Function at 0x1401630e0
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [0x1403cf31c], 0
mov rbx, rcx
jne 0x140163138
cmp qword [0x1403cf390], 0
jne 0x1401633b0
lea rcx, str.ncrypt.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1403cf390], rax
test rax, rax
jne 0x140163140
mov rcx, rbx
mov byte [0x1403cf31c], 1
call fcn.1400d1db0
mov rax, qword [rbx]
lea rdx, str.Failed_to_load_ncrypt.dll
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
add rsp, 0x20
pop rbx
ret
lea rdx, str.NCryptDecrypt
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf330], rax
test rax, rax
jne 0x140163186
lea rdx, str.NCryptDecrypt_function_not_found.
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
mov byte [0x1403cf31c], 1
mov qword [0x1403cf390], 0
add rsp, 0x20
pop rbx
ret
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptOpenKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf370], rax
test rax, rax
jne 0x1401631af
lea rdx, str.NCryptOpenKey_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptImportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf378], rax
test rax, rax
jne 0x1401631d8
lea rdx, str.NCryptImportKey_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptCreatePersistedKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf380], rax
test rax, rax
jne 0x140163204
lea rdx, str.NCryptCreatePersistedKey_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptFinalizeKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf388], rax
test rax, rax
jne 0x140163230
lea rdx, str.NCryptFinalizeKey_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptExportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf368], rax
test rax, rax
jne 0x14016325c
lea rdx, str.NCryptExportKey_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptEnumKeys
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf358], rax
test rax, rax
jne 0x140163288
lea rdx, str.NCryptEnumKeys_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptFreeBuffer
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf360], rax
test rax, rax
jne 0x1401632b4
lea rdx, str.NCryptFreeBuffer_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptEnumStorageProviders
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf350], rax
test rax, rax
jne 0x1401632e0
lea rdx, str.NCryptEnumStorageProviders_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptOpenStorageProvider
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf348], rax
test rax, rax
jne 0x14016330c
lea rdx, str.NCryptOpenStorageProvider_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptSignHash
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf338], rax
test rax, rax
jne 0x140163338
lea rdx, str.NCryptSignHash_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptFreeObject
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf328], rax
test rax, rax
je 0x14016332c
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptSetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf340], rax
test rax, rax
jne 0x140163384
lea rdx, str.NCryptSetProperty_function_not_found.
jmp 0x140163163
mov rcx, qword [0x1403cf390]
lea rdx, str.NCryptGetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1403cf320], rax
test rax, rax
jne 0x1401633b0
lea rdx, str.NCryptGetProperty_function_not_found.
jmp 0x140163163
mov al, 1
add rsp, 0x20
pop rbx
ret