Function at 0x41d600
Capabilities:
Create new key via cryptacquirecontext
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push 0xffffffffffffffff
push 0x4ba600
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x4e27e0]
xor eax, esp
mov dword [esp + 0x5c], eax
push ebp
push esi
push edi
mov eax, dword [0x4e27e0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
xor ebp, ebp
mov dword [esp + 0x10], ebp
mov dword [esp + 0x78], ebp
mov ecx, 8
mov esi, 0x4d09f4
lea edi, [esp + 0x48]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, 7
xor eax, eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], ax
push 0xf0000000
push 1
push ebp
push ebp
lea ecx, [esp + 0x28]
push ecx
mov byte [esp + 0x8c], 1
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x41d6ed
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x14], ebp
push ebp
mov eax, 0x4c7eec
mov esi, ebx
mov word [ebx + 4], dx
call fcn.004033f0
mov esi, 8
cmp dword [esp + 0x34], esi
jb 0x41d6c4
mov eax, dword [esp + 0x20]
push eax
call fcn.0047cc0e
add esp, 4
xor ecx, ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], cx
cmp dword [esp + 0x98], esi
jb 0x41d8e4
mov edx, dword [esp + 0x84]
push edx
jmp 0x41d8dc
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ebp
push ebp
push 0x8003
push ecx
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
jne 0x41d774
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x18]
push ebp
push edx
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor eax, eax
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x14], ebp
mov word [ebx + 4], ax
push ebp
mov eax, 0x4c7eec
mov esi, ebx
call fcn.004033f0
mov esi, 8
cmp dword [esp + 0x34], esi
jb 0x41d74b
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0047cc0e
add esp, 4
xor edx, edx
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], dx
cmp dword [esp + 0x98], esi
jb 0x41d8e4
mov eax, dword [esp + 0x84]
push eax
jmp 0x41d8dc
mov eax, dword [esp + 0x84]
mov esi, 8
cmp dword [esp + 0x98], esi
jae 0x41d790
lea eax, [esp + 0x84]
mov ecx, dword [esp + 0x94]
push ebp
lea edx, [ecx + ecx]
push edx
push eax
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
push ebp
test eax, eax
jne 0x41d7d4
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov eax, 0x4c7eec
mov ecx, ebx
call fcn.004034a0
jmp 0x41d6b1
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x40]
push ecx
push 2
push edx
mov dword [esp + 0x24], 0x10
call dword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x41d904
cmp dword [esp + 0x10], 0
jbe 0x41d871
movzx eax, byte [esp + ebp + 0x38]
or ecx, 0xffffffff
sub ecx, dword [esp + 0x30]
and eax, 0xf
movzx esi, word [esp + eax*2 + 0x48]
cmp ecx, 1
ja 0x41d820
call fcn.004b6f2a
mov edi, dword [esp + 0x30]
inc edi
lea eax, [esp + 0x1c]
call fcn.00403390
test al, al
je 0x41d865
mov eax, dword [esp + 0x20]
mov ecx, 8
cmp dword [esp + 0x34], ecx
jae 0x41d845
lea eax, [esp + 0x20]
mov edx, dword [esp + 0x30]
mov word [eax + edx*2], si
mov eax, dword [esp + 0x20]
mov dword [esp + 0x30], edi
cmp dword [esp + 0x34], ecx
jae 0x41d85f
lea eax, [esp + 0x20]
xor ecx, ecx
mov word [eax + edi*2], cx
inc ebp
cmp ebp, dword [esp + 0x10]
jb 0x41d802
mov edi, 7
xor ebp, ebp
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov eax, dword [esp + 0x18]
push ebp
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor ecx, ecx
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x14], ebp
push 0xffffffffffffffff
mov word [ebx + 4], cx
push ebp
lea eax, [esp + 0x24]
mov ecx, ebx
call fcn.004030c0
mov esi, 8
cmp dword [esp + 0x34], esi
jb 0x41d8bc
mov edx, dword [esp + 0x20]
push edx
call fcn.0047cc0e
add esp, 4
xor eax, eax
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], ax
cmp dword [esp + 0x98], esi
jb 0x41d8e4
mov ecx, dword [esp + 0x84]
push ecx
call fcn.0047cc0e
add esp, 4
mov eax, ebx
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x5c]
xor ecx, esp
call fcn.0049bee5
add esp, 0x6c
ret
push ebp
mov eax, 0x4c7eec
lea esi, [esp + 0x20]
call fcn.004033f0
jmp 0x41d873