, qword [rbp - 0x68]
mov rax, r13
sub rax, r15
sar rax, 3
test rax, rax
jne 0x1400308f4
mov dword [rsp + 0x48], ebx
or dword [rsp + 0x4c], 0xffffffff
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x78]
call fcn.140034e0c
mov r13, qword [rbp - 0x68]
mov r15, qword [rbp - 0x70]
test r15, r15
je 0x140030923
mov rax, r13
sub rax, r15
sar rax, 3
cmp rbx, rax
jae 0x140030923
mov r9, qword [rsp + 0x50]
mov r8d, dword [r15 + rbx*8 + 4]
mov edx, dword [r15 + rbx*8]
mov rcx, rdi
call fcn.14002e1d0
inc rbx
jmp 0x1400308f4
xor r13d, r13d
mov dword [rsp + 0x40], r13d
lea edx, [r13 + 4]
mov dword [rsp + 0x58], edx
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x140030997
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
lea r8d, [r13 + 0x11]
lea rdx, [0x140048da8]
lea rcx, [rsp + 0x60]
call fcn.1400053ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
lea rdx, [rsp + 0x60]
call fcn.140012d24
mov ecx, dword [rsp + 0x40]
lea rdx, [0x140042a1b]
call fcn.14001233c
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140030b25
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x40]
mov r8, rax
mov edx, 2
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x140030a1f
mov qword [rbp - 0x80], 7
mov qword [rsp + 0x78], r13
mov word [rsp + 0x68], r13w
lea r8d, [rax + 0x11]
lea rdx, [0x140048da8]
lea rcx, [rsp + 0x60]
call fcn.1400053ec
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
lea rdx, [rsp + 0x60]
call fcn.140012d24
lea rcx, [rbp - 0x30]
call fcn.140009224
nop
mov r8d, dword [rsp + 0x40]
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140009540
lea rcx, [rbp - 0x30]
call fcn.1400092e0
mov r13, qword [rbp - 0x50]
mov qword [r13 + 0x20], 7
xor ecx, ecx
mov qword [r13 + 0x18], rcx
mov word [r13 + 8], cx
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], cx
jne 0x140030a5e
mov rdx, rax
mov rcx, r13
call fcn.1400053ec
nop
lea rcx, [rbp - 0x30]
call fcn.140009288
nop
mov rcx, rbx
call fcn.1400110f8
nop
xor ebx, ebx
test r15, r15
je 0x140030a97
mov rcx, r15
call fcn.1400110f8
nop
cmp rdi, 0xffffffffffffffff
je 0x140030aa7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140030ab7
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov qword [rsp + 0x50], rbx
cmp qword [rsi + 0x20], 8
jb 0x140030acc
mov rcx, qword [r12]
call fcn.1400110f8
mov edi, 7
mov qword [rsi + 0x20], rdi
mov qword [rsi + 0x18], rbx
mov word [r12], bx
cmp qword [r14 + 0x20], 8
jb 0x140030aee
mov rcx, qword [r14 + 8]
call fcn.1400110f8
mov qword [r14 + 0x20], rdi
mov qword [r14 + 0x18], rbx
mov word [r14 + 8], bx
mov rax, r13
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.140012560
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rsp + 0x60]
call fcn.140011074
lea rdx, [0x140059488]
lea rcx, [rsp + 0x60]
call sub.msvcrt.dll__CxxThrowException
int3