Function at 0x140002280
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
lea rax, [rbp - 0x10]
mov dword [rsp + 0x20], 0xf0000000
mov r9d, 0x18
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
call rax
test eax, eax
je 0x1400024ac
mov rax, qword [rbp - 0x10]
lea rdx, [rbp - 0x20]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
mov edx, 0x800c
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
call rax
test eax, eax
jne 0x14000230d
mov rax, qword [rbp - 0x10]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
call rax
jmp 0x1400024ad
lea rax, str.a3f4c2d4e76c9b7a29ef03a0f8cb2a1de3fa4b5c6e2d78a45ef3b6c9d2a0f3e1
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov ecx, eax
mov rax, qword [rbp - 0x20]
mov rdx, qword [rbp - 8]
mov r9d, 0
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptHashData]
call rax
test eax, eax
jne 0x140002371
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
call rax
mov rax, qword [rbp - 0x10]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
call rax
jmp 0x1400024ad
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
lea rdx, [rbp - 0x18]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8, rcx
mov edx, 0x6610
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
call rax
test eax, eax
jne 0x1400023ca
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
call rax
mov rax, qword [rbp - 0x10]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
call rax
jmp 0x1400024ad
mov rax, qword [rbp + 0x10]
mov rcx, rax
call sub.msvcrt.dll_strlen
add eax, 1
mov dword [rbp - 0x24], eax
mov eax, dword [rbp - 0x24]
mov ecx, eax
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x18]
mov r8, rcx
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp + 0x20]
mov edx, dword [rax]
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x30], edx
lea rdx, [rbp - 0x24]
mov qword [rsp + 0x28], rdx
mov rdx, qword [rbp + 0x18]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 1
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptEncrypt]
call rax
test eax, eax
jne 0x14000246c
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
call rax
mov rax, qword [rbp - 0x10]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
call rax
jmp 0x1400024ad
mov edx, dword [rbp - 0x24]
mov rax, qword [rbp + 0x20]
mov dword [rax], edx
mov rax, qword [rbp - 0x18]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
call rax
mov rax, qword [rbp - 0x10]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
call rax
jmp 0x1400024ad
nop
add rsp, 0x70
pop rbp
ret