Function at 0x10009950
Capabilities:
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x508
mov eax, dword [0x10077154]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov eax, dword [str.0123456789abcdef]
mov dword [ebp - 0x43c], eax
mov ecx, dword [0x1005f7d8]
mov dword [ebp - 0x438], ecx
mov edx, dword [0x1005f7dc]
mov dword [ebp - 0x434], edx
mov eax, dword [0x1005f7e0]
mov dword [ebp - 0x430], eax
mov cl, byte [0x1005f7e4]
mov byte [ebp - 0x42c], cl
push 0
push 0x8000000
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0xffffffff
jne 0x100099e5
jmp 0x10009bcf
push 0xf0000000
push 1
push 0
push 0
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x10009a03
jmp 0x10009bcf
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push 0x8003
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x10009a3c
mov eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
jmp 0x10009bcf
push 0
lea eax, [ebp - 0xc]
push eax
push 0x400
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x10009ab1
cmp dword [ebp - 0xc], 0
jne 0x10009a6c
jmp 0x10009ab1
push 0
mov eax, dword [ebp - 0xc]
push eax
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x10009aaf
push 0
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10009bcf
jmp 0x10009a3c
cmp dword [ebp - 8], 0
jne 0x10009adf
push 0
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10009bcf
mov dword [ebp - 0x10], 0x10
push 0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x428]
push ecx
push 2
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x10009bac
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x448], 0
jmp 0x10009b2c
mov eax, dword [ebp - 0x448]
add eax, 1
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x10]
jae 0x10009b9d
mov eax, dword [ebp - 0x448]
movzx ecx, byte [ebp + eax - 0x428]
sar ecx, 4
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0x444]
mov al, byte [ebp + ecx - 0x43c]
mov byte [edx], al
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
mov eax, dword [ebp - 0x448]
movzx ecx, byte [ebp + eax - 0x428]
and ecx, 0xf
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 0x444]
mov al, byte [ebp + ecx - 0x43c]
mov byte [edx], al
mov ecx, dword [ebp - 0x444]
add ecx, 1
mov dword [ebp - 0x444], ecx
jmp 0x10009b1d
mov eax, 1
shl eax, 5
mov ecx, dword [ebp + 0xc]
mov byte [ecx + eax], 0
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
push 0
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10027fbe
mov esp, ebp
pop ebp
ret