Function at 0x180064d60
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x318
mov r15, rcx
xor esi, esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x30], esi
mov ebx, 0x30
mov word [rsp + 0xf0], bx
xor edx, edx
mov r8d, 0xff
lea rcx, [rsp + 0xf2]
call fcn.18006e5e0
mov word [rsp + 0xb0], bx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xb2], xmm0
mov qword [rsp + 0xc2], rax
mov dword [rsp + 0xca], eax
mov word [rsp + 0xce], ax
mov byte [rsp + 0xd0], al
mov word [rsp + 0x58], bx
mov qword [rsp + 0x5a], rax
mov dword [rsp + 0x62], eax
mov word [rsp + 0x66], ax
mov byte [rsp + 0x68], al
mov word [rsp + 0x78], bx
mov qword [rsp + 0x7a], rax
mov dword [rsp + 0x82], eax
mov word [rsp + 0x86], ax
mov byte [rsp + 0x88], al
mov word [rsp + 0x200], bx
xor edx, edx
mov r8d, 0xff
lea rcx, [rsp + 0x202]
call fcn.18006e5e0
nop
mov r12d, 1
mov word [rsp + 0x358], r12w
mov qword [rsp + 0x90], r15
lea r9d, [rsi + 0x53]
lea r8, [rsp + 0x358]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0xf0]
call fcn.18002dab0
mov qword [rsp + 0xd8], rax
mov dword [rsp + 0x30], eax
cmp eax, 0x100
ja 0x180065153
mov eax, 2
mov word [rsp + 0x360], ax
mov qword [rsp + 0x98], r15
lea r9d, [rsi + 0x53]
lea r8, [rsp + 0x360]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xb0]
call fcn.18002dab0
mov rbx, rax
mov qword [rsp + 0xe0], rax
cmp eax, 0x20
ja 0x180065153
mov eax, 3
mov word [rsp + 0x368], ax
mov qword [rsp + 0xa0], r15
lea r9d, [rsi + 0x53]
lea r8, [rsp + 0x368]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x78]
call fcn.18002dab0
mov qword [rsp + 0xe8], rax
mov edx, esi
mov dword [rsp + 0x70], edx
cmp edx, 0x10
jge 0x180064f3b
movsxd rcx, edx
cmp edx, eax
ja 0x180064f32
movzx r8d, byte [rsp + rcx + 0x78]
test r8b, r8b
je 0x180064f32
movsxd rcx, edx
mov byte [rsp + rcx + 0x58], r8b
jmp 0x180064f37
mov byte [rsp + rcx + 0x58], 0x30
inc edx
jmp 0x180064f0d
mov edi, esi
mov dword [rsp + 0x48], esi
mov r14d, dword [rsp + 0x30]
nop word [rax + rax]
lea rax, [rsp + 0xf0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180064f60
movsxd rax, edi
cmp rax, r8
jae 0x180064fb1
lea rcx, [rsp + 0xf0]
add rcx, rax
cmp byte [rcx], 0x20
ja 0x180064fa9
sub r8, rax
lea eax, [rdi + 1]
movsxd rdx, eax
lea rax, [rsp + 0xf0]
add rdx, rax
call fcn.18006e1d0
dec r14d
mov dword [rsp + 0x30], r14d
dec edi
mov dword [rsp + 0x48], edi
inc edi
mov dword [rsp + 0x48], edi
jmp 0x180064f50
mov dword [rsp + 0x20], 8
mov r9d, 0x18
lea r8, str.Waiting_for_pending_property_request_worker_finished.
lea rdx, str.ich_lr3_el2
lea rcx, [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x180065018
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x8009000f
jne 0x180065153
mov dword [rsp + 0x20], esi
mov r9d, 0x18
lea r8, str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider
lea rdx, str.ich_lr3_el2
lea rcx, [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x180065153
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800c
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x180065153
xor r9d, r9d
mov r8d, ebx
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x180065153
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, r12d
mov r8, qword [rsp + 0x38]
mov edx, 0x6610
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
je 0x180065153
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
test eax, eax
je 0x180065153
mov qword [rsp + 0x38], rsi
xor r9d, r9d
lea r8, [rsp + 0x58]
mov edx, r12d
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_CryptSetKeyParam]
test eax, eax
je 0x180065153
mov ecx, dword [rsp + 0x30]
call fcn.18007218c
mov rbx, rax
mov r8d, dword [rsp + 0x30]
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.18006e1d0
mov ecx, dword [rsp + 0x30]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0x30]
mov edx, 0xed
mov rcx, rbx
call fcn.18004e450
mov rbx, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8d, r12d
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
je 0x18006514b
mov r8d, dword [rsp + 0x30]
mov rdx, rbx
lea rcx, [rsp + 0x200]
call fcn.18006e1d0
mov rcx, rbx
call fcn.180072184
jmp 0x18006515f
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180065174
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov qword [rsp + 0x50], rsi
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180065189
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov qword [rsp + 0x38], rsi
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1800651a0
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov qword [rsp + 0x40], rsi
mov eax, dword [rsp + 0x30]
mov qword [rsp + 0x360], rax
mov qword [rsp + 0x358], r15
lea rax, [rsp + 0x200]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x358]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x360]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0x75]
call fcn.18003c470
add rsp, 0x318
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret