Function at 0x41b0f6
Capabilities:
Create new key via cryptacquirecontext
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push 0x438
mov eax, 0x44bf05
call fcn.00448385
mov eax, dword [ebp + 8]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp + 0xc]
mov esi, ecx
xor ebx, ebx
lea edi, [ebp - 0x424]
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x438], eax
mov byte [ebp - 0x425], bl
call fcn.00408653
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
cmp eax, ebx
jne 0x41b194
cmp dword [esi + 0x408], ebx
jne 0x41b158
mov byte [ebp - 0x425], 1
jmp 0x41b3d5
push str.Empty_Signature
lea eax, [ebp - 0x430]
push eax
call fcn.00401415
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x438]
mov eax, dword [ecx]
lea edx, [ebp - 0x430]
push edx
push 1
call dword [eax + 0x20]
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x430]
call fcn.00401452
jmp 0x41b39f
mov ecx, dword [ebp - 0x438]
push 2
lea esi, [ebp - 0x424]
call fcn.0041ae9f
pop ecx
mov byte [ebp - 0x425], al
cmp al, bl
je 0x41b399
push str.AppBundlerCryptoContainer
lea eax, [ebp - 0x430]
push eax
call fcn.00401415
mov byte [ebp - 4], 2
mov dword [ebp - 0x43c], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x434], ebx
mov byte [ebp - 4], 5
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 4], 7
push dword [ebp - 0x430]
call fcn.0041adf1
push 8
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push dword [ebp - 0x430]
lea eax, [ebp - 0x43c]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x41b21d
call fcn.0040cd57
mov esi, eax
jmp 0x41b21f
xor esi, esi
cmp esi, ebx
jl 0x41b301
lea eax, [ebp - 0x434]
push eax
push ebx
push dword [0x47005c]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x43c]
call dword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
jne 0x41b254
call fcn.0040cd57
mov esi, eax
jmp 0x41b256
xor esi, esi
cmp esi, ebx
jl 0x41b301
lea eax, [ebp - 0x42c]
push eax
push ebx
push dword [0x47005c]
push 0x8003
push dword [ebp - 0x43c]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x41b28a
call fcn.0040cd57
mov esi, eax
jmp 0x41b28c
xor esi, esi
cmp esi, ebx
jl 0x41b301
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ebx
push ecx
push eax
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x41b2b7
call fcn.0040cd57
mov esi, eax
jmp 0x41b2b9
xor esi, esi
cmp esi, ebx
jl 0x41b301
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x408]
mov eax, dword [eax + 0x404]
push ebx
push ebx
push dword [ebp - 0x434]
push ecx
push eax
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
jne 0x41b2f2
call fcn.0040cd57
mov esi, eax
jmp 0x41b2f4
xor esi, esi
cmp esi, ebx
jl 0x41b301
mov byte [ebp - 0x425], 1
jmp 0x41b338
mov edi, dword [ebp - 0x438]
mov eax, dword [edi]
push esi
lea ecx, [ebp - 0x440]
push ecx
mov ecx, edi
mov byte [ebp - 0x425], bl
call dword [eax + 0x2c]
mov byte [ebp - 4], 8
mov edx, dword [edi]
push eax
push esi
mov ecx, edi
call dword [edx + 0x20]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x440]
call fcn.00401452
mov byte [ebp - 4], 5
cmp dword [ebp - 0x42c], ebx
je 0x41b356
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x434], ebx
je 0x41b374
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov dword [ebp - 0x434], ebx
mov byte [ebp - 4], 2
lea esi, [ebp - 0x43c]
call fcn.0041adac
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x430]
call fcn.00401452
cmp byte [ebp - 0x425], bl
jne 0x41b3d5
mov esi, dword [ebp - 0x444]
push 0x10
pop ecx
cmp dword [esi + 0x408], ecx
jne 0x41b3d5
mov esi, dword [esi + 0x404]
mov edi, 0x46d9d8
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41b3c0
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x41b3d5
mov ecx, dword [ebp - 0x438]
mov eax, dword [ecx]
mov byte [ebp - 0x425], 1
call dword [eax]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.00408687
mov al, byte [ebp - 0x425]
call fcn.00448408
ret 8