Function at 0x14002c150
Capabilities:
Encrypt or decrypt data via bcrypt

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xa0
mov rax, qword [0x140164030]
xor rax, rsp
mov qword [rsp + 0x98], rax
mov rbx, rdx
mov r14, rcx
mov qword [rsp + 0x70], rdx
cmp qword [rcx], 0
je 0x14002c3ba
cmp qword [rcx + 8], 0
je 0x14002c3ba
xor edi, edi
mov qword [r11 - 0x50], rdi
mov qword [r11 - 0x40], rdi
mov qword [r11 - 0x38], 0xf
mov byte [rsp + 0x78], dil
xor r8d, r8d
lea rdx, [0x140111ac0]
lea rcx, [r11 - 0x50]
call fcn.140028190
nop
mov r15d, edi
mov rax, qword [r14]
movsxd r12, dword [rax + 0x38]
mov rcx, r12
call fcn.1400c8928
mov rsi, rax
test rax, rax
je 0x14002c26d
mov rax, qword [r14]
movsxd rbp, dword [rax + 0x38]
cmp r12d, ebp
jl 0x14002c265
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x14002c265
mov r8, rbp
test ebp, ebp
jle 0x14002c20b
mov rcx, rsi
call fcn.1400c4a50
test ebp, ebp
je 0x14002c3a1
mov rcx, qword [r14 + 8]
mov dword [rsp + 0x70], edi
mov dword [rsp + 0x48], 2
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, ebp
mov rdx, rsi
mov rcx, qword [rcx + 8]
call qword [sym.imp.bcrypt.dll_BCryptEncrypt]
test eax, eax
jns 0x14002c286
lfence
mov edx, eax
lea rcx, str._AsusSync_CNG__RSA_BCryptEncrypt_get_size_Failed__Error_0x_x_n
call fcn.140095ab0
mov rcx, rsi
call fcn.1400c8914
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rsp + 0x88]
movups xmmword [rbx + 0x10], xmm1
jmp 0x14002c3e0
cmp dword [rsp + 0x70], edi
jle 0x14002c3a1
lfence
movsxd rcx, dword [rsp + 0x70]
call fcn.1400c8928
mov r15, rax
test rax, rax
je 0x14002c3a1
lfence
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x20], eax
mov r9, r15
mov r8d, ebp
mov rdx, rsi
mov rcx, qword [r14 + 8]
call fcn.14002d710
test eax, eax
jle 0x14002c3a1
lfence
mov r8d, eax
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.140028360
mov r14, rax
lea rax, [rsp + 0x78]
cmp rax, r14
je 0x14002c354
mov rdx, qword [rsp + 0x90]
cmp rdx, 0x10
jb 0x14002c32e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c329
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c40f
call fcn.1400c2470
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x88], xmm1
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14002c3a1
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002c38c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002c40f
call fcn.1400c2470
mov rcx, rsi
call fcn.1400c8914
mov rcx, r15
jmp 0x14002c268
mov rcx, rsi
call fcn.1400c8914
test r15, r15
je 0x14002c26d
mov rcx, r15
jmp 0x14002c268
xor edi, edi
mov qword [rdx], rdi
mov qword [rdx + 0x10], rdi
mov qword [rdx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdx], dil
xor r8d, r8d
lea rdx, [0x140111ac0]
mov rcx, rbx
call fcn.140028190
mov rax, rbx
mov rcx, qword [rsp + 0x98]
xor rcx, rsp
call fcn.1400c2450
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.1400c8b64
nop
int3