Function at 0x180417a1
Capabilities:
Create new key via cryptacquirecontext
Get file size
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x180af1d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x34], eax
push edi
mov ebx, 0x20000
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x28], esi
call fcn.1800ba80
push 0xf0000040
xor ebx, ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], ebx
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x1804182a
call fcn.1800d4b3
mov edi, eax
cmp dword [ebp - 0x20], ebx
je 0x18041806
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
lea esi, [ebp - 0x6c]
call fcn.1800bac7
push dword [ebp - 0x6c]
call fcn.18075e6a
pop ecx
mov ecx, dword [ebp - 8]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.18075e75
leave
ret 4
lea eax, [ebp - 0x24]
push eax
push ebx
push ebx
push 0x8004
push dword [ebp - 0x20]
mov dword [ebp - 0x24], ebx
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x1804185c
call fcn.1800d4b3
mov edi, eax
cmp dword [ebp - 0x24], ebx
je 0x180417f8
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
jmp 0x180417f8
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov dword [ebp - 0x2c], ebx
sar eax, 2
test eax, eax
jbe 0x18041964
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1804187a
mov esi, eax
mov edi, dword [ebp - 0x2c]
call fcn.18009442
mov eax, dword [eax]
xor edi, edi
push edi
push 0x80
push 3
push edi
push 1
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x180419bf
mov dword [ebp - 0x54], edi
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
lea eax, [ebp - 0x54]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x180419e9
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x50]
adc dword [ebp - 0x38], eax
xor edi, edi
cmp dword [ebp - 0x38], edi
ja 0x18041a0b
jb 0x180418e7
cmp dword [ebp - 0x3c], 0x20000000
ja 0x18041a0b
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x5c]
sub edi, dword [ebp - 0x60]
jne 0x180418f7
call fcn.180771ea
push 0
lea eax, [ebp - 0x30]
push eax
push edi
push dword [ebp - 0x60]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x180419e9
cmp dword [ebp - 0x30], 0
jbe 0x1804193c
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
jne 0x18041923
call fcn.180771ea
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x60]
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x180419e9
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
cmp dword [ebp - 0x30], eax
je 0x180418ea
push esi
call ebx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
inc dword [ebp - 0x2c]
sar ecx, 2
cmp dword [ebp - 0x2c], ecx
jb 0x18041878
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x14
pop esi
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c]
push eax
push 2
push dword [ebp - 0x24]
mov dword [ebp - 0x48], esi
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x18041845
cmp dword [ebp - 0x48], esi
je 0x18041a34
cmp dword [ebp - 0x24], ebx
je 0x180419a7
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], ebx
je 0x180419b5
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
mov edi, 0x8000ffff
jmp 0x18041806
call fcn.1800d4b3
mov esi, eax
cmp dword [ebp - 0x24], edi
je 0x180419d4
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], edi
je 0x180419e2
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
mov edi, esi
jmp 0x18041806
call fcn.1800d4b3
push esi
mov edi, eax
call ebx
cmp dword [ebp - 0x24], 0
je 0x18041a02
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], 0
jmp 0x180417fb
push esi
call ebx
cmp dword [ebp - 0x24], edi
je 0x18041a1c
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], edi
je 0x18041a2a
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
mov edi, 0x80004005
jmp 0x18041806
mov eax, dword [ebp - 0x34]
push esi
cmp eax, ebx
je 0x18041b5f
lea ecx, [ebp - 0x1c]
push ecx
call fcn.18005877
push eax
call fcn.180779f0
add esp, 0xc
test eax, eax
jne 0x18041a79
cmp dword [ebp - 0x24], ebx
je 0x18041a64
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], ebx
je 0x18041a72
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
xor edi, edi
jmp 0x18041806
mov ebx, esi
lea eax, [ebp - 0x84]
call fcn.1800ba80
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x84]
call fcn.18005877
push eax
call fcn.18076170
mov eax, dword [0x180b4188]
add esp, 0xc
mov ecx, 0x180b4188
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x84]
call fcn.18041627
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx - 0xc]
pop ecx
lea ecx, [ebp - 0x34]
call fcn.18007907
movzx eax, byte [0x180b5819]
mov esi, dword [ebp - 0x34]
neg eax
sbb eax, eax
and eax, 0x180b5ac0
je 0x18041b10
xor edi, edi
inc edi
push edi
push 0xa
mov dword [ebp - 0x44], eax
call fcn.18001ccc
mov dword [ebp - 0x40], eax
push esi
push 0x180a4bd8
lea eax, [ebp - 0x44]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], 0xa
call fcn.18001000
pop ecx
pop ecx
lea eax, [esi - 0x10]
call fcn.18003e0a
lea eax, [ebx - 0x10]
call fcn.18003e0a
lea esi, [ebp - 0x84]
call fcn.1800bac7
push dword [ebp - 0x84]
call fcn.18075e6a
cmp dword [ebp - 0x24], 0
pop ecx
je 0x18041b46
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], 0
je 0x18041b55
push dword [ebp - 0x20]
call fcn.180415a3
pop ecx
mov edi, 0x80040204
jmp 0x18041806
xor eax, eax
call fcn.18005afa
push esi
lea eax, [ebp - 0x1c]
push eax
xor eax, eax
call fcn.18005877
push eax
call fcn.18076170
add esp, 0xc
jmp 0x18041a56