Function at 0x10126b8e
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using rc4 via winapi
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
mov eax, 0x10177f26
call fcn.101590a4
sub esp, 0x70
mov eax, dword [0x101b6f10]
push ebx
push esi
mov esi, ecx
lea ebx, [esi + 8]
push edi
mov ecx, ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x7c], esi
mov dword [esi], 0x1018d8b0
call fcn.10126af3
xor edi, edi
push 0x1017fc1e
mov ecx, ebx
mov dword [ebp - 4], edi
call fcn.10009361
mov ebx, 0x3e8000
push ebx
mov dword [esi + 0x34], edi
mov dword [esi + 0x30], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
call fcn.10157c43
push ebx
mov dword [esi + 0x24], eax
call fcn.10157c43
pop ecx
pop ecx
push 0xf0000000
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
mov dword [esi + 0x28], eax
push edi
lea eax, [esi + 0x2c]
push eax
mov dword [esi + 4], edi
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x10126c9c
call ebx
push eax
mov dword [esi + 0x38], eax
lea eax, [ebp - 0x74]
push str.Error___d_:_CryptAcquireContext___failed.
push eax
call fcn.101583b9
mov eax, 0x80090016
add esp, 0xc
cmp dword [esi + 0x38], eax
jne 0x10126c92
push eax
lea eax, [ebp - 0x74]
push str.Error___d_:_NTE_BAD_KEYSET_failed.
push eax
call fcn.101583b9
add esp, 0xc
push 8
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push edi
lea eax, [esi + 0x2c]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x10126c9c
call ebx
push str.Error__0x_x_:_CryptAcquireContext__2_failed.
lea ecx, [esi + 8]
mov dword [esi + 0x38], eax
call fcn.10009361
push dword [esi + 0x38]
lea eax, [ebp - 0x74]
push str.Error___d_:_CryptAcquireContext__2_failed.
push eax
call fcn.101583b9
add esp, 0xc
jmp 0x10126d51
call ebx
mov dword [esi + 0x38], eax
jmp 0x10126d51
lea eax, [ebp - 0x78]
push eax
push edi
push edi
push 0x8004
push dword [esi + 0x2c]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x10126cb9
call ebx
mov dword [esi + 0x38], eax
mov eax, dword [ebp + 8]
sub eax, edi
je 0x10126d0e
dec eax
je 0x10126d04
dec eax
je 0x10126cfa
dec eax
je 0x10126cf0
dec eax
je 0x10126ce6
dec eax
je 0x10126cdc
dec eax
jne 0x10126d28
push edi
push 0x40
push 0x101b5580
jmp 0x10126d16
push edi
push 0x40
push 0x101b5540
jmp 0x10126d16
push edi
push 0x40
push 0x101b5500
jmp 0x10126d16
push edi
push 0x40
push 0x101b54c0
jmp 0x10126d16
push edi
push 0x40
push 0x101b5480
jmp 0x10126d16
push edi
push 0x40
push 0x101b5440
jmp 0x10126d16
push edi
push 0x40
push str._AJ.
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x10126d28
call ebx
mov dword [esi + 0x38], eax
lea eax, [esi + 0x34]
push eax
push 1
push dword [ebp - 0x78]
push 0x6801
push dword [esi + 0x2c]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
jne 0x10126d48
call ebx
mov dword [esi + 0x38], eax
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.101581be
leave
ret 4