Function at 0x180022ef0
Capabilities:
Encrypt data using aes via winapi

Disassembly:
push rbp
sub rsp, 0xc0
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x50], r9
mov qword [rbp - 0x48], r8
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x38], rcx
mov rax, qword [0x1800760a8]
xor rax, rbp
mov qword [rbp + 0x38], rax
mov dword [rbp - 0x2c], 0x93e840bf
mov eax, dword [rbp - 0x2c]
mov dword [rbp - 0x54], eax
sub eax, 0x92c087c9
je 0x180023121
jmp 0x180022f3b
mov eax, dword [rbp - 0x54]
sub eax, 0x93e840bf
je 0x180023024
jmp 0x180022f4e
mov eax, dword [rbp - 0x54]
sub eax, 0xafc19ce3
je 0x1800232a8
jmp 0x180022f61
mov eax, dword [rbp - 0x54]
sub eax, 0xd685c38f
je 0x180023242
jmp 0x180022f74
mov eax, dword [rbp - 0x54]
sub eax, 0xe5f97d63
je 0x180023296
jmp 0x180022f87
mov eax, dword [rbp - 0x54]
sub eax, 0xea4d7faa
je 0x1800230e3
jmp 0x180022f9a
mov eax, dword [rbp - 0x54]
sub eax, 0xee09df21
je 0x180023277
jmp 0x180022fad
mov eax, dword [rbp - 0x54]
sub eax, 0x219768f
je 0x180023134
jmp 0x180022fc0
mov eax, dword [rbp - 0x54]
sub eax, 0x63e8a7d
je 0x18002328a
jmp 0x180022fd3
mov eax, dword [rbp - 0x54]
sub eax, 0x1fd85e50
je 0x180023140
jmp 0x180022fe6
mov eax, dword [rbp - 0x54]
sub eax, 0x24d6c779
je 0x180023104
jmp 0x180022ff9
mov eax, dword [rbp - 0x54]
sub eax, 0x5271deab
je 0x180023191
jmp 0x18002300c
mov eax, dword [rbp - 0x54]
sub eax, 0x5727e23f
je 0x18002326b
jmp 0x18002301f
jmp 0x1800232c7
mov rcx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x50]
mov eax, 0x10
mov qword [rbp - 0x68], rax
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, rsp
mov qword [rbp - 0x18], r10
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, rsp
mov qword [rbp - 0x10], r10
call fcn.18006c5e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x60], rax
mov eax, 0x30
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, rsp
mov qword [rbp - 8], r10
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, rsp
mov qword [rbp], r10
call fcn.18006c5e0
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 8], r10
mov qword [rbp - 0x28], rdx
mov rdx, qword [rbp - 0x18]
mov qword [rdx], r9
mov rdx, qword [rbp - 0x10]
mov qword [rdx], r8
mov qword [rax], rcx
mov rax, qword [rax]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rbp + 0x18], rax
mov dword [rbp - 0x2c], 0xea4d7faa
jmp 0x1800232c7
mov rcx, qword [rbp + 0x18]
sub rsp, 0x20
call fcn.1800220d0
add rsp, 0x20
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x2c], 0x24d6c779
jmp 0x1800232c7
mov rdx, qword [rbp + 0x20]
mov eax, 0x1fd85e50
mov ecx, 0x92c087c9
cmp rdx, 0
cmove eax, ecx
mov dword [rbp - 0x2c], eax
jmp 0x1800232c7
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x2c], 0x219768f
jmp 0x1800232c7
mov dword [rbp - 0x2c], 0xe5f97d63
jmp 0x1800232c7
mov rcx, qword [rbp - 8]
xor edx, edx
mov r8d, 0x2c
sub rsp, 0x20
call sub.msvcrt.dll_memset
add rsp, 0x20
mov rax, qword [rbp - 8]
mov byte [rax], 8
mov rax, qword [rbp - 8]
mov byte [rax + 1], 2
mov rax, qword [rbp - 8]
mov word [rax + 2], 0
mov rax, qword [rbp - 8]
mov dword [rax + 4], 0x660e
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x2c], 0x5271deab
jmp 0x1800232c7
mov rax, qword [rbp + 0x28]
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax + 8], ecx
mov rcx, qword [rbp - 8]
add rcx, 0xc
mov rax, qword [rbp - 0x18]
mov rdx, qword [rax]
mov r8, qword [rbp - 0x28]
sub rsp, 0x20
call sub.msvcrt.dll_memcpy
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x70], rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x78], rax
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1800220d0
mov rdx, qword [rbp - 0x78]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x70]
mov r8d, 0x2c
xor r9d, r9d
xor r10d, r10d
sub rsp, 0x30
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], rax
call qword [sym.imp.ADVAPI32.dll_CryptImportKey]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp]
mov dword [rax], ecx
mov rax, qword [rbp + 8]
mov dword [rax], 0
mov rdx, qword [rbp]
mov eax, 0xee09df21
mov ecx, 0xd685c38f
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x2c], eax
jmp 0x1800232c7
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp + 8]
mov dword [rax], ecx
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x2c], 0x5727e23f
jmp 0x1800232c7
mov dword [rbp - 0x2c], 0xe5f97d63
jmp 0x1800232c7
mov dword [rbp - 0x1c], 0
mov dword [rbp - 0x2c], 0x63e8a7d
jmp 0x1800232c7
mov dword [rbp - 0x2c], 0xe5f97d63
jmp 0x1800232c7
mov eax, dword [rbp - 0x1c]
mov dword [rbp + 0x34], eax
mov dword [rbp - 0x2c], 0xafc19ce3
jmp 0x1800232c7
mov eax, dword [rbp + 0x34]
mov dword [rbp - 0x7c], eax
mov rcx, qword [rbp + 0x38]
xor rcx, rbp
sub rsp, 0x20
call fcn.18006c560
mov eax, dword [rbp - 0x7c]
lea rsp, [rbp + 0x40]
pop rbp
ret
jmp 0x180022f25