Function at 0x1023fd6
Capabilities:
Contain obfuscated stackstrings
Create new key via cryptacquirecontext
Encrypt data using rc4 via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov eax, dword [0x10431dc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x80], ebx
mov byte [ebp - 0x74], bl
mov byte [ebp - 0x73], 0x19
mov byte [ebp - 0x72], 0x4c
mov byte [ebp - 0x71], 0x5e
mov byte [ebp - 0x70], 0xf2
mov byte [ebp - 0x6f], 0xb7
mov byte [ebp - 0x6e], 0x10
mov byte [ebp - 0x6d], 0x79
mov byte [ebp - 0x6c], 0x4d
mov byte [ebp - 0x6b], 0x53
mov byte [ebp - 0x6a], 0x14
mov byte [ebp - 0x69], 0x3b
mov byte [ebp - 0x68], 0xed
mov byte [ebp - 0x67], 0xb1
mov byte [ebp - 0x66], 0x7f
mov byte [ebp - 0x65], 0x58
mov byte [ebp - 0x64], 0x1b
mov byte [ebp - 0x63], 0xea
mov byte [ebp - 0x62], 0x4c
mov byte [ebp - 0x61], 0xc5
mov byte [ebp - 0x60], 0xe
mov byte [ebp - 0x5f], 4
mov byte [ebp - 0x5e], 0x90
mov byte [ebp - 0x5d], 0x56
mov byte [ebp - 0x5c], 0x3d
mov byte [ebp - 0x5b], 0x32
mov byte [ebp - 0x5a], 0xe9
mov byte [ebp - 0x59], 0x67
mov byte [ebp - 0x58], 0xdb
mov byte [ebp - 0x57], 0x60
mov byte [ebp - 0x56], 0x97
mov byte [ebp - 0x55], 0xed
mov byte [ebp - 0x54], 0xb1
mov byte [ebp - 0x53], 0x5a
mov byte [ebp - 0x52], 0x1b
mov byte [ebp - 0x51], 0x15
mov byte [ebp - 0x50], 0xf
mov byte [ebp - 0x4f], 0x84
mov byte [ebp - 0x4e], 0xba
mov byte [ebp - 0x4d], 2
mov byte [ebp - 0x4c], 0xe2
mov byte [ebp - 0x4b], 0xb7
mov byte [ebp - 0x4a], 0x6e
mov byte [ebp - 0x49], 0x64
mov byte [ebp - 0x48], 0x7f
mov byte [ebp - 0x47], 0xf9
mov byte [ebp - 0x46], 0xb7
mov byte [ebp - 0x45], 0xbc
mov byte [ebp - 0x44], 0x6a
mov byte [ebp - 0x43], 7
mov byte [ebp - 0x42], 0x94
mov byte [ebp - 0x41], 0x92
mov byte [ebp - 0x40], 0xc3
mov byte [ebp - 0x3f], 0x32
mov byte [ebp - 0x3e], 0xc8
mov byte [ebp - 0x3d], 0x96
mov byte [ebp - 0x3c], 0x35
mov byte [ebp - 0x3b], 0x59
mov byte [ebp - 0x3a], 7
mov byte [ebp - 0x39], 0x71
mov byte [ebp - 0x38], 0xd8
mov byte [ebp - 0x37], 0x60
mov byte [ebp - 0x36], 0x37
mov byte [ebp - 0x35], 0xbe
mov byte [ebp - 0x34], 0x6d
mov byte [ebp - 0x33], 0x86
mov byte [ebp - 0x32], 0x21
mov byte [ebp - 0x31], 0xf9
mov byte [ebp - 0x30], 0xcb
mov byte [ebp - 0x2f], 0xac
mov byte [ebp - 0x2e], 0xf6
mov byte [ebp - 0x2d], 0x65
push 0xf0000000
push 1
push 0x1008cbc
push ebx
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 0x2c], 0xdd
mov byte [ebp - 0x2b], 0x9e
mov byte [ebp - 0x2a], 0x5d
mov byte [ebp - 0x29], 0xbe
mov byte [ebp - 0x28], 0x6e
mov byte [ebp - 0x27], 0x4b
mov byte [ebp - 0x26], 0x6c
mov byte [ebp - 0x25], 0xb7
mov byte [ebp - 0x24], 0x1a
mov byte [ebp - 0x23], 0x70
mov byte [ebp - 0x22], 0x14
mov byte [ebp - 0x21], 0x84
mov byte [ebp - 0x20], 6
mov byte [ebp - 0x1f], 0xa
mov byte [ebp - 0x1e], 0x44
mov byte [ebp - 0x1d], 0x84
mov byte [ebp - 0x1c], 0x67
mov byte [ebp - 0x1b], 0xc0
mov byte [ebp - 0x1a], 0xed
mov byte [ebp - 0x19], 0x51
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x17], 0xc8
mov byte [ebp - 0x16], 0x9e
mov byte [ebp - 0x15], 0x7f
mov byte [ebp - 0x14], 0x2a
mov byte [ebp - 0x13], 0x48
mov byte [ebp - 0x12], 0x38
mov byte [ebp - 0x11], 0xa6
mov byte [ebp - 0x10], 0x64
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0xe], 0xf5
mov byte [ebp - 0xd], 0xec
mov byte [ebp - 0xc], 0xa9
mov byte [ebp - 0xb], 0x92
mov byte [ebp - 0xa], 0xf6
mov byte [ebp - 9], 0x2a
mov byte [ebp - 8], 0xd7
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x10241f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10241de
and eax, 0xffff
or eax, 0x80070000
push ebx
mov esi, eax
push esi
push 0x122
push 0x1008cb0
call fcn.0101c3d2
cmp esi, ebx
jl 0x1024327
lea eax, [ebp - 0x78]
push eax
push ebx
push ebx
push 0x8003
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x1024238
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1024225
and eax, 0xffff
or eax, 0x80070000
push ebx
mov esi, eax
push esi
push 0x12b
push 0x1008cb0
call fcn.0101c3d2
cmp esi, ebx
jl 0x1024327
push ebx
push 0x6d
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x102427b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1024268
and eax, 0xffff
or eax, 0x80070000
push ebx
mov esi, eax
push esi
push 0x136
push 0x1008cb0
call fcn.0101c3d2
cmp esi, ebx
jl 0x1024327
lea eax, [ebp - 0x80]
push eax
push 0x800001
push dword [ebp - 0x78]
push 0x6801
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
jne 0x10242c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10242b5
and eax, 0xffff
or eax, 0x80070000
push ebx
mov esi, eax
push esi
push 0x141
push 0x1008cb0
call fcn.0101c3d2
cmp esi, ebx
jl 0x1024327
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
push edi
push ebx
push 1
push ebx
push dword [ebp - 0x80]
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
jne 0x1024317
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1024302
and eax, 0xffff
or eax, 0x80070000
push ebx
mov esi, eax
push esi
push 0x14e
push 0x1008cb0
call fcn.0101c3d2
jmp 0x1024327
mov eax, dword [ebp + 0xc]
cmp dword [ebp - 0x84], eax
je 0x1024327
mov esi, 0x80004005
cmp dword [ebp - 0x80], ebx
je 0x1024338
push dword [ebp - 0x80]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x78], ebx
je 0x1024349
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 0x78], ebx
cmp dword [ebp - 0x7c], ebx
je 0x1024358
push ebx
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0100d61a
leave
ret 8