Function at 0x4ea47a
Capabilities:
Encrypt data using aes via winapi
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [ebp + 0x20]
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
push esi
xor esi, esi
mov dword [eax], esi
mov eax, dword [ebp + 0x24]
mov dword [eax], esi
mov eax, dword [ebp + 0x28]
push edi
mov dword [eax], esi
lea eax, [ebp - 4]
push eax
push esi
push esi
push 0x8004
push dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 8], edi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], esi
call ebx
test eax, eax
jne 0x4ea4cb
mov dword [edi + 4], 0x19
jmp 0x4ea606
mov edi, dword [sym.imp.ADVAPI32.dll_CryptHashData]
push esi
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp - 4]
call edi
test eax, eax
je 0x4ea5fc
push esi
push 0x10
push dword [ebp + 0xc]
push dword [ebp - 4]
call edi
test eax, eax
je 0x4ea5fc
lea eax, [ebp - 0xc]
push eax
push esi
push dword [ebp - 4]
push 0x6610
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
je 0x4ea5b0
push esi
lea eax, [ebp - 0x18]
push eax
push 4
push dword [ebp - 0xc]
mov dword [ebp - 0x18], 1
call dword [sym.imp.ADVAPI32.dll_CryptSetKeyParam]
test eax, eax
je 0x4ea544
push esi
push dword [ebp + 0x14]
push 1
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_CryptSetKeyParam]
test eax, eax
jne 0x4ea553
mov eax, dword [ebp - 8]
mov dword [eax + 4], 0x1b
jmp 0x4ea606
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
lea eax, [ebp - 4]
push eax
push esi
push esi
push 0x8004
push dword [ebp + 8]
mov dword [ebp - 4], esi
call ebx
test eax, eax
je 0x4ea5fc
push esi
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp - 4]
call edi
test eax, eax
je 0x4ea5fc
push esi
push 0x10
push dword [ebp + 0x10]
push dword [ebp - 4]
call edi
test eax, eax
je 0x4ea5fc
lea eax, [ebp - 0x10]
push eax
push esi
push dword [ebp - 4]
push 0x6602
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
jne 0x4ea5bc
mov eax, dword [ebp - 8]
mov dword [eax + 4], 0x1a
jmp 0x4ea606
lea eax, [ebp - 0x14]
push eax
push esi
push dword [ebp - 0x10]
push 0x8009
push dword [ebp + 8]
call ebx
test eax, eax
je 0x4ea5fc
push 0x14
lea eax, [ebp - 0x2c]
push esi
push eax
call fcn.0059cb30
add esp, 0xc
push esi
lea eax, [ebp - 0x2c]
push eax
push 5
push dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0x8004
call dword [sym.imp.ADVAPI32.dll_CryptSetHashParam]
test eax, eax
jne 0x4ea649
mov eax, dword [ebp - 8]
mov dword [eax + 4], 0x19
cmp dword [ebp - 0x14], esi
je 0x4ea617
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 0x14], esi
mov edi, dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
cmp dword [ebp - 0x10], esi
je 0x4ea62a
push dword [ebp - 0x10]
call edi
mov dword [ebp - 0x10], esi
cmp dword [ebp - 4], esi
je 0x4ea63b
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 4], esi
cmp dword [ebp - 0xc], esi
je 0x4ea645
push dword [ebp - 0xc]
call edi
xor eax, eax
jmp 0x4ea672
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 0x28]
mov dword [ecx], eax
cmp dword [ebp - 4], esi
je 0x4ea66f
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret 0x24