Function at 0x40756d
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x105c
call fcn.00425a40
mov eax, dword [0x432008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, ecx
push edi
mov dword [ebp - 0x1054], eax
lea edi, [ebp - 0x1028]
mov eax, dword [ebp + 0x14]
push 8
pop ecx
mov dword [ebp - 0x105c], eax
xor eax, eax
mov dword [ebp - 0x1050], edx
mov dword [ebp - 0x1058], esi
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x1048]
push 8
pop ecx
rep stosd dword es:[edi], eax
test esi, esi
je 0x407857
mov eax, dword [ebp - 0x105c]
test eax, eax
je 0x407857
and dword [eax], 0
mov esi, dword [ebp + 0x10]
test esi, esi
jne 0x4075ec
push str.ERROR:_There_must_be_at_least_one_signature._n
jmp 0x40785c
xor ecx, ecx
mov dword [ebp - 0x104c], ecx
test esi, esi
je 0x407643
lea edi, [ebp - 0x1028]
test edx, edx
je 0x40762e
test edi, edi
je 0x40762e
push edi
xor eax, eax
push eax
push eax
push 0x800d
push edx
mov dword [edi], eax
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
mov ecx, dword [ebp - 0x104c]
neg eax
mov edx, dword [ebp - 0x1050]
sbb eax, eax
neg eax
dec eax
jmp 0x407631
or eax, 0xffffffff
test eax, eax
jne 0x407660
inc ecx
add edi, 4
mov dword [ebp - 0x104c], ecx
cmp ecx, esi
jb 0x4075fe
push 0
push 0
push 0
push ebx
call fcn.00414a5d
add esp, 0x10
test eax, eax
je 0x40766a
push str.ERROR:_Could_not_seek_to_start_of_the_file_n
jmp 0x40785c
push str.ERROR:_Could_not_initialize_signature_handle._n
jmp 0x40785c
push str.signature_block
push esi
lea eax, [ebp - 0x1028]
mov ecx, ebx
push eax
push 0x14
lea edx, [ebp - 0x1008]
call fcn.004070f6
add esp, 0x10
test eax, eax
jne 0x40786c
and dword [ebp - 0x104c], eax
test esi, esi
je 0x4077c3
lea edi, [ebp - 0x1048]
push str.signature_algorithm_ID
push esi
lea eax, [ebp - 0x1028]
mov ecx, ebx
push eax
push 4
lea edx, [ebp - 0x1008]
call fcn.004070f6
add esp, 0x10
test eax, eax
jne 0x40786c
push str.signature_length
push esi
lea eax, [ebp - 0x1028]
mov edx, edi
push eax
push 4
mov ecx, ebx
call fcn.004070f6
add esp, 0x10
test eax, eax
jne 0x40786c
push dword [edi]
call dword [sym.imp.WSOCK32.dll_ntohl]
mov dword [edi], eax
cmp eax, 0x800
ja 0x407739
push 1
push 0
push eax
push ebx
call fcn.00414a5d
add esp, 0x10
test eax, eax
jne 0x40772f
mov eax, dword [ebp - 0x104c]
add edi, 4
inc eax
mov dword [ebp - 0x104c], eax
cmp eax, esi
jb 0x4076a5
jmp 0x4077c3
push str.ERROR:_Could_not_seek_past_signature._n
jmp 0x40785c
push str.ERROR:_Embedded_signature_length_is_too_large._n
jmp 0x40785c
push ebx
push 0x1000
lea eax, [ebp - 0x1008]
push 1
push eax
call fcn.0040fcf5
push ebx
mov dword [ebp - 0x1050], eax
call fcn.0041523b
add esp, 0x14
test eax, eax
jne 0x407849
xor ecx, ecx
mov dword [ebp - 0x104c], ecx
test esi, esi
je 0x4077c3
lea edi, [ebp - 0x1028]
test edi, edi
je 0x4077aa
push 0
push dword [ebp - 0x1050]
lea eax, [ebp - 0x1008]
push eax
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
mov ecx, dword [ebp - 0x104c]
neg eax
sbb eax, eax
neg eax
dec eax
jmp 0x4077ad
or eax, 0xffffffff
test eax, eax
jne 0x407842
inc ecx
add edi, 4
mov dword [ebp - 0x104c], ecx
cmp ecx, esi
jb 0x407780
push ebx
call fcn.00415210
pop ecx
test eax, eax
je 0x407743
xor edi, edi
test esi, esi
je 0x40783e
mov ebx, dword [ebp - 0x1058]
lea eax, [ebp - 0x1048]
mov edx, dword [ebp - 0x1054]
lea ecx, [ebp - 0x1028]
sub eax, ebx
sub edx, ebx
sub ecx, ebx
mov dword [ebp - 0x1058], eax
mov dword [ebp - 0x1054], edx
mov dword [ebp - 0x1050], ecx
push dword [eax + ebx]
add edx, ebx
add ecx, ebx
push dword [ebx]
call fcn.00406f78
pop ecx
pop ecx
test eax, eax
jne 0x407850
mov eax, dword [ebp - 0x105c]
add ebx, 4
mov ecx, dword [ebp - 0x1050]
mov edx, dword [ebp - 0x1054]
inc dword [eax]
inc edi
mov eax, dword [ebp - 0x1058]
cmp edi, esi
jb 0x407808
xor eax, eax
jmp 0x40786f
push str.ERROR:_Error_updating_verify_context_with_data_block._n
jmp 0x40785c
push str.ERROR:_Error_reading_data_block._n
jmp 0x40785c
push str.ERROR:_Error_verifying_signature._n
jmp 0x40785c
push str.ERROR:_Invalid_parameter_specified._n
push 2
call fcn.00410d6d
pop ecx
push eax
call fcn.004020fa
pop ecx
pop ecx
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040b844
mov esp, ebp
pop ebp
ret