Function at 0x4a1490
Capabilities:
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
sub esp, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x24]
xor ebx, ebx
push esi
push edi
mov eax, dword [ebp]
cmp eax, ebx
je 0x4a14ad
cmp dword [eax + 8], 0x565940
je 0x4a14ba
push ebx
push 0x565940
mov ecx, ebp
call fcn.004a0530
mov edi, dword [esp + 0x24]
cmp edi, ebx
je 0x4a16d3
mov esi, dword [esp + 0x28]
cmp esi, ebx
je 0x4a16d3
push 0xf0000000
push 1
push ebx
lea eax, [esp + 0x20]
push ebx
push eax
mov dword [esp + 0x28], ebx
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
je 0x4a16d3
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push ecx
push ebx
push ebx
push 0x8003
push edx
mov dword [esp + 0x24], ebx
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x4a16d3
mov eax, dword [esp + 0x10]
push ebx
push esi
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x4a16d3
mov edx, dword [esp + 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
lea ecx, [esp + 0x2c]
push ebx
push ecx
push ebx
push 2
push edx
mov dword [esp + 0x40], 4
call esi
test eax, eax
je 0x4a16d3
mov eax, dword [esp + 0x2c]
push eax
call fcn.004a6ef7
mov edi, eax
add esp, 4
cmp edi, ebx
mov dword [esp + 0x28], edi
je 0x4a16d3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x2c]
push ebx
push ecx
push edi
push 2
push edx
call esi
test eax, eax
je 0x4a16aa
mov ecx, dword [esp + 0x2c]
xor eax, eax
cmp ecx, ebx
mov dword [esp + 0x24], eax
jbe 0x4a16aa
jmp 0x4a159c
mov edi, dword [esp + 0x28]
xor ecx, ecx
lea edx, [esp + 0x18]
mov cl, byte [eax + edi]
mov word [esp + 0x18], bx
push ecx
push str._02x
push edx
mov dword [esp + 0x26], ebx
call fcn.004a80ab
lea eax, [esp + 0x24]
add esp, 0xc
test eax, eax
je 0x4a1695
lea ecx, [esp + 0x18]
push ecx
call fcn.004a71cd
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x4a1695
cmp dword [ebp], ebx
jne 0x4a163a
lea eax, [esi + 0x1011]
cmp eax, ebx
jne 0x4a15f4
mov eax, 1
lea edi, [eax + eax + 2]
push edi
call fcn.004a6ef7
mov edx, eax
add esp, 4
test edx, edx
je 0x4a161f
mov ecx, edi
xor eax, eax
mov ebx, ecx
mov edi, edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, edx
jmp 0x4a1621
xor eax, eax
lea edx, [esi + 0x1001]
lea ecx, [eax + 0x10]
mov dword [eax + 4], 1
mov dword [eax + 0xc], edx
mov dword [eax + 8], ecx
mov dword [ebp], eax
mov eax, dword [ebp]
mov edx, dword [eax]
mov ecx, dword [eax + 0xc]
lea ebx, [edx + esi]
cmp ebx, ecx
ja 0x4a1652
lea ecx, [esi + esi]
lea esi, [esp + 0x18]
jmp 0x4a166e
lea eax, [ebx + 0x1000]
push 0
push eax
mov ecx, ebp
call fcn.004a0b70
mov eax, dword [ebp]
lea ecx, [esi + esi]
lea esi, [esp + 0x18]
mov edx, dword [eax]
mov eax, dword [eax + 8]
lea edi, [eax + edx*2]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp]
mov ecx, dword [eax + 8]
mov word [ecx + ebx*2], 0
mov edx, dword [ebp]
mov dword [edx], ebx
xor ebx, ebx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
inc eax
cmp eax, ecx
mov dword [esp + 0x24], eax
jb 0x4a1598
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
test eax, eax
je 0x4a16d3
mov ecx, dword [esp + 0x14]
push ebx
push ecx
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
neg eax
pop edi
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x10
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret