Function at 0x1800050d0
Capabilities:
Encrypt or decrypt data via bcrypt

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
mov qword [rsp + 0x108], r9
mov qword [rsp + 0x100], r8
mov r13d, edx
mov qword [rsp + 0xf8], rcx
mov rax, qword [0x18000a128]
xor rax, rsp
mov qword [rsp + 0x170], rax
lea rax, [rsp + 0x138]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov eax, edx
mov qword [rsp + 0xf0], rax
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
lea rbx, [rsp + 0x12c]
mov eax, 0xbb44c3e6
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xafc4d9b9
mov ecx, 0x37b3949e
nop dword [rax + rax]
cmove eax, ecx
cmp dword [0x18000a164], 0xa
cmovl eax, ecx
cmp eax, 0xf4afd829
jle 0x1800051e0
cmp eax, 0x2f21fd9d
jle 0x180005260
cmp eax, 0x504f9711
jle 0x18000532c
cmp eax, 0x71efb98e
jg 0x18000548a
cmp eax, 0x670463df
jle 0x1800056df
cmp eax, 0x6c8c9041
jg 0x180005b55
cmp eax, 0x670463e0
je 0x180005d8a
cmp eax, 0x67f84197
jne 0x18000517d
mov eax, 0x490038eb
jmp 0x18000517d
cmp eax, 0xbb44c3e5
jg 0x1800052e0
cmp eax, 0x9dc27850
jg 0x180005381
cmp eax, 0x901c2480
jle 0x1800054f2
cmp eax, 0x92e99aad
jle 0x180005717
cmp eax, 0x9630c2cb
jg 0x180005bb4
cmp eax, 0x92e99aae
je 0x180005da1
cmp eax, 0x956d3edb
jne 0x18000517d
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x110], rax
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c192a19
mov ecx, 0x749abd20
jmp 0x180005170
cmp eax, 0x12f46704
jg 0x1800053e0
cmp eax, 0x42b0d25
jle 0x18000553c
cmp eax, 0xc725aff
jle 0x180005756
cmp eax, 0x104a981a
jg 0x180005be1
cmp eax, 0xc725b00
je 0x180005dc0
cmp eax, 0xe64423a
jne 0x18000517d
mov rax, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc8]
mov rax, qword [rsp + 0xc0]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xed8dfe2d
mov ecx, 0x2b35ba09
jmp 0x180005170
cmp eax, 0xd4c82088
jg 0x180005435
cmp eax, 0xc5530064
jle 0x180005582
cmp eax, 0xca126c5c
jle 0x18000578b
cmp eax, 0xcee34775
jg 0x180005c04
cmp eax, 0xca126c5d
je 0x180005e2b
cmp eax, 0xccc06686
jne 0x18000517d
mov eax, 0x2eb8aac7
jmp 0x18000517d
cmp eax, 0x3d9072ef
jle 0x1800055e1
cmp eax, 0x42a15e91
jle 0x1800057c5
cmp eax, 0x4cd054aa
jg 0x180005c38
cmp eax, 0x42a15e92
je 0x180005e54
cmp eax, 0x490038eb
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c1707b
mov ecx, 0x2f21fd9e
jmp 0x180005170
cmp eax, 0xacf194d4
jle 0x180005621
cmp eax, 0xb04f9ad5
jle 0x1800057fb
cmp eax, 0xb5213065
jg 0x180005c62
cmp eax, 0xb04f9ad6
je 0x180005e5e
cmp eax, 0xb4e14ef2
jne 0x18000517d
cmp dword [rsp + 0x78], 0
setns byte [rsp + 0x61]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3f6548ab
mov ecx, 0x798c434b
jmp 0x180005170
cmp eax, 0x22c6f2bd
jle 0x180005657
cmp eax, 0x2b35ba08
jle 0x180005826
cmp eax, 0x2dcc86fd
jg 0x180005c96
cmp eax, 0x2b35ba09
je 0x180005e7c
cmp eax, 0x2bae2523
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa101365e
mov ecx, 0x4cd054ab
jmp 0x180005170
cmp eax, 0xeb56c1d6
jle 0x1800056a1
cmp eax, 0xee244c00
jle 0x180005865
cmp eax, 0xf3999159
jg 0x180005cca
cmp eax, 0xee244c01
je 0x180005e9a
cmp eax, 0xee86483e
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf4471070
mov ecx, 0xee244c01
jmp 0x180005170
cmp eax, 0x798c434a
jle 0x180005890
cmp eax, 0x7c028f6e
jg 0x180005cea
cmp eax, 0x798c434b
je 0x180005eb8
cmp eax, 0x7b2749a0
jne 0x18000517d
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0xa8], rax
cmp qword [rsp + 0xa8], 0
setne byte [rsp + 0x64]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ce8c035
mov ecx, 0x5850381f
jmp 0x180005170
cmp eax, 0x8c192a18
jg 0x1800058cf
cmp eax, 0x87326077
jle 0x180005d61
cmp eax, 0x87326078
je 0x180005ed8
cmp eax, 0x877d6564
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe3831a77
mov ecx, 0x572e48f5
jmp 0x180005170
cmp eax, 0xf67862e1
jg 0x1800058fa
cmp eax, 0xf4afd82a
je 0x180005ee2
cmp eax, 0xf50e3fb7
je 0x180005ef9
cmp eax, 0xf598f497
jne 0x18000517d
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x100]
mov qword [rcx], rax
mov eax, 0x8cbdcc2d
jmp 0x18000517d
cmp eax, 0xbe9b8711
jg 0x180005939
cmp eax, 0xbb44c3e6
je 0x18000514f
cmp eax, 0xbd5a2451
je 0x180005f2f
cmp eax, 0xbe2919f9
jne 0x18000517d
mov rcx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x90]
xor edx, edx
call r15
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x18184eb1
mov ecx, 0x1fe4d977
jmp 0x180005170
cmp eax, 0x346154cc
jg 0x180005988
cmp eax, 0x2f21fd9e
je 0x180005f4d
cmp eax, 0x30800ca2
je 0x180005f79
cmp eax, 0x3220e01f
jne 0x18000517d
cmp byte [rsp + 0x63], 0
mov eax, 0xc8bf9c25
mov ecx, 0xf598f497
jmp 0x180005b41
cmp eax, 0xa146a916
jg 0x1800059e3
cmp eax, 0x9dc27851
je 0x180005f97
cmp eax, 0x9f7540f5
je 0x180005fab
cmp eax, 0xa101365e
jne 0x18000517d
mov eax, 0x4cd054ab
jmp 0x18000517d
cmp eax, 0x1ce8c034
jg 0x180005ae6
cmp eax, 0x12f46705
je 0x180005fde
cmp eax, 0x18184eb1
je 0x180005ffc
cmp eax, 0x197a37dd
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3f6548ab
mov ecx, 0xb4e14ef2
jmp 0x180005170
cmp eax, 0xe3831a76
jg 0x180005b11
cmp eax, 0xd4c82089
je 0x18000601b
cmp eax, 0xd8b443cb
je 0x180006025
cmp eax, 0xd95f62c9
jne 0x18000517d
mov rax, qword [rsp + 0xb0]
mov eax, 0x3d9072f0
jmp 0x18000517d
cmp eax, 0x504f9712
je 0x18000602f
cmp eax, 0x572e48f5
je 0x180006059
cmp eax, 0x5850381f
jne 0x18000517d
cmp byte [rsp + 0x64], 0
mov eax, 0xcee34776
mov ecx, 0x877d6564
cmovne eax, ecx
jmp 0x18000517d
cmp eax, 0x901c2481
je 0x180006086
cmp eax, 0x90df5721
je 0x1800060a4
cmp eax, 0x9205f655
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x18184eb1
mov ecx, 0xbe2919f9
jmp 0x180005170
cmp eax, 0x42b0d26
je 0x1800060b9
cmp eax, 0x8c1707b
je 0x1800060f3
cmp eax, 0xbab5c04
jne 0x18000517d
cmp byte [rsp + 0x60], 0
mov eax, 0xc8bf9c25
mov ecx, 0xeb56c1d7
jmp 0x180005ec7
cmp eax, 0xc5530065
je 0x180006105
cmp eax, 0xc8bf9c25
je 0x18000610f
cmp eax, 0xca0ad75e
jne 0x18000517d
mov r12, qword [rsp + 0x68]
mov eax, 0xc8bf9c25
mov edi, 1
mov rsi, qword [rsp + 0x70]
jmp 0x18000517d
cmp eax, 0x3d9072f0
je 0x180006141
cmp eax, 0x3f6548ab
je 0x18000616d
cmp eax, 0x409241e2
jne 0x18000517d
cmp qword [rsp + 0x70], 0
setne byte [rsp + 0x62]
mov eax, 0xb04f9ad6
jmp 0x18000517d
cmp eax, 0xacf194d5
je 0x18000617b
cmp eax, 0xafc4d9b9
je 0x180006199
cmp eax, 0xaff3bfd3
jne 0x18000517d
mov eax, 0xabe61aef
jmp 0x18000517d
cmp eax, 0x22c6f2be
je 0x1800061af
cmp eax, 0x2a87d76a
je 0x1800061cd
cmp eax, 0x2ac6779a
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa3f079b3
mov ecx, 0xf4afd82a
jmp 0x180005170
cmp eax, 0xeb56c1d7
je 0x1800061d7
cmp eax, 0xeb89a65a
je 0x1800061f1
cmp eax, 0xed8dfe2d
jne 0x18000517d
mov eax, 0x2b35ba09
jmp 0x18000517d
cmp eax, 0x71efb98f
je 0x18000622a
cmp eax, 0x749abd20
je 0x18000625c
cmp eax, 0x75df0f04
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9a60d3bb
mov ecx, 0x71efb98f
jmp 0x180005170
cmp eax, 0x8c192a19
je 0x180006266
cmp eax, 0x8cbdcc2d
je 0x180006270
cmp eax, 0x8cf8dc38
jne 0x18000517d
mov eax, 0x2c67847
jmp 0x18000517d
cmp eax, 0xf67862e2
je 0x18000628e
cmp eax, 0xfb920adb
je 0x180006298
cmp eax, 0x2c67847
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8cf8dc38
mov ecx, 0xeb11cbc6
jmp 0x180005170
cmp eax, 0xbe9b8712
je 0x1800062a2
cmp eax, 0xbf59748f
je 0x1800062b7
cmp eax, 0xc44b60e2
jne 0x18000517d
mov rbp, r15
mov r15d, dword [rsp + 0x128]
call r14
mov rcx, rax
xor edx, edx
mov r8, r15
mov r15, rbp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x68], rax
mov eax, 0xbe9b8712
jmp 0x18000517d
cmp eax, 0x346154cd
je 0x1800062d5
cmp eax, 0x37b21af3
je 0x180006329
cmp eax, 0x37b3949e
jne 0x18000517d
mov qword [rsp + 0x138], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0xc8], rax
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xafc4d9b9
mov ecx, 0xaff3bfd3
jmp 0x180005170
cmp eax, 0xa146a917
je 0x180006347
cmp eax, 0xa3f079b3
je 0x180006351
cmp eax, 0xabe61aef
jne 0x18000517d
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x130], 0
mov qword [rsp + 0xd0], rbx
mov rax, qword [rsp + 0xd0]
mov dword [rsp + 0x12c], 0
lea rax, [rsp + 0x128]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov dword [rsp + 0x128], 0
lea rax, [rsp + 0x150]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov rax, qword [rsp + 0x98]
movaps xmm0, xmmword [str.Ms3ct34mMs3ct34mMs3ct34mMs3ct34m]
movaps xmmword [rax], xmm0
movaps xmm0, xmmword [0x1800081a0]
movaps xmmword [rax + 0x10], xmm0
lea rax, [rsp + 0x140]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa0]
movaps xmm0, xmmword [0x1800081b0]
movaps xmmword [rax], xmm0
xor r12d, r12d
lea rcx, [rsp + 0x138]
lea rdx, [0x1800087de]
xor r8d, r8d
xor r9d, r9d
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
test eax, eax
mov eax, 0xc8bf9c25
mov ecx, 0x37b21af3
cmovns eax, ecx
jmp 0x18000609b
cmp eax, 0x1ce8c035
je 0x18000635b
cmp eax, 0x1eb6d795
je 0x180006365
cmp eax, 0x1fe4d977
jne 0x18000517d
mov eax, 0xf50e3fb7
jmp 0x18000517d
cmp eax, 0xe3831a77
je 0x180006383
cmp eax, 0xe748f1eb
je 0x18000639c
cmp eax, 0xeb11cbc6
jne 0x18000517d
cmp byte [rsp + 0x62], 0
mov eax, 0xc8bf9c25
mov ecx, 0x504f9712
cmovne eax, ecx
mov r12, qword [rsp + 0x68]
xor edi, edi
mov rsi, qword [rsp + 0x70]
jmp 0x18000517d
cmp eax, 0x6c8c9042
je 0x1800063ba
cmp eax, 0x6d28cd2b
jne 0x18000517d
mov r9d, dword [rsp + 0x128]
mov rcx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x68]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
lea rdx, [rsp + 0x130]
call sub.bcrypt.dll_BCryptGenerateSymmetricKey
mov eax, 0x7d61695a
jmp 0x18000517d
cmp eax, 0x9630c2cc
je 0x1800063d1
cmp eax, 0x9a60d3bb
jne 0x18000517d
mov rax, qword [rsp + 0x90]
movzx eax, byte [rsp + 0x5d]
mov eax, 0x71efb98f
jmp 0x18000517d
cmp eax, 0x104a981b
je 0x1800063db
cmp eax, 0x10b81887
jne 0x18000517d
call r14
mov eax, 0xca126c5d
jmp 0x18000517d
cmp eax, 0xcee34776
je 0x1800063e5
cmp eax, 0xd3391a1d
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa146a917
mov ecx, 0x67f84197
jmp 0x180005170
cmp eax, 0x4cd054ab
je 0x1800063ff
cmp eax, 0x5007c80a
jne 0x18000517d
cmp dword [rsp + 0x7c], 0
sete byte [rsp + 0x5d]
mov eax, 0x75df0f04
jmp 0x18000517d
cmp eax, 0xb5213066
je 0x18000641d
cmp eax, 0xb6f7d43c
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42a15e92
mov ecx, 0xd4c82089
jmp 0x180005170
cmp eax, 0x2dcc86fe
je 0x180006427
cmp eax, 0x2eb8aac7
jne 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa3f079b3
mov ecx, 0x2ac6779a
jmp 0x180005170
cmp eax, 0xf399915a
je 0x18000643e
cmp eax, 0xf4471070
jne 0x18000517d
mov eax, 0xee244c01
jmp 0x18000517d
cmp eax, 0x7c028f6f
je 0x180006463
cmp eax, 0x7d61695a
jne 0x18000517d
mov r9d, dword [rsp + 0x128]
mov rcx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x68]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x20
lea rdx, [rsp + 0x130]
call sub.bcrypt.dll_BCryptGenerateSymmetricKey
mov dword [rsp + 0x78], eax
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6d28cd2b
mov ecx, 0x104a981b
jmp 0x180005170
cmp eax, 0x86ce931c
jne 0x18000647a
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x92e99aae
mov ecx, 0x9f7540f5
jmp 0x180005170
cmp dword [rsp + 0xbc], 0
setns byte [rsp + 0x5f]
mov eax, 0xee86483e
jmp 0x18000517d
mov rcx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0x88]
xor edx, edx
call r15
mov eax, 0x9f7540f5
jmp 0x18000517d
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x120]
mov rbp, rbx
mov rbx, qword [rsp + 0x108]
mov qword [rsp + 0x40], rbx
mov rbx, rbp
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x20], rdx
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x28], 0x10
mov rdx, qword [rsp + 0xf8]
mov r8d, r13d
xor r9d, r9d
call sub.bcrypt.dll_BCryptDecrypt
test eax, eax
setns byte [rsp + 0x63]
mov eax, 0x3220e01f
jmp 0x18000517d
call r14
mov qword [rsp + 0xe8], rax
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x10b81887
mov ecx, 0x87326078
jmp 0x180005170
mov eax, 0xb6f7d43c
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8cf8dc38
mov ecx, 0x2c67847
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xed8dfe2d
mov ecx, 0x833166a1
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf4471070
mov ecx, 0x901c2481
jmp 0x180005170
cmp byte [rsp + 0x61], 0
mov eax, 0xc8bf9c25
mov ecx, 0xf399915a
cmovne eax, ecx
xor edi, edi
mov r12, qword [rsp + 0x68]
xor esi, esi
jmp 0x18000517d
mov eax, 0x9205f655
jmp 0x18000517d
cmp byte [rsp + 0x66], 0
mov eax, 0x5007c80a
mov ecx, 0x90df5721
cmovne eax, ecx
jmp 0x18000517d
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x98]
mov rax, qword [rsp + 0x80]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42a15e92
mov ecx, 0xb6f7d43c
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa146a917
mov ecx, 0xd3391a1d
jmp 0x180005170
cmp qword [rsp + 0x88], 0
setne byte [rsp + 0x66]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c1707b
mov ecx, 0xccc06686
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5213066
mov ecx, 0xe748f1eb
jmp 0x180005170
cmp byte [rsp + 0x5e], 0
mov eax, 0xc8bf9c25
mov ecx, 0x12f46705
jmp 0x180006095
mov rcx, qword [rsp + 0xe0]
mov r8, qword [rsp + 0x88]
xor edx, edx
call r15
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x92e99aae
mov ecx, 0xc5530065
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeb89a65a
mov ecx, 0x346154cd
jmp 0x180005170
mov rcx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x90]
xor edx, edx
call r15
mov eax, 0xbe2919f9
jmp 0x18000517d
mov eax, 0xe64423a
jmp 0x18000517d
mov eax, 0x670463e0
jmp 0x18000517d
lea rax, [rsp + 0x140]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x120], rax
mov eax, 0xc725b00
jmp 0x18000517d
mov rcx, qword [rsp + 0xa8]
xor edx, edx
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe3831a77
mov ecx, 0x2a87d76a
jmp 0x180005170
cmp byte [rsp + 0x5f], 0
mov eax, 0xc8bf9c25
mov ecx, 0xc44b60e2
cmovne eax, ecx
xor r12d, r12d
xor edi, edi
xor esi, esi
jmp 0x18000517d
call r14
mov qword [rsp + 0xe0], rax
mov eax, 0x86ce931c
jmp 0x18000517d
mov rcx, qword [rsp + 0x110]
mov dword [rsp + 0x20], 0
lea rdx, str.ChainingMode
lea r8, str.ChainingModeCBC
mov r9d, 0x20
call sub.bcrypt.dll_BCryptSetProperty
test eax, eax
setns byte [rsp + 0x5e]
mov eax, 0x2bae2523
jmp 0x18000517d
mov rax, qword [rsp + 0x88]
mov eax, 0x2f21fd9e
jmp 0x18000517d
mov eax, 0x5007c80a
jmp 0x18000517d
mov qword [rsp + 0x88], r12
mov dword [rsp + 0x7c], edi
mov qword [rsp + 0x90], rsi
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1ce8c035
mov ecx, 0x7b2749a0
jmp 0x180005170
cmp qword [rsp + 0xb0], 0
setne byte [rsp + 0x65]
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd95f62c9
mov ecx, 0x2dcc86fe
jmp 0x180005170
mov eax, dword [rsp + 0x78]
mov eax, 0xb4e14ef2
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd95f62c9
mov ecx, 0x3d9072f0
jmp 0x180005170
mov qword [rsp + 0x138], 0
mov eax, 0x37b3949e
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x10b81887
mov ecx, 0xca126c5d
jmp 0x180005170
mov eax, 0xf67862e2
jmp 0x18000517d
lea rax, [rsp + 0x150]
mov qword [rsp + 0xd8], rax
mov eax, 0x1eb6d795
jmp 0x18000517d
mov rcx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x28], 0
lea rdx, str.ObjectLength
mov r9d, 4
call sub.bcrypt.dll_BCryptGetProperty
mov eax, 0x346154cd
jmp 0x18000517d
cmp qword [rsp + 0x90], 0
setne al
and al, byte [rsp + 0x5d]
mov byte [rsp + 0x67], al
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9a60d3bb
mov ecx, 0x7c028f6f
jmp 0x180005170
mov eax, 0x42b0d26
jmp 0x18000517d
mov eax, 0x956d3edb
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfb920adb
mov ecx, 0xbf59748f
jmp 0x180005170
mov eax, 0xcee34776
jmp 0x18000517d
mov eax, 0xbf59748f
jmp 0x18000517d
cmp qword [rsp + 0x68], 0
setne byte [rsp + 0x60]
mov eax, 0xbab5c04
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfb920adb
mov ecx, 0x9630c2cc
jmp 0x180005170
mov rcx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x28], 0
lea rdx, str.ObjectLength
mov r9d, 4
call sub.bcrypt.dll_BCryptGetProperty
mov dword [rsp + 0xbc], eax
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeb89a65a
mov ecx, 0xd8b443cb
jmp 0x180005170
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c192a19
mov ecx, 0x956d3edb
jmp 0x180005170
mov eax, 0xd3391a1d
jmp 0x18000517d
mov eax, 0x2ac6779a
jmp 0x18000517d
mov eax, 0x7b2749a0
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6d28cd2b
mov ecx, 0x7d61695a
jmp 0x180005170
mov rcx, qword [rsp + 0xa8]
xor edx, edx
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
mov eax, 0x572e48f5
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5213066
mov ecx, 0xca0ad75e
jmp 0x180005170
mov rcx, qword [rsp + 0xb0]
call sub.bcrypt.dll_BCryptDestroyKey
mov eax, 0xbd5a2451
jmp 0x18000517d
mov eax, 0x30800ca2
jmp 0x18000517d
mov eax, 0x197a37dd
jmp 0x18000517d
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xb0], rax
mov eax, 0xacf194d5
jmp 0x18000517d
mov eax, dword [0x18000a160]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa101365e
mov ecx, 0x9dc27851
jmp 0x180005170
mov eax, 0xe748f1eb
jmp 0x18000517d
cmp byte [rsp + 0x65], 0
mov eax, 0x490038eb
mov ecx, 0x6c8c9042
cmovne eax, ecx
jmp 0x18000517d
call r14
mov rcx, rax
xor edx, edx
mov r8, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0x70], rax
mov eax, 0x409241e2
jmp 0x18000517d
cmp byte [rsp + 0x67], 0
mov eax, 0xf50e3fb7
mov ecx, 0x22c6f2be
cmovne eax, ecx
jmp 0x18000517d
cmp eax, 0x833166a1
jne 0x18000517d
mov esi, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.180006bc0
mov eax, esi
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret