Function at 0x41f0da
Capabilities:
Create new key via cryptacquirecontext
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push 0x438
mov eax, 0x44c325
call fcn.00448315
mov eax, dword [ebp + 8]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp + 0xc]
mov esi, ecx
xor ebx, ebx
lea edi, [ebp - 0x424]
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x438], eax
mov byte [ebp - 0x425], bl
call fcn.0040d8bb
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
cmp eax, ebx
jne 0x41f178
cmp dword [esi + 0x408], ebx
jne 0x41f13c
mov byte [ebp - 0x425], 1
jmp 0x41f3b9
push str.Empty_Signature
lea eax, [ebp - 0x430]
push eax
call fcn.00401421
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x438]
mov eax, dword [ecx]
lea edx, [ebp - 0x430]
push edx
push 1
call dword [eax + 0x20]
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x430]
call fcn.0040145e
jmp 0x41f383
mov ecx, dword [ebp - 0x438]
push 2
lea esi, [ebp - 0x424]
call fcn.0041ee83
pop ecx
mov byte [ebp - 0x425], al
cmp al, bl
je 0x41f37d
push str.AppBundlerCryptoContainer
lea eax, [ebp - 0x430]
push eax
call fcn.00401421
mov byte [ebp - 4], 2
mov dword [ebp - 0x43c], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x434], ebx
mov byte [ebp - 4], 5
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 4], 7
push dword [ebp - 0x430]
call fcn.0041edd5
push 8
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push dword [ebp - 0x430]
lea eax, [ebp - 0x43c]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x41f201
call fcn.00414332
mov esi, eax
jmp 0x41f203
xor esi, esi
cmp esi, ebx
jl 0x41f2e5
lea eax, [ebp - 0x434]
push eax
push ebx
push dword [0x47005c]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x43c]
call dword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
jne 0x41f238
call fcn.00414332
mov esi, eax
jmp 0x41f23a
xor esi, esi
cmp esi, ebx
jl 0x41f2e5
lea eax, [ebp - 0x42c]
push eax
push ebx
push dword [0x47005c]
push 0x8003
push dword [ebp - 0x43c]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x41f26e
call fcn.00414332
mov esi, eax
jmp 0x41f270
xor esi, esi
cmp esi, ebx
jl 0x41f2e5
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ebx
push ecx
push eax
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jne 0x41f29b
call fcn.00414332
mov esi, eax
jmp 0x41f29d
xor esi, esi
cmp esi, ebx
jl 0x41f2e5
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x408]
mov eax, dword [eax + 0x404]
push ebx
push ebx
push dword [ebp - 0x434]
push ecx
push eax
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
jne 0x41f2d6
call fcn.00414332
mov esi, eax
jmp 0x41f2d8
xor esi, esi
cmp esi, ebx
jl 0x41f2e5
mov byte [ebp - 0x425], 1
jmp 0x41f31c
mov edi, dword [ebp - 0x438]
mov eax, dword [edi]
push esi
lea ecx, [ebp - 0x440]
push ecx
mov ecx, edi
mov byte [ebp - 0x425], bl
call dword [eax + 0x2c]
mov byte [ebp - 4], 8
mov edx, dword [edi]
push eax
push esi
mov ecx, edi
call dword [edx + 0x20]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x440]
call fcn.0040145e
mov byte [ebp - 4], 5
cmp dword [ebp - 0x42c], ebx
je 0x41f33a
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 0x42c], ebx
mov byte [ebp - 4], 3
cmp dword [ebp - 0x434], ebx
je 0x41f358
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov dword [ebp - 0x434], ebx
mov byte [ebp - 4], 2
lea esi, [ebp - 0x43c]
call fcn.0041ed90
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x430]
call fcn.0040145e
cmp byte [ebp - 0x425], bl
jne 0x41f3b9
mov esi, dword [ebp - 0x444]
push 0x10
pop ecx
cmp dword [esi + 0x408], ecx
jne 0x41f3b9
mov esi, dword [esi + 0x404]
mov edi, 0x46da40
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41f3a4
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x41f3b9
mov ecx, dword [ebp - 0x438]
mov eax, dword [ecx]
mov byte [ebp - 0x425], 1
call dword [eax]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.0040d8ef
mov al, byte [ebp - 0x425]
call fcn.00448398
ret 8