Function at 0x18001b324
Capabilities:
Create new key via cryptacquirecontext
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov r14, rdx
mov rbp, rcx
mov qword [rax - 0x50], rcx
lea rcx, [0x18010e058]
mov rax, qword [0x18010e058]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rcx, [0x18010e058]
mov rax, qword [0x18010e058]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x70], rdi
xor esi, esi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x30], rsi
xor edx, edx
lea r8d, [rsi + 0x10]
mov rcx, rbp
call fcn.180086e90
mov qword [rsp + 0x38], rsi
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1800077dc
cmp qword [rsp + 0x38], rsi
jne 0x18001b3c0
lea rcx, [rsp + 0x38]
call fcn.1800088d0
nop
lea rcx, [rsp + 0x38]
call fcn.180008d04
cmp rax, rsi
jne 0x18001b3d9
mov rbx, rsi
mov qword [rsp + 0x58], rbx
jmp 0x18001b3fa
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x58], rax
cmp rax, rsi
jne 0x18001b3fa
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, eax
add esi, esi
lea r15d, [rsi + 0x10]
mov ecx, r15d
call fcn.1800605e0
mov r13, rax
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, r14
mov rcx, rax
call fcn.180086b10
mov r8d, esi
lea rcx, [r13 + 0x10]
mov rdx, rbx
call fcn.180086b10
mov dword [rsp + 0x20], 0xf0000000
mov esi, 1
mov r9d, esi
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
xor r14d, r14d
cmp eax, r14d
jne 0x18001b484
mov dword [rsp + 0x20], 8
mov r9d, esi
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
cmp eax, r14d
jne 0x18001b484
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
cmp eax, r14d
jne 0x18001b4af
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor r9d, r9d
mov r8d, r15d
mov rdx, r13
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
mov rcx, r13
call fcn.180088170
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x40]
xor r8d, r8d
lea r13d, [r8 + 2]
mov edx, r13d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
mov ecx, dword [rsp + 0x40]
call fcn.180087e60
mov rsi, rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x40]
mov r8, rax
mov edx, r13d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
lea r8d, [r13 + 0xe]
mov rdx, rsi
mov rcx, rbp
call fcn.180086b10
mov rcx, rsi
call fcn.180087f30
lea rdx, [rsp + 0x50]
mov rcx, rbp
call qword [sym.imp.ole32.dll_StringFromCLSID]
mov rsi, qword [rsp + 0x50]
cmp rsi, r14
jne 0x18001b545
mov eax, r14d
jmp 0x18001b54d
mov rcx, rsi
call fcn.180088f10
mov r8d, eax
mov rdx, rsi
lea rcx, [rbp + 0x10]
call fcn.18000f954
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x30]
cmp rcx, r14
je 0x18001b57c
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x18001b593
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov qword [rsp + 0x48], r14
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x38]
cmp rcx, r14
je 0x18001b5b2
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x38], r14
lea rdx, [rdi - 0x18]
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
add ecx, 0xffffffff
cmp ecx, r14d
jg 0x18001b5d1
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
mov rax, rbp
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret