Function at 0x18041df8
Capabilities:
Create new key via cryptacquirecontext
Get file size
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x180af1d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x34], eax
push edi
mov ebx, 0x20000
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x28], esi
call fcn.1800b9b0
push 0xf0000040
xor ebx, ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], ebx
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x18041e81
call fcn.1800d3ff
mov edi, eax
cmp dword [ebp - 0x20], ebx
je 0x18041e5d
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
lea esi, [ebp - 0x6c]
call fcn.1800b9f7
push dword [ebp - 0x6c]
call fcn.180761ba
pop ecx
mov ecx, dword [ebp - 8]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.180761c5
leave
ret 4
lea eax, [ebp - 0x24]
push eax
push ebx
push ebx
push 0x8004
push dword [ebp - 0x20]
mov dword [ebp - 0x24], ebx
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x18041eb3
call fcn.1800d3ff
mov edi, eax
cmp dword [ebp - 0x24], ebx
je 0x18041e4f
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
jmp 0x18041e4f
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov dword [ebp - 0x2c], ebx
sar eax, 2
test eax, eax
jbe 0x18041fbb
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18041ed1
mov esi, eax
mov edi, dword [ebp - 0x2c]
call fcn.1800f41a
mov eax, dword [eax]
xor edi, edi
push edi
push 0x80
push 3
push edi
push 1
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x18042016
mov dword [ebp - 0x54], edi
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
lea eax, [ebp - 0x54]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x18042040
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x50]
adc dword [ebp - 0x38], eax
xor edi, edi
cmp dword [ebp - 0x38], edi
ja 0x18042062
jb 0x18041f3e
cmp dword [ebp - 0x3c], 0x20000000
ja 0x18042062
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x5c]
sub edi, dword [ebp - 0x60]
jne 0x18041f4e
call fcn.1807753a
push 0
lea eax, [ebp - 0x30]
push eax
push edi
push dword [ebp - 0x60]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18042040
cmp dword [ebp - 0x30], 0
jbe 0x18041f93
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
jne 0x18041f7a
call fcn.1807753a
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x60]
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x18042040
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
cmp dword [ebp - 0x30], eax
je 0x18041f41
push esi
call ebx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
inc dword [ebp - 0x2c]
sar ecx, 2
cmp dword [ebp - 0x2c], ecx
jb 0x18041ecf
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x14
pop esi
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c]
push eax
push 2
push dword [ebp - 0x24]
mov dword [ebp - 0x48], esi
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x18041e9c
cmp dword [ebp - 0x48], esi
je 0x1804208b
cmp dword [ebp - 0x24], ebx
je 0x18041ffe
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], ebx
je 0x1804200c
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
mov edi, 0x8000ffff
jmp 0x18041e5d
call fcn.1800d3ff
mov esi, eax
cmp dword [ebp - 0x24], edi
je 0x1804202b
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], edi
je 0x18042039
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
mov edi, esi
jmp 0x18041e5d
call fcn.1800d3ff
push esi
mov edi, eax
call ebx
cmp dword [ebp - 0x24], 0
je 0x18042059
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], 0
jmp 0x18041e52
push esi
call ebx
cmp dword [ebp - 0x24], edi
je 0x18042073
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], edi
je 0x18042081
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
mov edi, 0x80004005
jmp 0x18041e5d
mov eax, dword [ebp - 0x34]
push esi
cmp eax, ebx
je 0x180421b6
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1800588b
push eax
call fcn.18077d40
add esp, 0xc
test eax, eax
jne 0x180420d0
cmp dword [ebp - 0x24], ebx
je 0x180420bb
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], ebx
je 0x180420c9
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
xor edi, edi
jmp 0x18041e5d
mov ebx, esi
lea eax, [ebp - 0x84]
call fcn.1800b9b0
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x84]
call fcn.1800588b
push eax
call fcn.180764c0
mov eax, dword [0x180b41a8]
add esp, 0xc
mov ecx, 0x180b41a8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x84]
call fcn.18041c7e
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx - 0xc]
pop ecx
lea ecx, [ebp - 0x34]
call fcn.1800796e
movzx eax, byte [0x180b5839]
mov esi, dword [ebp - 0x34]
neg eax
sbb eax, eax
and eax, 0x180b5ae0
je 0x18042167
xor edi, edi
inc edi
push edi
push 0xa
mov dword [ebp - 0x44], eax
call fcn.18001cc0
mov dword [ebp - 0x40], eax
push esi
push 0x180a4d98
lea eax, [ebp - 0x44]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], 0xa
call fcn.18001000
pop ecx
pop ecx
lea eax, [esi - 0x10]
call fcn.18003e1e
lea eax, [ebx - 0x10]
call fcn.18003e1e
lea esi, [ebp - 0x84]
call fcn.1800b9f7
push dword [ebp - 0x84]
call fcn.180761ba
cmp dword [ebp - 0x24], 0
pop ecx
je 0x1804219d
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x20], 0
je 0x180421ac
push dword [ebp - 0x20]
call fcn.18041bfa
pop ecx
mov edi, 0x80040204
jmp 0x18041e5d
xor eax, eax
call fcn.18005aee
push esi
lea eax, [ebp - 0x1c]
push eax
xor eax, eax
call fcn.1800588b
push eax
call fcn.180764c0
add esp, 0xc
jmp 0x180420ad