Function at 0x1000ee9c
Capabilities:
Hash data via wincrypt

Disassembly:
push 0x74
mov eax, 0x1003221e
call fcn.10010891
mov esi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 0xf
push eax
mov dword [ebp - 0x44], eax
push 0x10035154
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
call fcn.1000a806
xor eax, eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x44]
push eax
call fcn.100090d9
mov eax, dword [ebp - 0x2c]
lea edi, [esi + 4]
mov dword [esi], eax
mov ecx, edi
lea eax, [ebp - 0x28]
push eax
call fcn.1000787a
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1000ef34
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
cmp eax, 0x1000
jb 0x1000ef2b
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10008f20
mov eax, dword [ebp - 0x80]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x7c]
push eax
push ecx
call fcn.1001082d
pop ecx
pop ecx
and dword [ebp - 0x18], 0
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x1000ef7e
mov ecx, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], ecx
cmp eax, 0x1000
jb 0x1000ef75
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10008f20
mov eax, dword [ebp - 0x7c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
push eax
push ecx
call fcn.1001082d
pop ecx
pop ecx
cmp dword [esi + 0x1c], 0
je 0x1000f064
cmp dword [esi + 0x20], 0
je 0x1000f064
push 0
push dword [ebp + 0xc]
push ebx
push dword [esi + 0x20]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x1000f05d
xor ebx, ebx
mov dword [ebp - 0x64], 0xf
push str.Updating_hash_failed_
mov byte [ebp - 0x7c], bl
lea ecx, [ebp - 0x78]
push dword [ebp - 0x7c]
mov dword [ebp - 0x78], ebx
push 0x15
mov dword [ebp - 0x68], ebx
mov byte [ebp - 0x78], bl
call fcn.100061ce
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x5c]
lea eax, [ebp - 0x78]
mov dword [ebp - 0x5c], ebx
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.100090d9
mov eax, dword [ebp - 0x60]
mov ecx, edi
mov dword [esi], eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1000787a
mov eax, dword [ebp - 0x48]
cmp eax, 0x10
jb 0x1000f03c
mov ecx, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], ecx
cmp eax, 0x1000
jb 0x1000f033
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10008f20
mov eax, dword [ebp - 0x7c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
push eax
push ecx
call fcn.1001082d
pop ecx
pop ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], bl
cmp eax, 0x10
jb 0x1000f135
mov ecx, dword [ebp - 0x78]
jmp 0x1000f109
mov al, 1
jmp 0x1000f137
xor ebx, ebx
mov dword [ebp - 0x30], 0xf
push str.Cryptographic_provider_not_acquired_
mov byte [ebp - 0x7c], bl
lea ecx, [ebp - 0x44]
push dword [ebp - 0x7c]
mov dword [ebp - 0x44], ebx
push 0x24
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x44], bl
call fcn.100061ce
lea eax, [ebp - 0x44]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.100090d9
mov eax, dword [ebp - 0x2c]
mov ecx, edi
mov dword [esi], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000787a
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1000f0f1
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], ecx
cmp eax, 0x1000
jb 0x1000f0e8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10008f20
mov eax, dword [ebp - 0x7c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
push eax
push ecx
call fcn.1001082d
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
cmp eax, 0x10
jb 0x1000f135
mov ecx, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], eax
cmp eax, 0x1000
jb 0x1000f12c
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10008f20
mov eax, dword [ebp - 0x7c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
push eax
push ecx
call fcn.1001082d
pop ecx
pop ecx
xor al, al
call fcn.1001084f
ret 8