Function at 0x14000aee0
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using rc4 via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb0
movaps xmmword [rsp + 0xa0], xmm6
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], r8
mov qword [rsp + 0x108], r9
mov r12d, dword [rsp + 0x120]
mov ebp, dword [rsp + 0x128]
mov r13d, dword [rsp + 0x130]
movsx rbx, byte [rsp + 0x118]
movsxd rcx, dword [rsp + 0x138]
call fcn.14004f8e0
call fcn.14004f2c0
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.14004f6b0
lea rcx, [rsp + 0xf8]
mov rdx, qword [rsp + 0xf8]
call fcn.14004f6b0
lea rcx, [rsp + 0x100]
mov rdx, qword [rsp + 0x100]
call fcn.14004f6b0
lea rcx, [rsp + 0x108]
mov rdx, qword [rsp + 0x108]
call fcn.14004f6b0
lea rcx, [rsp + 0x110]
mov rdx, qword [rsp + 0x110]
call fcn.14004f6b0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x34], 0
mov qword [rsp + 0x58], 0
lea rsi, [rsp + 0x58]
lea rdx, [0x14017ac30]
mov rcx, rsi
call fcn.14004f780
call fcn.14004f330
call fcn.14004f330
call fcn.14004f330
call fcn.14004f330
call fcn.14004f390
mov ecx, eax
call fcn.14001eb3c
call fcn.14004f4e0
mov rdi, rax
call fcn.14004f390
mov edx, eax
mov rcx, rdi
call fcn.140031fc4
lea rcx, str._FTPimg_
call fcn.14004f870
call fcn.14004f390
lea rcx, [rsp + 0x48]
mov edx, eax
call fcn.14004f5a0
call fcn.14004f330
mov rcx, qword [rsp + 0x108]
call fcn.14004f870
call fcn.14004f390
lea rcx, [rsp + 0x38]
mov edx, eax
call fcn.14004f5a0
mov rcx, qword [rsp + 0x38]
call fcn.14004c720
mov r14, qword [rsp + 0x38]
mov qword [rsp + 0x98], rax
lea rax, str.apic
mov qword [rsp + 0x80], rax
call fcn.14004f2c0
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x80]
call fcn.14004f6b0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0
shl qword [rsp + 0x98], 1
lea rdi, [rsp + 0x60]
mov qword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call sub.ADVAPI32.dll_CryptAcquireContextW
test rax, rax
je 0x14000b2e0
mov rax, qword [rsp + 0x60]
test rax, rax
jne 0x14000b301
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
call fcn.14004f680
mov rcx, qword [rsp + 0xf8]
call fcn.14004cc40
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x100]
mov rdx, qword [rsp + 0xf0]
mov rcx, 0xffffffffffffffff
call fcn.14002fa68
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x30]
test eax, eax
jne 0x14000b3e1
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0x40]
lea rdx, str.Error_de_Conexi
call fcn.14004f780
call fcn.14004f330
lea rcx, str.No_se_pudo_conectar_al_servidor__r_n_r_n
call fcn.14004f870
mov rcx, qword [rsp + 0xf0]
call fcn.14004f870
lea rcx, [0x14016b828]
call fcn.14004f870
call fcn.14004f390
lea rcx, [rsp + 0x50]
mov edx, eax
call fcn.14004f5a0
mov r8d, reloc.WS2_32.dll_recv
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
call fcn.14001dec0
call fcn.14004f330
call fcn.14004f330
call fcn.14004f390
movsxd rcx, dword [rsp + 0x30]
mov edx, eax
call fcn.14004c5c0
lea rcx, [0x14016cd6e]
call fcn.14004f870
mov rcx, qword [rsp + 0x40]
call fcn.14004f870
lea rcx, [0x1401679b0]
call fcn.14004f870
mov rcx, qword [rsp + 0x50]
call fcn.14004f870
call fcn.14004f390
mov edx, eax
mov rcx, rsi
call fcn.14004f5a0
call fcn.14004f330
mov rcx, qword [rsp + 0x58]
call fcn.14004f870
call fcn.14004f4e0
mov rbx, rax
mov rcx, qword [rsp + 0x100]
call fcn.14004f680
mov rcx, qword [rsp + 0xf8]
call fcn.14004f680
mov rcx, qword [rsp + 0x110]
call fcn.14004f680
mov rcx, qword [rsp + 0x38]
call fcn.14004f680
mov rcx, qword [rsp + 0x108]
call fcn.14004f680
mov rcx, qword [rsp + 0x40]
call fcn.14004f680
mov rcx, qword [rsp + 0x48]
call fcn.14004f680
mov rcx, qword [rsp + 0xf0]
call fcn.14004f680
mov rcx, qword [rsp + 0x50]
call fcn.14004f680
mov rcx, qword [rsp + 0x58]
call fcn.14004f680
mov rax, rbx
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov qword [rsp + 0x20], 8
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call sub.ADVAPI32.dll_CryptAcquireContextW
jmp 0x14000b112
mov rcx, qword [rsp + 0x60]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
call sub.ADVAPI32.dll_CryptCreateHash
mov rax, qword [rsp + 0x78]
test rax, rax
jne 0x14000b340
mov rcx, qword [rsp + 0x60]
xor edx, edx
call sub.ADVAPI32.dll_CryptReleaseContext
jmp 0x14000b120
mov rcx, qword [rsp + 0x80]
call fcn.14004c720
mov r8, rax
mov rcx, qword [rsp + 0x78]
xor r9d, r9d
mov rdx, qword [rsp + 0x80]
call sub.ADVAPI32.dll_CryptHashData
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x60]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 1
mov edx, 0x6801
call sub.ADVAPI32.dll_CryptDeriveKey
mov rax, qword [rsp + 0x68]
test rax, rax
jne 0x14000b3a0
mov rcx, qword [rsp + 0x78]
call sub.ADVAPI32.dll_CryptDestroyHash
jmp 0x14000b32a
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8d, 1
xor edx, edx
call sub.ADVAPI32.dll_CryptDecrypt
test rax, rax
je 0x14000b3d5
mov qword [rsp + 0x70], 1
mov rcx, qword [rsp + 0x68]
call sub.ADVAPI32.dll_CryptDestroyKey
jmp 0x14000b393
lea rcx, [rsp + 0x40]
lea rdx, [0x14016ab00]
call fcn.14004f780
lea rbx, [rsp + 0x50]
lea rdx, str.La_conexi
mov rcx, rbx
call fcn.14004f780
call fcn.14004f330
call fcn.14004f330
call fcn.14004f390
mov edx, eax
mov rcx, qword [rsp + 0x110]
call fcn.14004c4a0
call fcn.14004f570
call fcn.14004f470
mov rdx, rax
lea rcx, [0x14017ac30]
call fcn.14004f720
test eax, eax
je 0x14000b470
test r12b, r12b
je 0x14000b750
test bpl, bpl
jne 0x14000b1e3
mov r8d, 0x40
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
call fcn.14001dec0
jmp 0x14000b1e3
call fcn.14004f330
mov rcx, qword [rsp + 0x50]
call fcn.14004f870
lea rcx, str._r_nRuta_
call fcn.14004f870
mov rcx, qword [rsp + 0x110]
call fcn.14004f870
lea rcx, str._es
call fcn.14004f870
call fcn.14004f390
mov edx, eax
mov rcx, rbx
call fcn.14004f5a0
test r13b, r13b
jne 0x14000b502
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x110]
call fcn.14002eb88
test rax, rax
jne 0x14000b730
call fcn.14004f330
mov rcx, qword [rsp + 0x50]
call fcn.14004f870
lea rcx, [0x14016a500]
call fcn.14004f870
call fcn.14004f390
mov edx, eax
mov rcx, rbx
call fcn.14004f5a0
jmp 0x14000b441
movsxd rcx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x110]
call fcn.14002eb88
test rax, rax
jne 0x14000b4b8
mov ecx, dword [rsp + 0x30]
mov rdx, qword [rsp + 0x110]
call fcn.140002ae0
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x14000b4b8
mov r13d, dword [rsp + 0x30]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x90], rax
call fcn.14004f2c0
lea rcx, [rsp + 0x88]
mov rdx, qword [rsp + 0x88]
call fcn.14004f6b0
lea rcx, [rsp + 0x90]
mov rdx, qword [rsp + 0x90]
call fcn.14004f6b0
mov qword [rsp + 0x98], 0
mov ecx, reloc.WS2_32.dll_sendto
call fcn.14004ecb0
mov rdi, rax
lea rdx, [0x14017ac30]
mov ecx, 1
call fcn.140001ed0
call fcn.14004f2c0
movss xmm0, dword [0x140122118]
call fcn.14000abb0
mov edx, 1
mov ecx, 3
call fcn.14002d5f0
mov edx, 0xa
lea rcx, str.Subiendo_imagenes....
call fcn.14000a530
mov ecx, 2
call fcn.14002d00c
test rax, rax
jne 0x14000b681
mov dword [rdi], r13d
call fcn.14004f330
mov rcx, qword [rsp + 0x88]
call fcn.14004f870
call fcn.14004f390
lea rcx, [rdi + 4]
mov edx, eax
call fcn.14004f5a0
call fcn.14004f330
mov rcx, qword [rsp + 0x90]
call fcn.14004f870
call fcn.14004f390
lea rcx, [rdi + 0xc]
mov edx, eax
call fcn.14004f5a0
mov rdx, rdi
lea rcx, [0x14000a810]
call fcn.14001d078
mov qword [rsp + 0x98], rax
movss xmm6, dword [0x140122120]
nop dword [rax]
mov rcx, qword [rsp + 0x98]
call fcn.14001d1b8
test rax, rax
je 0x14000b6b0
call fcn.14004f2c0
movaps xmm0, xmm6
call fcn.14000abb0
jmp 0x14000b660
mov edx, 1
mov ecx, 2
call fcn.14002d628
call fcn.14004f2c0
movss xmm0, dword [0x14012211c]
call fcn.14000abb0
jmp 0x14000b5f6
call fcn.14004f2c0
movss xmm0, dword [0x140122124]
call fcn.14000abb0
mov ecx, 2
call fcn.14002d00c
test rax, rax
jne 0x14000b710
xor edx, edx
mov ecx, 3
call fcn.14002d5f0
movzx eax, byte [0x14017aa78]
test al, al
jne 0x14000b720
mov rcx, qword [rsp + 0x88]
call fcn.14004f680
mov rcx, qword [rsp + 0x90]
call fcn.14004f680
jmp 0x14000b4b8
mov ecx, 2
call fcn.14002ce78
jmp 0x14000b6d1
lea rdx, str.Subida_de_imagenes_de_prueba_suspendida_por_el_usuario
xor ecx, ecx
call fcn.140001ed0
jmp 0x14000b6e8
call fcn.14004f330
mov rcx, qword [rsp + 0x50]
call fcn.14004f870
lea rcx, [0x1401676c8]
jmp 0x14000b4e9
movsxd rcx, dword [rsp + 0x30]
call fcn.14002fbd4
mov dword [rsp + 0x30], 0
jmp 0x14000b44a