Function at 0x5209eb
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using rc4 via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x520a33
mov eax, 0x6187fe
push eax
push 1
mov ebx, 0x194
call fcn.00536830
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x520e22
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.005399d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esp
push 0
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
call dword [sym.imp.advapi32.dll_CryptAcquireContextA]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x520aa9
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x520abc
push ebx
call fcn.0053558f
add esp, 4
cmp dword [ebp - 0x24], 1
mov eax, 0
sete al
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x520b61
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.005399d0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esp
push 8
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
call dword [sym.imp.advapi32.dll_CryptAcquireContextA]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x520b2b
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x520b3e
push ebx
call fcn.0053558f
add esp, 4
cmp dword [ebp - 0x24], 1
mov eax, 0
sete al
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x520b61
mov eax, 0x618809
jmp 0x520e96
cmp dword [ebp + 0x10], 0
mov eax, 0
sete al
test eax, eax
je 0x520b7f
mov eax, str.bbs.125.la
jmp 0x520b9d
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
je 0x520b9d
push eax
mov ebx, eax
call fcn.0049d8e2
inc eax
push eax
call fcn.00535595
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x520bb6
push ebx
call fcn.0053558f
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push 0x8003
push dword [ebp - 8]
call dword [sym.imp.advapi32.dll_CryptCreateHash]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520bf1
push 6
call fcn.0053559b
add esp, 4
push SysStringLen
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x520c06
mov eax, 0x618809
push eax
push 1
mov ebx, 0x198
call fcn.00538e50
add esp, 0x10
mov dword [ebp - 0x1c], eax
push SysStringLen
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x520c31
mov eax, 0x618809
push eax
push 1
mov ebx, 0x130
call fcn.005368d0
add esp, 0x10
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], esp
push 0
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x520c5c
add eax, 8
push eax
push dword [ebp - 0xc]
call dword [sym.imp.advapi32.dll_CryptHashData]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x520c7c
push 6
call fcn.0053559b
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x520c8c
push ebx
call fcn.0053558f
add esp, 4
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0x10]
push eax
push 0
push dword [ebp - 0xc]
push 0x6801
push dword [ebp - 8]
call dword [sym.imp.advapi32.dll_CryptDeriveKey]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520cbf
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 0x1c], esp
push dword [ebp - 0xc]
call dword [sym.imp.advapi32.dll_CryptDestroyHash]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520ce1
push 6
call fcn.0053559b
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x520cf6
mov eax, 0x6187fe
push eax
push 1
mov ebx, 0x194
call fcn.00536830
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push dword [ebp - 0x14]
push 1
mov ebx, 0x1bc
call fcn.00536520
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x520d3f
push ebx
call fcn.0053558f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x520d5f
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.00535595
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x520d70
push ebx
call fcn.0053558f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x520d85
add eax, 8
push eax
push 0
push 1
push 0
push dword [ebp - 0x10]
call dword [sym.imp.advapi32.dll_CryptDecrypt]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520db4
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x10]
call dword [sym.imp.advapi32.dll_CryptDestroyKey]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520dd9
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 0x1c], esp
push dword [ebp - 0xc]
call dword [sym.imp.advapi32.dll_CryptDestroyHash]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520dfb
push 6
call fcn.0053559b
add esp, 4
mov dword [ebp - 0x1c], esp
push 0
push dword [ebp - 8]
call dword [sym.imp.advapi32.dll_CryptReleaseContext]
nop
nop
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x520e22
push 6
call fcn.0053559b
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x520e35
mov eax, 0x6187fe
push eax
push 1
mov ebx, 0x168
call fcn.005386e0
add esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 4], 0
je 0x520e76
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x520e71
push eax
mov ebx, eax
call fcn.0049d8e2
inc eax
push eax
call fcn.00535595
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x520e7b
mov eax, 0x618809
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x520e8e
push ebx
call fcn.0053558f
add esp, 4
mov eax, dword [ebp - 0x20]
jmp 0x520e96
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x520ea7
push ebx
call fcn.0053558f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc