Function at 0x1401891c0
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [0x140479124], 0
mov rbx, rcx
jne 0x140189218
cmp qword [0x140479198], 0
jne 0x140189490
lea rcx, str.ncrypt.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140479198], rax
test rax, rax
jne 0x140189220
mov rcx, rbx
mov byte [0x140479124], 1
call fcn.1400f76f0
mov rax, qword [rbx]
lea rdx, str.Failed_to_load_ncrypt.dll
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
add rsp, 0x20
pop rbx
ret
lea rdx, str.NCryptDecrypt
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479138], rax
test rax, rax
jne 0x140189266
lea rdx, str.NCryptDecrypt_function_not_found.
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
mov byte [0x140479124], 1
mov qword [0x140479198], 0
add rsp, 0x20
pop rbx
ret
mov rcx, qword [0x140479198]
lea rdx, str.NCryptOpenKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479178], rax
test rax, rax
jne 0x14018928f
lea rdx, str.NCryptOpenKey_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptImportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479180], rax
test rax, rax
jne 0x1401892b8
lea rdx, str.NCryptImportKey_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptCreatePersistedKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479188], rax
test rax, rax
jne 0x1401892e4
lea rdx, str.NCryptCreatePersistedKey_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptFinalizeKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479190], rax
test rax, rax
jne 0x140189310
lea rdx, str.NCryptFinalizeKey_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptExportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479170], rax
test rax, rax
jne 0x14018933c
lea rdx, str.NCryptExportKey_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptEnumKeys
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479160], rax
test rax, rax
jne 0x140189368
lea rdx, str.NCryptEnumKeys_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptFreeBuffer
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479168], rax
test rax, rax
jne 0x140189394
lea rdx, str.NCryptFreeBuffer_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptEnumStorageProviders
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479158], rax
test rax, rax
jne 0x1401893c0
lea rdx, str.NCryptEnumStorageProviders_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptOpenStorageProvider
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479150], rax
test rax, rax
jne 0x1401893ec
lea rdx, str.NCryptOpenStorageProvider_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptSignHash
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479140], rax
test rax, rax
jne 0x140189418
lea rdx, str.NCryptSignHash_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptFreeObject
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479130], rax
test rax, rax
je 0x14018940c
mov rcx, qword [0x140479198]
lea rdx, str.NCryptSetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479148], rax
test rax, rax
jne 0x140189464
lea rdx, str.NCryptSetProperty_function_not_found.
jmp 0x140189243
mov rcx, qword [0x140479198]
lea rdx, str.NCryptGetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140479128], rax
test rax, rax
jne 0x140189490
lea rdx, str.NCryptGetProperty_function_not_found.
jmp 0x140189243
mov al, 1
add rsp, 0x20
pop rbx
ret