Function at 0x140001000
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov ecx, 0x380
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
call qword [sym.imp.libcrypto_3_x64.dll_EVP_CIPHER_CTX_new]
mov rbx, rax
test rax, rax
jne 0x14000105d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_EVP_CIPHER_CTX
call fcn.140001180
mov rcx, rax
lea rdx, [0x140001350]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140001102
call qword [sym.imp.libcrypto_3_x64.dll_EVP_aes_128_ecb]
lea r9, str.This_is_a_key123
mov qword [rsp + 0x20], 0
mov rdx, rax
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.libcrypto_3_x64.dll_EVP_DecryptInit_ex]
test eax, eax
jne 0x14000108f
lea rdx, str.EVP_DecryptInit_ex_failed
jmp 0x1400010dd
lea r9, [0x140005040]
mov dword [rsp + 0x20], 0x380
lea r8, [rsp + 0x30]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.libcrypto_3_x64.dll_EVP_DecryptUpdate]
test eax, eax
jne 0x1400010bc
lea rdx, str.EVP_DecryptUpdate_failed
jmp 0x1400010dd
movsxd rdx, dword [rsp + 0x30]
lea r8, [rsp + 0x30]
add rdx, rdi
mov rcx, rbx
call qword [sym.imp.libcrypto_3_x64.dll_EVP_DecryptFinal_ex]
test eax, eax
jne 0x1400010f9
lea rdx, str.EVP_DecryptFinal_ex_failed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001180
lea rdx, [0x140001350]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
call qword [sym.imp.libcrypto_3_x64.dll_EVP_CIPHER_CTX_free]
lea r9, [rsp + 0x34]
mov edx, 0x380
mov r8d, 0x40
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x140001152
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.VirtualProtect_failed.
call fcn.140001180
mov rcx, rax
lea rdx, [0x140001350]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 1
jmp 0x14000115f
call rdi
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140001420
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret