Function at 0x180031f30
Capabilities:
Create new key via cryptacquirecontext

Disassembly:
push rbp
sub rsp, 0xd0
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x68], rcx
mov rax, qword [0x1800950a8]
xor rax, rbp
mov qword [rbp + 0x48], rax
mov dword [rbp - 0x5c], 0x7950ebd9
mov eax, dword [rbp - 0x5c]
mov dword [rbp - 0x6c], eax
sub eax, 0x85f29d6f
je 0x180032365
jmp 0x180031f6f
mov eax, dword [rbp - 0x6c]
sub eax, 0x999b239b
je 0x180032537
jmp 0x180031f82
mov eax, dword [rbp - 0x6c]
sub eax, 0xa8860572
je 0x180032277
jmp 0x180031f95
mov eax, dword [rbp - 0x6c]
sub eax, 0xa9ba554e
je 0x1800323f7
jmp 0x180031fa8
mov eax, dword [rbp - 0x6c]
sub eax, 0xbfa20649
je 0x1800325a7
jmp 0x180031fbb
mov eax, dword [rbp - 0x6c]
sub eax, 0xc2bad0bb
je 0x180032478
jmp 0x180031fce
mov eax, dword [rbp - 0x6c]
sub eax, 0xc4d740a5
je 0x1800324d0
jmp 0x180031fe1
mov eax, dword [rbp - 0x6c]
sub eax, 0xc6462760
je 0x18003251a
jmp 0x180031ff4
mov eax, dword [rbp - 0x6c]
sub eax, 0xca6a26fe
je 0x18003257c
jmp 0x180032007
mov eax, dword [rbp - 0x6c]
sub eax, 0xcb8701cb
je 0x180032445
jmp 0x18003201a
mov eax, dword [rbp - 0x6c]
sub eax, 0xcd52bede
je 0x18003228e
jmp 0x18003202d
mov eax, dword [rbp - 0x6c]
sub eax, 0xce32b353
je 0x18003242a
jmp 0x180032040
mov eax, dword [rbp - 0x6c]
sub eax, 0xd105a066
je 0x1800322a6
jmp 0x180032053
mov eax, dword [rbp - 0x6c]
sub eax, 0xd2d59ba5
je 0x180032558
jmp 0x180032066
mov eax, dword [rbp - 0x6c]
sub eax, 0xd69ab166
je 0x18003237a
jmp 0x180032079
mov eax, dword [rbp - 0x6c]
sub eax, 0xe2162a2c
je 0x1800325bb
jmp 0x18003208c
mov eax, dword [rbp - 0x6c]
sub eax, 0xebbca3f1
je 0x180032260
jmp 0x18003209f
mov eax, dword [rbp - 0x6c]
sub eax, 0xf089a377
je 0x1800324ed
jmp 0x1800320b2
mov eax, dword [rbp - 0x6c]
sub eax, 0xf247fa56
je 0x18003240c
jmp 0x1800320c5
mov eax, dword [rbp - 0x6c]
sub eax, 0xf5727a01
je 0x1800322bd
jmp 0x1800320d8
mov eax, dword [rbp - 0x6c]
sub eax, 0xfb2970eb
je 0x180032502
jmp 0x1800320eb
mov eax, dword [rbp - 0x6c]
sub eax, 0xff8e5338
je 0x180032593
jmp 0x1800320fe
mov eax, dword [rbp - 0x6c]
sub eax, 0xdabfd04
je 0x180032343
jmp 0x180032111
mov eax, dword [rbp - 0x6c]
sub eax, 0x2eb9a93e
je 0x1800323da
jmp 0x180032124
mov eax, dword [rbp - 0x6c]
sub eax, 0x2fa2d4e0
je 0x1800322f4
jmp 0x180032137
mov eax, dword [rbp - 0x6c]
sub eax, 0x44647727
je 0x18003250e
jmp 0x18003214a
mov eax, dword [rbp - 0x6c]
sub eax, 0x483290f0
je 0x18003248d
jmp 0x18003215d
mov eax, dword [rbp - 0x6c]
sub eax, 0x48495e43
je 0x18003245b
jmp 0x180032170
mov eax, dword [rbp - 0x6c]
sub eax, 0x4915438a
je 0x180032323
jmp 0x180032183
mov eax, dword [rbp - 0x6c]
sub eax, 0x50c3bcb4
je 0x18003254c
jmp 0x180032196
mov eax, dword [rbp - 0x6c]
sub eax, 0x57044c5a
je 0x18003239b
jmp 0x1800321a9
mov eax, dword [rbp - 0x6c]
sub eax, 0x58556d5e
je 0x18003230c
jmp 0x1800321bc
mov eax, dword [rbp - 0x6c]
sub eax, 0x64944cb4
je 0x180032240
jmp 0x1800321cf
mov eax, dword [rbp - 0x6c]
sub eax, 0x668ce976
je 0x180032337
jmp 0x1800321e2
mov eax, dword [rbp - 0x6c]
sub eax, 0x6ea24c83
je 0x1800322d9
jmp 0x1800321f5
mov eax, dword [rbp - 0x6c]
sub eax, 0x7950ebd9
je 0x180032220
jmp 0x180032208
mov eax, dword [rbp - 0x6c]
sub eax, 0x7baeac73
je 0x180032564
jmp 0x18003221b
jmp 0x1800325dd
mov eax, 0x10
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x5c], 0x64944cb4
jmp 0x1800325dd
mov eax, 0x10
call fcn.18008acc0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x5c], 0xebbca3f1
jmp 0x1800325dd
mov rcx, qword [rbp - 0x68]
mov rax, qword [rbp - 0x50]
mov qword [rax], rcx
mov dword [rbp - 0x5c], 0xa8860572
jmp 0x1800325dd
mov rax, qword [rbp - 0x50]
mov rax, qword [rax]
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x5c], 0xcd52bede
jmp 0x1800325dd
mov rax, qword [rbp - 0x40]
add rax, 8
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x5c], 0xd105a066
jmp 0x1800325dd
mov rax, qword [rbp - 0x38]
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x5c], 0xf5727a01
jmp 0x1800325dd
mov rax, qword [rbp - 0x30]
cmp rax, 0
setne al
and al, 1
mov byte [rbp - 0x21], al
mov dword [rbp - 0x5c], 0x6ea24c83
jmp 0x1800325dd
mov dl, byte [rbp - 0x21]
mov eax, 0xdabfd04
mov ecx, 0x2fa2d4e0
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x5c], eax
jmp 0x1800325dd
mov rax, qword [rbp - 0x40]
add rax, 8
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x5c], 0x58556d5e
jmp 0x1800325dd
mov rax, qword [rbp - 0x20]
mov rax, qword [rax]
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x5c], 0x4915438a
jmp 0x1800325dd
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x5c], 0x668ce976
jmp 0x1800325dd
mov dword [rbp - 0x5c], 0xbfa20649
jmp 0x1800325dd
mov rax, qword [rbp - 0x48]
mov dword [rax], 0
mov rax, qword [rbp - 0x40]
add rax, 4
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x5c], 0x85f29d6f
jmp 0x1800325dd
mov rax, qword [rbp - 0x10]
mov eax, dword [rax]
mov dword [rbp - 8], eax
mov dword [rbp - 0x5c], 0xd69ab166
jmp 0x1800325dd
mov rax, qword [rbp - 0x40]
mov eax, dword [rax]
mov dword [rbp - 4], eax
mov rax, qword [rbp - 0x40]
add rax, 8
mov qword [rbp], rax
mov dword [rbp - 0x5c], 0x57044c5a
jmp 0x1800325dd
mov eax, dword [rbp - 8]
mov r9d, dword [rbp - 4]
mov rcx, qword [rbp]
xor edx, edx
mov r8d, edx
sub rsp, 0x30
mov rdx, r8
mov dword [rsp + 0x20], eax
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
add rsp, 0x30
mov edx, eax
mov eax, 0x2eb9a93e
mov ecx, 0x7baeac73
cmp edx, 0
cmovne eax, ecx
mov dword [rbp - 0x5c], eax
jmp 0x1800325dd
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 8], eax
mov dword [rbp - 0x5c], 0xa9ba554e
jmp 0x1800325dd
mov rax, qword [rbp - 0x48]
mov ecx, dword [rbp + 8]
mov dword [rax], ecx
mov dword [rbp - 0x5c], 0xf247fa56
jmp 0x1800325dd
mov rax, qword [rbp - 0x48]
cmp dword [rax], 0x80090016
sete al
and al, 1
mov byte [rbp + 0xf], al
mov dword [rbp - 0x5c], 0xce32b353
jmp 0x1800325dd
mov dl, byte [rbp + 0xf]
mov eax, 0xc6462760
mov ecx, 0xcb8701cb
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x5c], eax
jmp 0x1800325dd
mov rax, qword [rbp - 0x40]
mov eax, dword [rax + 4]
mov dword [rbp + 0x10], eax
mov dword [rbp - 0x5c], 0x48495e43
jmp 0x1800325dd
mov eax, dword [rbp + 0x10]
or eax, 8
mov dword [rbp + 0x14], eax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x18], rax
mov dword [rbp - 0x5c], 0xc2bad0bb
jmp 0x1800325dd
mov rax, qword [rbp + 0x18]
mov eax, dword [rax]
mov dword [rbp + 0x24], eax
mov dword [rbp - 0x5c], 0x483290f0
jmp 0x1800325dd
mov rcx, qword [rbp - 0x40]
add rcx, 8
mov eax, dword [rbp + 0x14]
mov r9d, dword [rbp + 0x24]
xor edx, edx
mov r8d, edx
sub rsp, 0x30
mov rdx, r8
mov dword [rsp + 0x20], eax
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
add rsp, 0x30
mov edx, eax
mov eax, 0xc4d740a5
mov ecx, 0x44647727
cmp edx, 0
cmovne eax, ecx
mov dword [rbp - 0x5c], eax
jmp 0x1800325dd
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x28], eax
mov dword [rbp - 0x5c], 0xf089a377
jmp 0x1800325dd
mov rax, qword [rbp - 0x48]
mov ecx, dword [rbp + 0x28]
mov dword [rax], ecx
mov dword [rbp - 0x5c], 0xfb2970eb
jmp 0x1800325dd
mov dword [rbp - 0x5c], 0x44647727
jmp 0x1800325dd
mov dword [rbp - 0x5c], 0xd2d59ba5
jmp 0x1800325dd
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x2c], eax
mov dword [rbp - 0x5c], 0x999b239b
jmp 0x1800325dd
mov rax, qword [rbp - 0x48]
mov ecx, dword [rbp + 0x2c]
mov dword [rax], ecx
mov dword [rbp - 0x5c], 0x50c3bcb4
jmp 0x1800325dd
mov dword [rbp - 0x5c], 0xd2d59ba5
jmp 0x1800325dd
mov dword [rbp - 0x5c], 0x7baeac73
jmp 0x1800325dd
mov rax, qword [rbp - 0x40]
add rax, 8
mov qword [rbp + 0x30], rax
mov dword [rbp - 0x5c], 0xca6a26fe
jmp 0x1800325dd
mov rax, qword [rbp + 0x30]
mov rax, qword [rax]
mov qword [rbp + 0x38], rax
mov dword [rbp - 0x5c], 0xff8e5338
jmp 0x1800325dd
mov rax, qword [rbp + 0x38]
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x5c], 0xbfa20649
jmp 0x1800325dd
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x40], rax
mov dword [rbp - 0x5c], 0xe2162a2c
jmp 0x1800325dd
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
sub rsp, 0x20
call fcn.18008ac40
mov rax, qword [rbp - 0x78]
lea rsp, [rbp + 0x50]
pop rbp
ret
jmp 0x180031f59