Function at 0x1401a4320
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x48], r8
mov dword [rbp - 0x3c], edx
mov qword [rbp - 0x38], rcx
mov eax, dword [rbp + 0xa0]
mov dword [rbp - 0x2c], eax
mov rax, qword [0x1401fda68]
xor rax, rbp
mov qword [rbp + 0x30], rax
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
sub edx, 0xb908514d
sub edx, 1
add edx, 0xb908514d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x22], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x21], al
mov dword [rbp - 0x28], 0x8b719470
mov eax, dword [rbp - 0x28]
mov dword [rbp - 0x54], eax
sub eax, 0x8182f637
je 0x1401a7b38
jmp 0x1401a43b8
mov eax, dword [rbp - 0x54]
sub eax, 0x829a1723
je 0x1401a749c
jmp 0x1401a43cb
mov eax, dword [rbp - 0x54]
sub eax, 0x82e271b3
je 0x1401a67c0
jmp 0x1401a43de
mov eax, dword [rbp - 0x54]
sub eax, 0x83b5e624
je 0x1401a5280
jmp 0x1401a43f1
mov eax, dword [rbp - 0x54]
sub eax, 0x87a72113
je 0x1401a7131
jmp 0x1401a4404
mov eax, dword [rbp - 0x54]
sub eax, 0x87c5c00f
je 0x1401a7a2c
jmp 0x1401a4417
mov eax, dword [rbp - 0x54]
sub eax, 0x88498550
je 0x1401a7888
jmp 0x1401a442a
mov eax, dword [rbp - 0x54]
sub eax, 0x893e296d
je 0x1401a7b14
jmp 0x1401a443d
mov eax, dword [rbp - 0x54]
sub eax, 0x8a1a7869
je 0x1401a7376
jmp 0x1401a4450
mov eax, dword [rbp - 0x54]
sub eax, 0x8b6f8a6c
je 0x1401a55e7
jmp 0x1401a4463
mov eax, dword [rbp - 0x54]
sub eax, 0x8b719470
je 0x1401a4f18
jmp 0x1401a4476
mov eax, dword [rbp - 0x54]
sub eax, 0x8ec3420b
je 0x1401a5450
jmp 0x1401a4489
mov eax, dword [rbp - 0x54]
sub eax, 0x8ed592ae
je 0x1401a7b44
jmp 0x1401a449c
mov eax, dword [rbp - 0x54]
sub eax, 0x8f9f81ef
je 0x1401a5d44
jmp 0x1401a44af
mov eax, dword [rbp - 0x54]
sub eax, 0x9263bab6
je 0x1401a50a4
jmp 0x1401a44c2
mov eax, dword [rbp - 0x54]
sub eax, 0x93c3b38d
je 0x1401a62d4
jmp 0x1401a44d5
mov eax, dword [rbp - 0x54]
sub eax, 0x94505a7f
je 0x1401a6af1
jmp 0x1401a44e8
mov eax, dword [rbp - 0x54]
sub eax, 0x94ed994a
je 0x1401a5f5a
jmp 0x1401a44fb
mov eax, dword [rbp - 0x54]
sub eax, 0x9518cdb8
je 0x1401a6dcc
jmp 0x1401a450e
mov eax, dword [rbp - 0x54]
sub eax, 0x960abefd
je 0x1401a7870
jmp 0x1401a4521
mov eax, dword [rbp - 0x54]
sub eax, 0x9662c451
je 0x1401a5e63
jmp 0x1401a4534
mov eax, dword [rbp - 0x54]
sub eax, 0x9900b7ab
je 0x1401a6603
jmp 0x1401a4547
mov eax, dword [rbp - 0x54]
sub eax, 0x991df9dd
je 0x1401a7327
jmp 0x1401a455a
mov eax, dword [rbp - 0x54]
sub eax, 0x9e0fdbb0
je 0x1401a6841
jmp 0x1401a456d
mov eax, dword [rbp - 0x54]
sub eax, 0x9f100567
je 0x1401a614b
jmp 0x1401a4580
mov eax, dword [rbp - 0x54]
sub eax, 0x9fbe9900
je 0x1401a63e0
jmp 0x1401a4593
mov eax, dword [rbp - 0x54]
sub eax, 0xa051feae
je 0x1401a6f28
jmp 0x1401a45a6
mov eax, dword [rbp - 0x54]
sub eax, 0xa2286cad
je 0x1401a619a
jmp 0x1401a45b9
mov eax, dword [rbp - 0x54]
sub eax, 0xa3df1448
je 0x1401a7b8d
jmp 0x1401a45cc
mov eax, dword [rbp - 0x54]
sub eax, 0xa633ef1b
je 0x1401a6101
jmp 0x1401a45df
mov eax, dword [rbp - 0x54]
sub eax, 0xa689477b
je 0x1401a59f8
jmp 0x1401a45f2
mov eax, dword [rbp - 0x54]
sub eax, 0xa83ae734
je 0x1401a7d4b
jmp 0x1401a4605
mov eax, dword [rbp - 0x54]
sub eax, 0xaa4b61f0
je 0x1401a6ea7
jmp 0x1401a4618
mov eax, dword [rbp - 0x54]
sub eax, 0xab7527a4
je 0x1401a602a
jmp 0x1401a462b
mov eax, dword [rbp - 0x54]
sub eax, 0xac477ab5
je 0x1401a7bc6
jmp 0x1401a463e
mov eax, dword [rbp - 0x54]
sub eax, 0xad418fff
je 0x1401a7cbd
jmp 0x1401a4651
mov eax, dword [rbp - 0x54]
sub eax, 0xae3197c4
je 0x1401a6d7d
jmp 0x1401a4664
mov eax, dword [rbp - 0x54]
sub eax, 0xb0764104
je 0x1401a7be6
jmp 0x1401a4677
mov eax, dword [rbp - 0x54]
sub eax, 0xb081dc39
je 0x1401a76a4
jmp 0x1401a468a
mov eax, dword [rbp - 0x54]
sub eax, 0xb169faf6
je 0x1401a6527
jmp 0x1401a469d
mov eax, dword [rbp - 0x54]
sub eax, 0xb26c21e2
je 0x1401a6c9c
jmp 0x1401a46b0
mov eax, dword [rbp - 0x54]
sub eax, 0xb2cea95c
je 0x1401a59dd
jmp 0x1401a46c3
mov eax, dword [rbp - 0x54]
sub eax, 0xb4113939
je 0x1401a5e14
jmp 0x1401a46d6
mov eax, dword [rbp - 0x54]
sub eax, 0xb44296af
je 0x1401a64ab
jmp 0x1401a46e9
mov eax, dword [rbp - 0x54]
sub eax, 0xb4d86e59
je 0x1401a6c1b
jmp 0x1401a46fc
mov eax, dword [rbp - 0x54]
sub eax, 0xb522f98c
je 0x1401a7617
jmp 0x1401a470f
mov eax, dword [rbp - 0x54]
sub eax, 0xb6087268
je 0x1401a6d01
jmp 0x1401a4722
mov eax, dword [rbp - 0x54]
sub eax, 0xb61d674c
je 0x1401a626a
jmp 0x1401a4735
mov eax, dword [rbp - 0x54]
sub eax, 0xb7c8fad0
je 0x1401a6533
jmp 0x1401a4748
mov eax, dword [rbp - 0x54]
sub eax, 0xb838ad9f
je 0x1401a5744
jmp 0x1401a475b
mov eax, dword [rbp - 0x54]
sub eax, 0xbae5acc0
je 0x1401a7957
jmp 0x1401a476e
mov eax, dword [rbp - 0x54]
sub eax, 0xbc5a2aa4
je 0x1401a727c
jmp 0x1401a4781
mov eax, dword [rbp - 0x54]
sub eax, 0xbcd20ce8
je 0x1401a79d4
jmp 0x1401a4794
mov eax, dword [rbp - 0x54]
sub eax, 0xbf59b109
je 0x1401a5738
jmp 0x1401a47a7
mov eax, dword [rbp - 0x54]
sub eax, 0xc1a31535
je 0x1401a7d1b
jmp 0x1401a47ba
mov eax, dword [rbp - 0x54]
sub eax, 0xc23578c7
je 0x1401a7b65
jmp 0x1401a47cd
mov eax, dword [rbp - 0x54]
sub eax, 0xc3239a68
je 0x1401a686a
jmp 0x1401a47e0
mov eax, dword [rbp - 0x54]
sub eax, 0xc5f37ea5
je 0x1401a57c0
jmp 0x1401a47f3
mov eax, dword [rbp - 0x54]
sub eax, 0xc83ffab6
je 0x1401a7984
jmp 0x1401a4806
mov eax, dword [rbp - 0x54]
sub eax, 0xc9012614
je 0x1401a7b99
jmp 0x1401a4819
mov eax, dword [rbp - 0x54]
sub eax, 0xc9f0bc6c
je 0x1401a7a38
jmp 0x1401a482c
mov eax, dword [rbp - 0x54]
sub eax, 0xcede3c4c
je 0x1401a71f2
jmp 0x1401a483f
mov eax, dword [rbp - 0x54]
sub eax, 0xd2d5852a
je 0x1401a56e9
jmp 0x1401a4852
mov eax, dword [rbp - 0x54]
sub eax, 0xd777d4a8
je 0x1401a5d29
jmp 0x1401a4865
mov eax, dword [rbp - 0x54]
sub eax, 0xd7ab390b
je 0x1401a5b09
mov al, byte [rbp - 0x22]
mov cl, byte [rbp - 0x21]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x991df9dd
mov ecx, 0x388fa0b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
add edx, 0x865fb963
sub edx, 1
sub edx, 0x865fb963
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x38153083
mov ecx, 0x7db025cf
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x14c2f0f5
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
sub edx, 0xbfe53d37
sub edx, 1
add edx, 0xbfe53d37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3a343c30
mov ecx, 0x5819942a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0x311b102
sub edx, 1
sub edx, 0x311b102
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a343c30
mov ecx, 0xdcb5fbca
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
add edx, 0x159824f4
sub edx, 1
sub edx, 0x159824f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c67f355
mov ecx, 0xbf59b109
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x14c2f0f5
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x87c5c00f
mov ecx, 0xc5f37ea5
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x8a307119
sub edx, 1
add edx, 0x8a307119
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87c5c00f
mov ecx, 0x131c73d0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dl, byte [rbp + 0x27]
mov eax, 0x33c70b4b
mov ecx, 0xa689477b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
sub edx, 0xea3809c5
sub edx, 1
add edx, 0xea3809c5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb081dc39
mov ecx, 0xe43ebce8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dl, byte [rbp + 0x28]
mov eax, 0x5a9c16e
mov ecx, 0x8f9f81ef
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0xa998a7b9
sub edx, 1
sub edx, 0xa998a7b9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6386c7e4
mov ecx, 0xd82f31fb
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x3d27c8bf
sub edx, 1
add edx, 0x3d27c8bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf006e0d8
mov ecx, 0x9662c451
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5568e88e
mov ecx, 0xf8641db0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0xa8af6ddc
sub edx, 1
add edx, 0xa8af6ddc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6bb8cdfa
mov ecx, 0xe855a575
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x14c2f0f5
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3fe16719
mov ecx, 0x9f100567
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
add edx, 0xbae0090b
sub edx, 1
sub edx, 0xbae0090b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbf917cb
mov ecx, 0xa2286cad
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x18]
mov r10, qword [rcx]
mov rcx, qword [rbp + 0x18]
mov rcx, qword [rcx]
xor edx, edx
mov r8d, 1
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x28], rax
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp]
mov dword [rax], ecx
mov rax, qword [rbp]
cmp dword [rax], 0
sete al
and al, 1
mov byte [rbp + 0x29], al
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0xd45639b8
sub edx, 1
sub edx, 0xd45639b8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdbf917cb
mov ecx, 0xb61d674c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x919f13a8
sub edx, 1
add edx, 0x919f13a8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3fe16719
mov ecx, 0xfb84702d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x1d0ff40
sub edx, 1
add edx, 0x1d0ff40
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x503fa177
mov ecx, 0x6b78922d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x503fa177
mov ecx, 0x146e7041
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x893e296d
mov ecx, 0xb169faf6
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x14c2f0f5
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x999e2080
sub edx, 1
add edx, 0x999e2080
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x287ce543
mov ecx, 0xe8f2e43d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0xd8854b9d
sub edx, 1
sub edx, 0xd8854b9d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdfbacba6
mov ecx, 0xbf6bc24
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0x203d5a9b
sub edx, 1
sub edx, 0x203d5a9b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8182f637
mov ecx, 0x9e0fdbb0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x14c2f0f5
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x77b6ef6c
sub edx, 1
add edx, 0x77b6ef6c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8ed592ae
mov ecx, 0x278023c7
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov rax, qword [rbp + 0x10]
cmp qword [rax], 0
setne al
and al, 1
mov byte [rbp + 0x2a], al
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5bc8e56b
mov ecx, 0xe7ed3555
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0xb764fa48
sub edx, 1
sub edx, 0xb764fa48
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1614ad79
mov ecx, 0xb26c21e2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dl, byte [rbp + 0x2a]
mov eax, 0xb343262
mov ecx, 0x52396840
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa3df1448
mov ecx, 0xae3197c4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x34b5b732
sub edx, 1
add edx, 0x34b5b732
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3658a5b
mov ecx, 0x9518cdb8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc9012614
mov ecx, 0xdd5b9c54
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0x7b244709
sub edx, 1
sub edx, 0x7b244709
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe3658a5b
mov ecx, 0xa051feae
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x1cf7f706
sub edx, 1
add edx, 0x1cf7f706
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa235ef8
mov ecx, 0x69c24c1d
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
xor edx, edx
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
add rsp, 0x20
mov dword [rbp - 0x28], 0xdd37f052
jmp 0x1401a7d56
mov rax, qword [rbp]
mov eax, dword [rax]
mov dword [rbp + 0x2c], eax
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
sub edx, 0xa10c9c72
sub edx, 1
add edx, 0xa10c9c72
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xed047105
mov ecx, 0xbc5a2aa4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
add edx, 0xb37a9706
sub edx, 1
sub edx, 0xb37a9706
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc83ffab6
mov ecx, 0x4b08faa0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0x30927265
sub edx, 1
add edx, 0x30927265
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0764104
mov ecx, 0x8a1a7869
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov r10, qword [rbp - 0x38]
mov esi, dword [rbp - 0x3c]
mov rbx, qword [rbp - 0x48]
mov r15, qword [rbp - 0x50]
mov r13d, dword [rbp - 0x2c]
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r12, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r14, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdi, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r11, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r9, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r8, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rcx, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, rsp
mov dword [r12], r13d
mov qword [r14], r15
mov qword [rdi], rbx
mov dword [r11], esi
mov qword [r9], r10
mov dword [r8], 1
mov qword [rdx], 0
mov qword [rcx], 0
mov qword [rax], 0
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
sub edx, 0xdf3bdba1
sub edx, 1
add edx, 0xdf3bdba1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0764104
mov ecx, 0x1fb4e22f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
mov edx, 0x8003
xor r8d, r8d
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp]
mov dword [rax], ecx
mov rax, qword [rbp]
mov dword [rbp - 0x28], 0x6e06e29c
jmp 0x1401a7d56
mov rax, qword [rbp - 0x10]
mov r8d, dword [rax]
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
xor r9d, r9d
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp]
mov dword [rax], ecx
mov rax, qword [rbp]
mov eax, dword [0x1401fe808]
mov ecx, dword [0x1401fe80c]
mov edx, eax
add edx, 0x8b630323
sub edx, 1
sub edx, 0x8b630323
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e0362c
mov ecx, 0x28ffc2f9
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
sub rsp, 0x20
lea rcx, str.CryptHashData_Error_r_n
call fcn.14009faf0
add rsp, 0x20
mov dword [rbp - 0x28], 0xe43ebce8
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x6b78922d
jmp 0x1401a7d56
mov ecx, dword [0x1401fe808]
mov eax, dword [0x1401fe80c]
mov edx, ecx
sub edx, 0xc4bd640f
sub edx, 1
add edx, 0xc4bd640f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa83ae734
mov ecx, 0x3faff809
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x3118a877
jmp 0x1401a7d56
mov rax, qword [rbp]
mov dword [rbp - 0x28], 0xf8d523e5
jmp 0x1401a7d56
sub rsp, 0x20
lea rcx, str.CryptAcquireContext_Error_r_n
call fcn.14009faf0
add rsp, 0x20
mov dword [rbp - 0x28], 0x64041511
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0xc5f37ea5
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x7b782cc5
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0xb44296af
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x82e271b3
jmp 0x1401a7d56
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
add rsp, 0x20
mov dword [rbp - 0x28], 0x278023c7
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0x662bd3f1
jmp 0x1401a7d56
mov dword [rbp - 0x28], 0xb6087268
jmp 0x1401a7d56
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
add rsp, 0x20
mov dword [rbp - 0x28], 0xdd5b9c54
jmp 0x1401a7d56
mov rax, qword [rbp + 8]
mov dword [rbp - 0x28], 0x4f897539
jmp 0x1401a7d56
mov r10, qword [rbp - 0x38]
mov esi, dword [rbp - 0x3c]
mov rbx, qword [rbp - 0x48]
mov r15, qword [rbp - 0x50]
mov r13d, dword [rbp - 0x2c]
mov eax, 0x10
mov qword [rbp - 0x80], rax
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r12, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r14, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdi, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r11, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r9, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r8, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdx, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rcx, rsp
call fcn.1401b1950
sub rsp, rax
mov rax, rsp
mov dword [r12], r13d
mov qword [r14], r15
mov qword [rdi], rbx
mov dword [r11], esi
mov qword [r9], r10
mov dword [r8], 1
mov qword [rdx], 0
mov qword [rcx], 0
mov qword [rax], 0
mov dword [rbp - 0x28], 0x8a1a7869
jmp 0x1401a7d56
sub rsp, 0x20
lea rcx, str.CryptCreateHash_Error_r_n
call fcn.14009faf0
add rsp, 0x20
mov dword [rbp - 0x28], 0x138e9ca8
jmp 0x1401a7d56
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov edx, eax
sub rsp, 0x20
lea rcx, str.CryptDecrypt_Error_GetLastError:_x_n
call fcn.14009faf0
add rsp, 0x20
mov dword [rbp - 0x28], 0x1100931a
jmp 0x1401a7d56
mov rax, qword [rbp + 0x10]
mov dword [rbp - 0x28], 0x3faff809
jmp 0x1401a43a2