Function at 0x5b6960
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push rbp
push rbx
sub rsp, 0x98
mov rbp, rsp
mov qword [rbp + 0x38], rbp
mov byte [rbp + 0xb0], cl
mov qword [rbp + 0xb8], rdx
mov qword [rbp + 0xc0], r8
mov qword [rbp + 0xc8], r9
mov rcx, qword [rbp + 0xc8]
call fcn.0040ea30
nop
mov byte [rbp + 0x57], 0
cmp byte [rbp + 0xb0], 0
jne 0x5b69c4
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
cmp rax, 0x80
jle 0x5b6d5a
nop
lea rcx, [rbp + 0x58]
xor edx, edx
xor r8, r8
mov r9d, 0x18
mov dword [rsp + 0x20], 0xf0000000
call sub.advapi32.dll_CryptAcquireContextA
test eax, eax
je 0x5b6d59
nop
mov rcx, qword [rbp + 0x58]
mov edx, 0x8003
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptCreateHash
test eax, eax
je 0x5b6d3f
nop
mov dword [rbp + 0x4c], 0
cmp qword [rbp + 0xc8], 0
je 0x5b6a30
mov rax, qword [rbp + 0xc8]
mov eax, dword [rax - 4]
mov dword [rbp + 0x4c], eax
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0xc8]
mov r8d, dword [rbp + 0x4c]
xor r9, r9
call sub.advapi32.dll_CryptHashData
test eax, eax
je 0x5b6d35
mov rcx, qword [rbp + 0x58]
mov edx, 0x6610
mov r8, qword [rbp + 0x60]
xor r9, r9
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptDeriveKey
test eax, eax
je 0x5b6d35
nop
cmp byte [rbp + 0xb0], 0
je 0x5b6aea
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x50], eax
mov rcx, qword [rbp + 0x68]
xor edx, edx
or r8d, 0xffffffff
xor r9, r9
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptDecrypt
test eax, eax
je 0x5b6d2b
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov edx, dword [rbp + 0x50]
mov rbx, qword [rax]
call qword [rbx + 0x10]
mov byte [rbp + 0x57], 1
jmp 0x5b6d2b
lea rcx, [rbp + 0x70]
xor edx, edx
xor r8, r8
mov r9d, 1
mov dword [rsp + 0x20], 0xf0000000
call sub.advapi32.dll_CryptAcquireContextA
test eax, eax
je 0x5b6d2b
nop
mov rcx, qword [rbp + 0xc0]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0xc0]
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0xc0]
mov rdx, qword [rdx + 8]
mov r8d, eax
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x78]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptImportKey
test eax, eax
je 0x5b6d1f
nop
mov ecx, 0x80
call fcn.00409050
mov qword [rbp + 0x80], rax
nop
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
lea rax, [rax - 0x80]
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rdx, qword [rbp + 0x40]
xor r8, r8
mov rax, qword [rax]
call qword [rax + 0x50]
mov rax, qword [rbp + 0xb8]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x80]
mov r8d, 0x80
call fcn.004fb3b0
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [rbp + 0xb8]
mov rcx, qword [rcx]
mov rdx, rcx
lea rax, [rax - 0x80]
mov rbx, qword [rcx]
mov rcx, rdx
mov rdx, rax
call qword [rbx + 0x10]
mov rcx, qword [rbp + 0x70]
mov edx, 0x8003
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptCreateHash
test eax, eax
je 0x5b6d08
nop
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [rbp + 0x88]
mov rdx, qword [rbp + 0xb8]
mov rdx, qword [rdx]
mov rdx, qword [rdx + 8]
mov r8d, eax
xor r9, r9
call sub.advapi32.dll_CryptHashData
test eax, eax
je 0x5b6cfb
mov rcx, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x80]
mov r8d, 0x80
mov r9, qword [rbp + 0x78]
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call sub.advapi32.dll_CryptVerifySignatureW
test eax, eax
je 0x5b6cfb
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x50], eax
mov rcx, qword [rbp + 0x68]
xor edx, edx
or r8d, 0xffffffff
xor r9, r9
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptDecrypt
test eax, eax
je 0x5b6cfb
mov rax, qword [rbp + 0xb8]
mov rax, qword [rax]
mov rcx, rax
mov edx, dword [rbp + 0x50]
mov rbx, qword [rax]
call qword [rbx + 0x10]
mov byte [rbp + 0x57], 1
nop
mov rcx, qword [rbp + 0x88]
call sub.advapi32.dll_CryptDestroyHash
nop
mov rcx, qword [rbp + 0x80]
call fcn.00409080
nop
mov rcx, qword [rbp + 0x78]
call sub.advapi32.dll_CryptDestroyKey
nop
mov rcx, qword [rbp + 0x70]
xor edx, edx
call sub.advapi32.dll_CryptReleaseContext
nop
mov rcx, qword [rbp + 0x68]
call sub.advapi32.dll_CryptDestroyKey
nop
mov rcx, qword [rbp + 0x60]
call sub.advapi32.dll_CryptDestroyHash
nop
mov rcx, qword [rbp + 0x58]
xor edx, edx
call sub.advapi32.dll_CryptReleaseContext
jmp 0x5b6d59
nop
lea rcx, [rbp + 0xc8]
call fcn.0040e8d0
movzx rax, byte [rbp + 0x57]
lea rsp, [rbp + 0x98]
pop rbx
pop rbp
ret