Function at 0x5c0500
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push rbp
push rbx
sub rsp, 0xa8
mov rbp, rsp
mov qword [rbp + 0x48], rbp
mov byte [rbp + 0xc0], cl
mov qword [rbp + 0xc8], rdx
mov qword [rbp + 0xd0], r8
mov qword [rbp + 0xd8], r9
mov rcx, qword [rbp + 0xd8]
call fcn.0040ea30
nop
mov byte [rbp + 0x67], 0
nop
lea rcx, [rbp + 0x68]
xor edx, edx
xor r8, r8
mov r9d, 0x18
mov dword [rsp + 0x20], 0xf0000000
call sub.advapi32.dll_CryptAcquireContextA
test eax, eax
je 0x5c08a4
nop
mov rcx, qword [rbp + 0x68]
mov edx, 0x8003
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptCreateHash
test eax, eax
je 0x5c088a
nop
mov dword [rbp + 0x58], 0
cmp qword [rbp + 0xd8], 0
je 0x5c05a8
mov rax, qword [rbp + 0xd8]
mov eax, dword [rax - 4]
mov dword [rbp + 0x58], eax
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0xd8]
mov r8d, dword [rbp + 0x58]
xor r9, r9
call sub.advapi32.dll_CryptHashData
test eax, eax
je 0x5c0880
mov rcx, qword [rbp + 0x68]
mov edx, 0x6610
mov r8, qword [rbp + 0x70]
xor r9, r9
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptDeriveKey
test eax, eax
je 0x5c0880
nop
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x60], eax
mov rcx, qword [rbp + 0x78]
xor edx, edx
or r8d, 0xffffffff
xor r9, r9
mov qword [rsp + 0x20], 0
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0
call sub.advapi32.dll_CryptEncrypt
test eax, eax
je 0x5c0876
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, rax
mov rax, qword [rax]
call qword [rax]
mov dword [rbp + 0x5c], eax
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, rax
mov edx, dword [rbp + 0x60]
mov rbx, qword [rax]
call qword [rbx + 0x10]
mov rcx, qword [rbp + 0x78]
xor edx, edx
or r8d, 0xffffffff
xor r9, r9
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x5c]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x60]
mov dword [rsp + 0x30], eax
call sub.advapi32.dll_CryptEncrypt
test eax, eax
je 0x5c0876
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, rax
mov edx, dword [rbp + 0x5c]
mov rbx, qword [rax]
call qword [rbx + 0x10]
cmp byte [rbp + 0xc0], 0
jne 0x5c0872
lea rcx, [rbp + 0x80]
xor edx, edx
xor r8, r8
mov r9d, 1
mov dword [rsp + 0x20], 0xf0000000
call sub.advapi32.dll_CryptAcquireContextA
test eax, eax
je 0x5c0876
nop
mov rcx, qword [rbp + 0x80]
mov edx, 0x8003
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_CryptCreateHash
test eax, eax
je 0x5c0861
nop
mov rcx, qword [rbp + 0x88]
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rdx, qword [rax + 8]
mov r8d, dword [rbp + 0x5c]
xor r9, r9
call sub.advapi32.dll_CryptHashData
test eax, eax
je 0x5c0854
mov rcx, qword [rbp + 0xd0]
mov rax, qword [rbp + 0xd0]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0xd0]
mov rdx, qword [rdx + 8]
mov r8d, eax
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptImportKey
test eax, eax
je 0x5c0854
nop
mov rcx, qword [rbp + 0x88]
mov edx, 1
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptSignHashA
test eax, eax
je 0x5c0847
mov ecx, dword [rbp + 0x60]
call fcn.00409050
mov qword [rbp + 0x98], rax
nop
mov rcx, qword [rbp + 0x88]
mov edx, 1
xor r8, r8
xor r9, r9
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
call sub.advapi32.dll_CryptSignHashA
test eax, eax
je 0x5c083a
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, rax
xor edx, edx
mov r8w, 2
mov rax, qword [rax]
call qword [rax + 0x48]
mov rax, qword [rbp + 0xc8]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x98]
mov r8d, dword [rbp + 0x60]
call fcn.004fc3f0
mov byte [rbp + 0x67], 1
nop
mov rcx, qword [rbp + 0x98]
call fcn.00409080
nop
mov rcx, qword [rbp + 0x90]
call sub.advapi32.dll_CryptDestroyKey
nop
mov rcx, qword [rbp + 0x88]
call sub.advapi32.dll_CryptDestroyHash
nop
mov rcx, qword [rbp + 0x80]
xor edx, edx
call sub.advapi32.dll_CryptReleaseContext
jmp 0x5c0876
mov byte [rbp + 0x67], 1
nop
mov rcx, qword [rbp + 0x78]
call sub.advapi32.dll_CryptDestroyKey
nop
mov rcx, qword [rbp + 0x70]
call sub.advapi32.dll_CryptDestroyHash
nop
mov rcx, qword [rbp + 0x68]
xor edx, edx
call sub.advapi32.dll_CryptReleaseContext
jmp 0x5c08a4
nop
lea rcx, [rbp + 0xd8]
call fcn.0040e8d0
movzx rax, byte [rbp + 0x67]
lea rsp, [rbp + 0xa8]
pop rbx
pop rbp
ret