Function at 0x443e82
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1014
call fcn.0044f0d0
mov eax, dword [0x470008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0x1c]
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1014], eax
xor eax, eax
push 0x1000
push eax
mov esi, eax
mov dword [ebp - 0x1010], eax
mov dword [ebp - 0x1008], eax
mov dword [ebp - 0x100c], eax
lea eax, [ebp - 0x1004]
push eax
call fcn.00430b10
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0xf0000040
push dword [ebp + 0xc]
push esi
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x443f1a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x443f08
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x443f0f
mov esi, 0x80004005
push esi
push 0xd3
jmp 0x443fd1
lea eax, [ebp - 0x1008]
push eax
push 0
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x1010]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x443f8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x443f4f
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x443f56
mov esi, 0x80004005
push esi
push 0xd9
jmp 0x443fd1
push 0
cmp dword [ebp - 0x100c], esi
je 0x444040
push dword [ebp - 0x100c]
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x44401a
push 0
lea eax, [ebp - 0x100c]
push eax
push 0x1000
lea eax, [ebp - 0x1004]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x443f5e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x443fc4
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x443fcb
mov esi, 0x80004005
push esi
push 0xe1
push str.c:_agent_work18_swix_srclibsdutilcryputil.cpp
call fcn.00403953
cmp dword [ebp - 0x1008], 0
je 0x443ff0
push dword [ebp - 0x1008]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x1010], 0
je 0x444007
push 0
push dword [ebp - 0x1010]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042f1b3
leave
ret 0x18
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x444031
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x444038
mov esi, 0x80004005
push esi
push 0xec
jmp 0x443fd1
lea eax, [ebp + 0x18]
push eax
push dword [ebp - 0x1014]
push 2
push dword [ebp - 0x1008]
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x444085
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x444073
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x44407a
mov esi, 0x80004005
push esi
push 0xf3
jmp 0x443fd1
test ebx, ebx
je 0x443fdb
push 1
push ebx
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
jne 0x443fdb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x4440ba
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x4440c1
mov esi, 0x80004005
push esi
push 0xfa
jmp 0x443fd1