Function at 0x180036e30
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push rbp
sub rsp, 0xf0
lea rbp, [rsp + 0x80]
mov dword [rbp - 0x64], r9d
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], rdx
mov qword [rbp - 0x50], rcx
mov rax, qword [rbp + 0xa8]
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp - 0x40], rax
mov rax, qword [0x1800950a8]
xor rax, rbp
mov qword [rbp + 0x68], rax
mov dword [rbp - 0x34], 0xcb95716d
mov eax, dword [rbp - 0x34]
mov dword [rbp - 0x68], eax
sub eax, 0x91b3f991
je 0x180037308
jmp 0x180036e91
mov eax, dword [rbp - 0x68]
sub eax, 0x9c5bff6d
je 0x1800371f4
jmp 0x180036ea4
mov eax, dword [rbp - 0x68]
sub eax, 0xa0c2e3df
je 0x1800373ec
jmp 0x180036eb7
mov eax, dword [rbp - 0x68]
sub eax, 0xa3d751c8
je 0x1800373c3
jmp 0x180036eca
mov eax, dword [rbp - 0x68]
sub eax, 0xa5d51cb6
je 0x1800371b8
jmp 0x180036edd
mov eax, dword [rbp - 0x68]
sub eax, 0xa7454098
je 0x180037276
jmp 0x180036ef0
mov eax, dword [rbp - 0x68]
sub eax, 0xb5ca03fb
je 0x18003721e
jmp 0x180036f03
mov eax, dword [rbp - 0x68]
sub eax, 0xbe7b9f14
je 0x18003740b
jmp 0x180036f16
mov eax, dword [rbp - 0x68]
sub eax, 0xcb95716d
je 0x180037084
jmp 0x180036f29
mov eax, dword [rbp - 0x68]
sub eax, 0xd3d06334
je 0x180037293
jmp 0x180036f3c
mov eax, dword [rbp - 0x68]
sub eax, 0xd64d0954
je 0x180037429
jmp 0x180036f4f
mov eax, dword [rbp - 0x68]
sub eax, 0xd9c2b993
je 0x18003715e
jmp 0x180036f62
mov eax, dword [rbp - 0x68]
sub eax, 0xf9028dcb
je 0x1800371e8
jmp 0x180036f75
mov eax, dword [rbp - 0x68]
sub eax, 0xfd2bf270
je 0x1800373f8
jmp 0x180036f88
mov eax, dword [rbp - 0x68]
sub eax, 0x64a8190
je 0x180037147
jmp 0x180036f9b
mov eax, dword [rbp - 0x68]
sub eax, 0x158fa3b1
je 0x1800372af
jmp 0x180036fae
mov eax, dword [rbp - 0x68]
sub eax, 0x1f901ee0
je 0x1800372ed
jmp 0x180036fc1
mov eax, dword [rbp - 0x68]
sub eax, 0x1fe6a282
je 0x180037341
jmp 0x180036fd4
mov eax, dword [rbp - 0x68]
sub eax, 0x210762aa
je 0x180037197
jmp 0x180036fe7
mov eax, dword [rbp - 0x68]
sub eax, 0x332c895d
je 0x1800373a8
jmp 0x180036ffa
mov eax, dword [rbp - 0x68]
sub eax, 0x47006b17
je 0x180037325
jmp 0x18003700d
mov eax, dword [rbp - 0x68]
sub eax, 0x491f00d1
je 0x180037417
jmp 0x180037020
mov eax, dword [rbp - 0x68]
sub eax, 0x4d7532b6
je 0x1800371d5
jmp 0x180037033
mov eax, dword [rbp - 0x68]
sub eax, 0x55723662
je 0x1800370bb
jmp 0x180037046
mov eax, dword [rbp - 0x68]
sub eax, 0x59a73766
je 0x18003717f
jmp 0x180037059
mov eax, dword [rbp - 0x68]
sub eax, 0x65481009
je 0x1800370f2
jmp 0x18003706c
mov eax, dword [rbp - 0x68]
sub eax, 0x6967505f
je 0x180037122
jmp 0x18003707f
jmp 0x180037448
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rcx, rsp
mov qword [rbp - 8], rcx
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp], rax
mov dword [rbp - 0x34], 0x55723662
jmp 0x180037448
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
mov qword [rbp + 8], rcx
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x34], 0x65481009
jmp 0x180037448
mov rcx, qword [rbp - 0x48]
mov eax, 0x10
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov rdx, rsp
mov qword [rbp + 0x18], rdx
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x34], 0x6967505f
jmp 0x180037448
mov rcx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x60]
mov edx, dword [rbp - 0x64]
mov dword [rbp - 0x24], edx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 8]
mov qword [rax], rcx
mov dword [rbp - 0x34], 0x64a8190
jmp 0x180037448
mov rcx, qword [rbp - 0x50]
mov rax, qword [rbp]
mov qword [rax], rcx
mov dword [rbp - 0x34], 0xd9c2b993
jmp 0x180037448
mov rax, qword [rbp]
mov rax, qword [rax]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 8]
mov dword [rax], 0
mov dword [rbp - 0x34], 0x59a73766
jmp 0x180037448
mov rax, qword [rbp + 0x20]
add rax, 8
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x34], 0x210762aa
jmp 0x180037448
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
call fcn.180031f30
add rsp, 0x20
mov qword [rbp + 0x30], rax
mov dword [rbp - 0x34], 0xa5d51cb6
jmp 0x180037448
mov rdx, qword [rbp + 0x30]
mov eax, 0x9c5bff6d
mov ecx, 0x4d7532b6
cmp rdx, 0
cmove eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180037448
mov dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x34], 0xf9028dcb
jmp 0x180037448
mov dword [rbp - 0x34], 0x491f00d1
jmp 0x180037448
mov rax, qword [rbp + 0x20]
add rax, 0x18
mov qword [rbp + 0x38], rax
mov eax, dword [rbp - 0x24]
mov dword [rbp + 0x44], eax
mov rax, qword [rbp + 0x20]
add rax, 8
mov qword [rbp + 0x48], rax
mov dword [rbp - 0x34], 0xb5ca03fb
jmp 0x180037448
mov rcx, qword [rbp + 0x48]
sub rsp, 0x20
call fcn.180031f30
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x38]
mov edx, dword [rbp + 0x44]
xor r8d, r8d
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp + 0x10]
mov dword [rax], ecx
mov rdx, qword [rbp + 0x10]
mov eax, 0x158fa3b1
mov ecx, 0xa7454098
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180037448
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x54], eax
mov dword [rbp - 0x34], 0xd3d06334
jmp 0x180037448
mov rax, qword [rbp + 8]
mov ecx, dword [rbp + 0x54]
mov dword [rax], ecx
mov dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x34], 0x491f00d1
jmp 0x180037448
mov rax, qword [rbp - 0x30]
mov r8d, eax
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + 0x18]
xor r9d, r9d
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
add rsp, 0x20
cmp eax, 0
sete al
and al, 1
mov byte [rbp + 0x5b], al
mov dword [rbp - 0x34], 0x1f901ee0
jmp 0x180037448
mov dl, byte [rbp + 0x5b]
mov eax, 0x1fe6a282
mov ecx, 0x91b3f991
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180037448
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x5c], eax
mov dword [rbp - 0x34], 0x47006b17
jmp 0x180037448
mov rax, qword [rbp + 8]
mov ecx, dword [rbp + 0x5c]
mov dword [rax], ecx
mov dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x34], 0x491f00d1
jmp 0x180037448
mov rax, qword [rbp - 0x18]
mov ecx, eax
mov rax, qword [rbp + 0x18]
mov dword [rax], ecx
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
xor edx, edx
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov r8, qword [rbp - 0x20]
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax + 0x18]
mov r9, qword [rbp + 0x18]
mov edx, 2
xor eax, eax
sub rsp, 0x30
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
add rsp, 0x30
cmp eax, 0
sete al
and al, 1
mov byte [rbp + 0x63], al
mov dword [rbp - 0x34], 0x332c895d
jmp 0x180037448
mov dl, byte [rbp + 0x63]
mov eax, 0xfd2bf270
mov ecx, 0xa3d751c8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x34], eax
jmp 0x180037448
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 8]
mov dword [rax], ecx
mov dword [rbp - 0xc], 0xffffffff
mov dword [rbp - 0x34], 0xa0c2e3df
jmp 0x180037448
mov dword [rbp - 0x34], 0x491f00d1
jmp 0x180037448
mov dword [rbp - 0xc], 0
mov dword [rbp - 0x34], 0xbe7b9f14
jmp 0x180037448
mov dword [rbp - 0x34], 0x491f00d1
jmp 0x180037448
mov eax, dword [rbp - 0xc]
mov dword [rbp + 0x64], eax
mov dword [rbp - 0x34], 0xd64d0954
jmp 0x180037448
mov eax, dword [rbp + 0x64]
mov dword [rbp - 0x7c], eax
mov rcx, qword [rbp + 0x68]
xor rcx, rbp
sub rsp, 0x20
call fcn.18008ac40
mov eax, dword [rbp - 0x7c]
lea rsp, [rbp + 0x70]
pop rbp
ret
jmp 0x180036e7b