Function at 0x469821
Capabilities:
Encode data using xor
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push ebp
lea ebp, [esp - 0xa8]
sub esp, 0x128
mov eax, dword [0x590cec]
xor eax, ebp
mov dword [ebp + 0xa4], eax
mov eax, dword [ebp + 0xb8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0xc0]
push esi
mov esi, dword [ebp + 0xb0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc8]
push edi
xor edi, edi
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0xd8]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
cmp dword [ebp + 0xd0], edi
jne 0x469885
xor eax, eax
jmp 0x469a3d
push ebx
mov ebx, 0x80
push ebx
lea eax, [ebp - 0x5c]
push edi
push eax
call fcn.004f42d0
push ebx
lea eax, [ebp + 0x24]
push edi
push eax
call fcn.004f42d0
and dword [ebp + 0xb4], 0x7f
push dword [ebp + 0xb4]
lea eax, [ebp - 0x5c]
push esi
push eax
call fcn.004f4490
push dword [ebp + 0xb4]
lea eax, [ebp + 0x24]
push esi
push eax
call fcn.004f4490
add esp, 0x30
xor eax, eax
xor dword [ebp + eax - 0x5c], 0x36363636
xor dword [ebp + eax + 0x24], 0x5c5c5c5c
add eax, 4
cmp eax, ebx
jb 0x4698cd
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x68]
push eax
push edi
push edi
push dword [ebp + 0xd4]
push dword [ebp + 0xd0]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x46998c
mov esi, dword [sym.imp.ADVAPI32.dll_CryptHashData]
push edi
push ebx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x68]
call esi
test eax, eax
je 0x46998c
push edi
push dword [ebp + 0xbc]
push dword [ebp - 0x80]
push dword [ebp - 0x68]
call esi
test eax, eax
je 0x46998c
cmp dword [ebp - 0x64], edi
je 0x46994f
cmp dword [ebp + 0xc4], edi
je 0x46994f
push edi
push dword [ebp + 0xc4]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call esi
test eax, eax
je 0x46998c
cmp dword [ebp - 0x7c], edi
je 0x46996f
cmp dword [ebp + 0xcc], edi
je 0x46996f
push edi
push dword [ebp + 0xcc]
push dword [ebp - 0x7c]
push dword [ebp - 0x68]
call esi
test eax, eax
je 0x46998c
push 4
pop eax
push edi
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x6c]
push ecx
push eax
push dword [ebp - 0x68]
mov dword [ebp - 0x70], eax
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x46999b
mov eax, dword [ebp - 0x60]
mov dword [eax + 4], 0xb
jmp 0x469a2b
push dword [ebp - 0x6c]
call fcn.004b6e34
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, edi
jne 0x4699b7
mov eax, dword [ebp - 0x60]
mov dword [eax + 4], 5
jmp 0x469a2b
push edi
lea ecx, [ebp - 0x6c]
push ecx
push eax
push 2
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
jne 0x4699e0
push dword [ebp - 0x64]
mov eax, dword [ebp - 0x60]
mov dword [eax + 4], 0xb
call fcn.004b6e29
jmp 0x469a2a
push dword [ebp - 0x78]
push edi
push edi
push dword [ebp + 0xd4]
push dword [ebp + 0xd0]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x4699cc
push edi
push ebx
mov ebx, dword [ebp - 0x78]
lea eax, [ebp + 0x24]
push eax
push dword [ebx]
call esi
test eax, eax
je 0x4699cc
push edi
push dword [ebp - 0x6c]
push dword [ebp - 0x64]
push dword [ebx]
call esi
push dword [ebp - 0x64]
test eax, eax
je 0x4699cf
call fcn.004b6e29
mov dword [ebp - 0x74], 1
pop ecx
pop ebx
cmp dword [ebp - 0x68], edi
je 0x469a3a
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp + 0xa4]
pop edi
xor ecx, ebp
pop esi
call fcn.004f41b5
add ebp, 0xa8
leave
ret 0x2c