Function at 0x52f9bb
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using rc4 via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push 0x94
mov eax, 0x571df2
call fcn.0054d442
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], ecx
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
lea ecx, [eax + 1]
mov bl, byte [eax]
inc eax
cmp bl, dl
jne 0x52f9e4
sub eax, ecx
mov dword [ebp - 0x64], eax
mov eax, 0x5c4fb4
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x58], edx
call fcn.004066c0
mov eax, 0x5c4fac
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.004066c0
lea eax, [ebp + 0xc]
push eax
lea ebx, [ebp - 0x9c]
lea edi, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.00464872
pop ecx
mov ecx, edi
call fcn.00409c40
mov ecx, ebx
mov byte [ebp - 4], 0
call fcn.00409c40
mov eax, 0x59c7e0
lea ecx, [ebp - 0x80]
call fcn.004066c0
mov eax, 0x5c4fb8
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 3
call fcn.004066c0
lea eax, [ebp + 0xc]
push eax
lea ebx, [ebp - 0x80]
lea edi, [ebp - 0x9c]
mov byte [ebp - 4], 4
call fcn.00464872
pop ecx
mov ecx, edi
call fcn.00409c40
mov ecx, ebx
mov byte [ebp - 4], 0
call fcn.00409c40
mov eax, 0x5c4fc8
lea ecx, [ebp - 0x80]
call fcn.004066c0
mov eax, 0x5c4fc0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 5
call fcn.004066c0
lea eax, [ebp + 0xc]
push eax
lea ebx, [ebp - 0x80]
lea edi, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.00464872
pop ecx
mov ecx, edi
call fcn.00409c40
mov ecx, ebx
call fcn.00409c40
xor esi, esi
push esi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x30], 0xf
call fcn.00408900
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 7
call fcn.004eeb6d
pop ecx
test al, al
jne 0x52fb11
push 3
pop esi
lea ecx, [ebp - 0x48]
call fcn.00408970
lea ecx, [ebp + 0xc]
call fcn.00409c40
mov eax, esi
call fcn.0054d4c5
ret 0x20
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x2c]
call fcn.0052fc31
push 0xf0000000
push 1
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x18]
push esi
mov dword [ebp - 0x58], eax
push esi
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
cmp eax, 1
jne 0x52fbd3
lea eax, [ebp - 0x50]
push eax
push esi
push esi
push 0x8003
push dword [ebp - 0x4c]
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
call ebx
cmp edi, esi
je 0x52fbd3
push 1
push dword [ebp - 0x64]
push dword [ebp - 0x5c]
push dword [ebp - 0x50]
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
mov edi, eax
call ebx
cmp edi, esi
je 0x52fbd3
lea eax, [ebp - 0x54]
push eax
push 4
push dword [ebp - 0x50]
push 0x6801
push dword [ebp - 0x4c]
call dword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
mov edi, eax
call ebx
cmp edi, esi
je 0x52fbd3
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x52fba8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x58]
push ecx
push eax
push 0x40
push 1
push esi
push dword [ebp - 0x54]
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
mov eax, dword [ebp - 0x58]
cmp eax, 1
jb 0x52fbd1
lea edi, [eax - 1]
lea eax, [ebp - 0x2c]
call fcn.004058b0
mov byte [eax], 0
call ebx
cmp dword [ebp - 0x50], esi
je 0x52fbe4
push dword [ebp - 0x50]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov dword [ebp - 0x50], esi
cmp dword [ebp - 0x54], esi
je 0x52fbf5
push dword [ebp - 0x54]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov dword [ebp - 0x54], esi
cmp dword [ebp - 0x4c], esi
je 0x52fc04
push esi
push dword [ebp - 0x4c]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x4c], esi
call fcn.004eef62
pop ecx
lea ecx, [ebp - 0x2c]
test al, al
je 0x52fc24
call fcn.00408970
jmp 0x52faf7
call fcn.00408970
xor esi, esi
inc esi
jmp 0x52faf7