Function at 0x10032ecc4
Capabilities:
Encrypt data using aes via winapi

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x20], r9
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r15d, r15d
mov rax, r9
mov r13, r8
mov r14, rdx
mov rbp, rcx
mov rbx, r15
mov dword [r11 - 0x58], r15d
mov rsi, r15
mov dword [r11 + 0x10], r15d
mov r12, r15
mov qword [r11 - 0x48], r15
cmp rdx, r15
je 0x10032ef8a
cmp r8, r15
je 0x10032ef8a
cmp rax, r15
je 0x10032ef8a
cmp dword [rcx + 0xc], 4
je 0x10032ed2d
mov edi, 0x80049e2f
jmp 0x10032ef9f
cmp qword [rcx + 0x30], r15
je 0x10032ef83
cmp qword [rcx + 0x38], r15
je 0x10032ef83
mov ecx, 0x48
call fcn.100058294
cmp rax, r15
je 0x10032ed5f
mov rdx, qword [rbp + 0x38]
mov rcx, rax
call fcn.10032e250
mov rbx, rax
cmp rbx, r15
jne 0x10032ed6e
mov edi, 0x8007000e
jmp 0x10032ef9f
mov rax, qword [r13]
lea rdx, [rsp + 0x30]
xor r8d, r8d
mov rcx, r13
call qword [rax + 0x28]
mov edi, eax
cmp eax, r15d
jne 0x10032ef91
mov ecx, dword [rsp + 0x30]
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.100058294
mov rsi, rax
mov qword [rsp + 0x38], rax
cmp rax, r15
jne 0x10032edc1
mov edi, 0x8007000e
jmp 0x10032ef91
mov rax, qword [r13]
lea rdx, [rsp + 0x30]
mov r8, rsi
mov rcx, r13
call qword [rax + 0x28]
mov edi, eax
cmp eax, r15d
jne 0x10032ef91
lea rdi, [0x100017270]
mov ecx, 0x30
repe cmpsw word [rsi], word [rdi]
je 0x10032edf9
mov edi, 0x80049e5b
jmp 0x10032ef4d
mov rax, qword [r13]
lea rdx, [rsp + 0x98]
xor r8d, r8d
mov rcx, r13
call qword [rax + 0x38]
mov edi, eax
cmp eax, r15d
jne 0x10032ef4d
mov r15d, dword [rsp + 0x98]
add r15d, 0xc
mov ecx, r15d
call fcn.100058294
mov r12, rax
xor eax, eax
cmp r12, rax
jne 0x10032ee41
mov edi, 0x8007000e
jmp 0x10032ef79
mov word [r12 + 2], ax
mov eax, 0x2c
lea rdi, [0x100017210]
mov rsi, r14
mov rcx, rax
mov byte [r12], 1
mov byte [r12 + 1], 2
repe cmpsw word [rsi], word [rdi]
jne 0x10032ee7b
mov dword [r12 + 4], 0x660e
mov dword [rbx + 0xc], 1
jmp 0x10032eec5
lea rdi, [0x1000171b0]
mov rsi, r14
mov rcx, rax
repe cmpsw word [rsi], word [rdi]
jne 0x10032ee9f
mov dword [r12 + 4], 0x660f
mov dword [rbx + 0xc], 2
jmp 0x10032eec5
lea rdi, [0x100017150]
mov rsi, r14
mov rcx, rax
repe cmpsw word [rsi], word [rdi]
jne 0x10032ef74
mov dword [r12 + 4], 0x6610
mov dword [rbx + 0xc], 3
mov dword [r12 + 8], 0xa400
mov rax, qword [r13]
lea r8, [r12 + 0xc]
lea rdx, [rsp + 0x98]
mov rcx, r13
call qword [rax + 0x38]
mov edi, eax
test eax, eax
jne 0x10032ef79
mov r8d, dword [rsp + 0x98]
lea rdx, [r12 + 0xc]
mov rcx, rbp
call fcn.10032d5b8
mov edi, eax
test eax, eax
jne 0x10032ef79
mov r9, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov r8d, r15d
mov rdx, r12
mov dword [rsp + 0x20], 0x40
call qword [sym.imp.ADVAPI32.dll_CryptImportKey]
xor r15d, r15d
cmp eax, r15d
jne 0x10032ef54
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edi, ax
or edi, 0x80070000
cmp eax, r15d
cmovle edi, eax
mov rsi, qword [rsp + 0x38]
jmp 0x10032ef91
mov rax, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov qword [rbx + 0x30], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x40], r15
mov qword [rax], rbx
jmp 0x10032ef9f
mov edi, 0x80049e5b
mov rsi, qword [rsp + 0x38]
xor r15d, r15d
jmp 0x10032ef91
mov edi, 0x80049e51
jmp 0x10032ef9f
mov edi, 0x80070057
jmp 0x10032ef91
cmp rbx, r15
je 0x10032ef9f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, rsi
call fcn.1000582b8
mov rcx, r12
call fcn.1000582b8
mov rcx, qword [rsp + 0x40]
cmp rcx, r15
je 0x10032efbf
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov eax, edi
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret