Function at 0x180003ab0
Capabilities:
Get file size
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r9
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x50
xor esi, esi
mov rdi, rdx
mov r14, rcx
mov ebp, esi
mov qword [rax - 0x38], rsi
mov dword [rax - 0x3c], esi
mov r13d, esi
mov dword [rax - 0x48], esi
mov dword [rax - 0x40], esi
mov r12d, esi
mov dword [rax - 0x44], esi
test r9, r9
jne 0x180003af6
mov eax, 0x80004005
jmp 0x180003d7f
mov qword [rsp + 0x88], r15
mov r15, qword [rsp + 0xa0]
test r15, r15
jne 0x180003b15
mov eax, 0x80004005
jmp 0x180003d77
lea rdx, [rsp + 0x3c]
mov rcx, r8
mov qword [rsp + 0x80], rbx
mov qword [r9], rsi
mov dword [r15], esi
call fcn.1800037b0
mov ebx, eax
test eax, eax
js 0x180003d0a
mov edx, dword [rsp + 0x3c]
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x180003b68
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180003d0a
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0xffffffff
jne 0x180003b85
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180003d0a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov r8d, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r12, rax
test rax, rax
je 0x180003d05
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
lea r8d, [rdx + 0x18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbp, rax
test rax, rax
je 0x180003d02
mov rdx, r14
mov rcx, rax
mov dword [rax], esi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
call fcn.180002880
mov ebx, eax
test eax, eax
js 0x180003d0a
mov esi, dword [rbp]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x180003c0e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180003d0a
test esi, esi
je 0x180003c72
xor eax, eax
mov rdi, r12
mov ecx, 0x4000
rep stosb byte [rdi], al
mov edi, 0x4000
lea r9, [rsp + 0x34]
cmp esi, edi
mov rdx, r12
mov rcx, r14
cmovb edi, esi
mov qword [rsp + 0x20], rax
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180003ce1
mov r8d, dword [rsp + 0x34]
cmp edi, r8d
jne 0x180003ce1
mov rcx, qword [rsp + 0x40]
xor r9d, r9d
mov rdx, r12
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x180003ce1
sub esi, dword [rsp + 0x34]
jne 0x180003c12
mov rcx, qword [rsp + 0x40]
xor esi, esi
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x30]
lea edx, [rsi + 4]
mov dword [rsp + 0x38], 4
mov dword [rsp + 0x20], esi
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x180003ce1
cmp dword [rsp + 0x38], 4
jne 0x180003ce1
mov edi, dword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, edi
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r13, rax
test rax, rax
je 0x180003d05
mov rcx, qword [rsp + 0x40]
lea r9, [rsp + 0x30]
lea edx, [rsi + 2]
mov r8, rax
mov dword [rsp + 0x20], esi
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x180003ceb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180003d0a
mov rax, qword [rsp + 0x98]
mov qword [rax], r13
mov eax, dword [rsp + 0x30]
mov r13, rsi
mov dword [r15], eax
jmp 0x180003d0a
mov rbp, rsi
mov ebx, 8
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x180003d1a
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
test r13, r13
je 0x180003d33
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test r12, r12
je 0x180003d4c
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, r12
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbp, rbp
je 0x180003d6d
mov rcx, rbp
call fcn.180002790
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbp
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, ebx
mov rbx, qword [rsp + 0x80]
mov r15, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x90]
add rsp, 0x50
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret