Function at 0x419e3e
Capabilities:
Create new key via cryptacquirecontext
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
and dword [ebp - 0xc], 0
and dword [ebp - 8], 0
and dword [ebp - 0xc], 0
push 0xf0000000
push 1
push 0
push 0
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x419e6e
jmp 0x41a038
cmp dword [ebp - 0xc], 0
je 0x41a038
and dword [ebp - 0x28], 0
jmp 0x419e85
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov ecx, 0x434d80
call fcn.004011f7
cmp dword [ebp - 0x28], eax
jge 0x419fd0
push dword [ebp - 0x28]
mov ecx, 0x434d80
call fcn.00401ccc
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x419fcb
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0x8004
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x419fcb
push 0
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
push eax
push dword [ebp - 0x40]
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x419fcb
mov dword [ebp - 0x2c], 0x14
push 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
push 2
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x419fc2
mov edx, 0x84
mov ecx, dword [ebp + 8]
call fcn.00417318
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x40]
mov dword [eax + 0x80], ecx
mov eax, dword [ebp - 4]
and word [eax], 0
mov byte [ebp - 0x21], 0
and dword [ebp - 0x44], 0
jmp 0x419f4e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x14
jge 0x419f91
mov eax, dword [ebp - 0x44]
mov al, byte [ebp + eax - 0x20]
mov byte [ebp - 0x45], al
movzx eax, byte [ebp - 0x45]
movzx ecx, byte [ebp - 0x21]
add ecx, eax
mov byte [ebp - 0x21], cl
movzx eax, byte [ebp - 0x45]
push eax
push str._2.2X
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x419f47
movzx eax, byte [ebp - 0x21]
push eax
push str._2.2X
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edx, dword [ebp - 4]
mov ecx, 0x434c40
call fcn.00401cb4
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
jmp 0x419e7e
push 0
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
push dword [ebp + 8]
push 0x418cd6
push 1
push 1
push str.SOFTWAREMicrosoftInternet_ExplorerIntelliFormsStorage2
mov edx, 0x80000001
mov ecx, dword [ebp + 8]
call fcn.0040feb4
and dword [ebp - 0x28], 0
jmp 0x41a006
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov ecx, 0x434c40
call fcn.004011f7
cmp dword [ebp - 0x28], eax
jge 0x41a02e
push dword [ebp - 0x28]
mov ecx, 0x434c40
call fcn.00401ccc
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call fcn.00417232
jmp 0x419fff
mov ecx, 0x434c40
call fcn.00401ca3
leave
ret