Function at 0x1400055f0
Capabilities:
Encrypt or decrypt data via bcrypt

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rdi, rcx
xor r12d, r12d
mov dword [rsp + 0x50], r12d
mov dword [rbp + 0x50], r12d
mov rbx, qword [rbp + 0xd0]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
jne 0x14000564b
cmp qword [rbx + 0x48], r12
lea rdx, [0x140047278]
je 0x14000564b
mov rdx, qword [rbx + 0x38]
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptOpenAlgorithmProvider]
test eax, eax
jns 0x14000569f
lea r14, vtable.CVolObject.0
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rsi, vtable.CVolMem.0
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov r15d, 0x40
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
jmp 0x140006440
mov rsi, qword [rbp + 0xe0]
mov r8, qword [rsi + 0x18]
test r8, r8
je 0x1400056c2
mov rax, 0xffffffffffffffff
inc rax
cmp word [r8 + rax*2], r12w
jne 0x1400056b6
jmp 0x1400056e1
mov rax, qword [rsi + 0x48]
test rax, rax
jne 0x1400056d7
mov rax, r12
lea r8, [0x140047278]
jmp 0x1400056e1
shr rax, 1
dec rax
mov r8, qword [rsi + 0x38]
lea r9d, [rax*2 + 2]
mov dword [rsp + 0x20], r12d
lea rdx, str.ChainingMode
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptSetProperty]
test eax, eax
jns 0x140005750
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
lea r14, vtable.CVolObject.0
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rsi, vtable.CVolMem.0
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov r15d, 0x40
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
jmp 0x140006440
mov r8, qword [0x140058dd8]
test r8, r8
jne 0x140005772
lea r8, [0x140047278]
cmp qword [0x140058e08], r12
cmovne r8, qword [0x140058df8]
mov rax, qword [rbx + 0x18]
test rax, rax
jne 0x14000578c
cmp qword [rbx + 0x48], r12
lea rax, [0x140047278]
je 0x14000578c
mov rax, qword [rbx + 0x38]
sub r8, rax
nop
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400057a4
add rax, 2
test ecx, ecx
jne 0x140005790
test edx, edx
jne 0x14000581a
mov dword [rsp + 0x20], r12d
lea r9d, [rdx + 4]
lea r8, [rbp + 0xd8]
lea rdx, str.EffectiveKeyLength
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptSetProperty]
test eax, eax
jns 0x14000581a
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
lea r14, vtable.CVolObject.0
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rsi, vtable.CVolMem.0
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov r15d, 0x40
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
jmp 0x140006440
mov r8, qword [0x140059918]
test r8, r8
jne 0x14000583c
lea r8, [0x140047278]
cmp qword [0x140059948], r12
cmovne r8, qword [0x140059938]
mov rax, qword [rsi + 0x18]
test rax, rax
jne 0x140005856
cmp qword [rsi + 0x48], r12
lea rax, [0x140047278]
je 0x140005856
mov rax, qword [rsi + 0x38]
sub r8, rax
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140005874
add rax, 2
test ecx, ecx
jne 0x140005860
test edx, edx
jne 0x1400058e7
mov dword [rsp + 0x20], r12d
lea r9d, [rdx + 4]
lea r8, [rbp + 0x50]
lea rdx, str.MessageBlockLength
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptSetProperty]
test eax, eax
jns 0x1400058e7
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
lea r14, vtable.CVolObject.0
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rsi, vtable.CVolMem.0
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov r15d, 0x40
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
jmp 0x140006440
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xd0]
lea rdx, str.BlockLength
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptGetProperty]
test eax, eax
jns 0x140005964
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
lea r14, vtable.CVolObject.0
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rsi, vtable.CVolMem.0
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov r15d, 0x40
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
jmp 0x140006440
lea rax, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp - 0x30], rax
lea r14, vtable.CVolObject.0
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r12
lea rsi, vtable.CVolMem.0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], r12
mov qword [rbp - 0x10], r12
mov r15d, 0x40
mov qword [rbp], r15
mov qword [rbp - 0x30], rsi
mov r13, qword [rbp + 0xf0]
mov rdx, r13
lea rcx, [rbp - 0x30]
call fcn.140004ca0
nop
movsxd rbx, dword [rbp + 0xf8]
mov rax, qword [r13 + 0x28]
cmp rax, rbx
jle 0x140005a78
cmp rbx, qword [rbp - 8]
je 0x140005b3a
test rbx, rbx
jne 0x140005a03
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x1400059f2
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], r12
mov qword [rbp - 0x10], r12
jmp 0x140005b3a
mov rcx, qword [rbp - 0x18]
test rcx, rcx
jne 0x140005a1d
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.14001e300
jmp 0x140005b3a
mov r12, qword [rbp]
test r12, r12
cmovle r12, r15
mov rax, qword [rbp - 0x10]
cmp rax, rbx
jl 0x140005a45
sub rax, rbx
cmp rax, r12
jg 0x140005a45
mov qword [rbp - 8], rbx
xor r12d, r12d
jmp 0x140005b3a
mov rax, rbx
cqo
idiv r12
sub r12, rdx
add r12, rbx
mov r8, r12
mov rdx, rcx
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x10]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], rbx
xor r12d, r12d
jmp 0x140005b3a
sub rbx, rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0x40], rax
lea r12, [rbx + rax]
cmp r12, rax
jne 0x140005a95
mov rcx, qword [rbp - 0x18]
jmp 0x140005b29
test r12, r12
jne 0x140005ac2
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x140005aae
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
xor r12d, r12d
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], r12
mov qword [rbp - 0x10], r12
mov ecx, r12d
jmp 0x140005b2c
mov rcx, qword [rbp - 0x18]
test rcx, rcx
jne 0x140005ad9
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.14001e300
jmp 0x140005b26
mov r13, qword [rbp]
test r13, r13
cmovle r13, r15
mov rax, qword [rbp - 0x10]
cmp rax, r12
jl 0x140005afb
sub rax, r12
cmp rax, r13
jg 0x140005afb
mov qword [rbp - 8], r12
jmp 0x140005b29
mov rax, r12
cqo
idiv r13
sub r13, rdx
add r13, r12
mov r8, r13
mov rdx, rcx
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x10]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r12
mov rcx, rax
xor r12d, r12d
add rcx, qword [rbp + 0x40]
mov r8, rbx
xor edx, edx
call fcn.140023920
lea rax, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x68], rsi
mov r13, qword [rbp + 0xc8]
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.140004ca0
nop
mov eax, dword [rbp + 0xd8]
cdq
and edx, 7
add eax, edx
sar eax, 3
movsxd rbx, eax
mov rax, qword [r13 + 0x28]
cmp rax, rbx
jle 0x140005c53
mov rax, qword [rbp - 0x40]
cmp rbx, rax
je 0x140005d19
test rbx, rbx
jne 0x140005bd9
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x140005bc2
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
mov qword [rbp - 0x50], r12
mov rax, r12
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x48], r12
mov rcx, r12
jmp 0x140005d27
cmp qword [rbp - 0x50], 0
jne 0x140005bf1
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.14001e300
jmp 0x140005d15
mov r12, qword [rbp - 0x38]
test r12, r12
cmovle r12, r15
mov rax, qword [rbp - 0x48]
cmp rax, rbx
jl 0x140005c1c
sub rax, rbx
cmp rax, r12
jg 0x140005c1c
mov rax, rbx
mov qword [rbp - 0x40], rbx
xor r12d, r12d
jmp 0x140005d19
mov rax, rbx
cqo
idiv r12
sub r12, rdx
add r12, rbx
mov r8, r12
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x10]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r12
mov rax, rbx
mov qword [rbp - 0x40], rbx
xor r12d, r12d
jmp 0x140005d19
sub rbx, rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
lea r12, [rax + rbx]
cmp r12, rax
jne 0x140005c70
mov rcx, qword [rbp - 0x50]
jmp 0x140005d04
test r12, r12
jne 0x140005c9d
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x140005c89
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
xor r12d, r12d
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x48], r12
mov ecx, r12d
jmp 0x140005d07
mov rcx, qword [rbp - 0x50]
test rcx, rcx
jne 0x140005cb4
mov rdx, r12
lea rcx, [rbp - 0x68]
call fcn.14001e300
jmp 0x140005d01
mov r13, qword [rbp - 0x38]
test r13, r13
cmovle r13, r15
mov rax, qword [rbp - 0x48]
cmp rax, r12
jl 0x140005cd6
sub rax, r12
cmp rax, r13
jg 0x140005cd6
mov qword [rbp - 0x40], r12
jmp 0x140005d04
mov rax, r12
cqo
idiv r13
sub r13, rdx
add r13, r12
mov r8, r13
mov rdx, rcx
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x10]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r12
mov rcx, rax
xor r12d, r12d
add rcx, qword [rbp + 0x40]
mov r8, rbx
xor edx, edx
call fcn.140023920
mov rax, qword [rbp - 0x40]
test rax, rax
jne 0x140005d23
mov rcx, r12
jmp 0x140005d27
mov rcx, qword [rbp - 0x50]
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x48]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptGenerateSymmetricKey]
test eax, eax
jns 0x140005dd6
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov qword [rdi], r14
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
mov qword [rdi], rsi
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x28], r12
mov qword [rdi + 0x20], r12
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
mov qword [rbp - 0x68], rsi
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x140005d9d
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x30], rsi
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x140005dc5
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], r12
mov qword [rbp - 0x10], r12
jmp 0x14000643c
lea rcx, vtable.CVolCommonBaseWithMemManager.0
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r15
mov ebx, dword [rbp + 0xe8]
mov r12d, ebx
test ebx, ebx
mov eax, 0
cmovs r12d, eax
mov dword [rbp + 0x100], r12d
mov qword [rbp + 8], rcx
mov qword [rbp + 8], r14
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 8], rsi
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x38], r15
mov qword [rbp + 8], rsi
mov r13, qword [rbp + 0xc0]
mov rdx, r13
lea rcx, [rbp + 8]
call fcn.140004ca0
nop
cmp ebx, 0xffffffff
jne 0x140005f3f
xor edx, edx
mov eax, dword [r13 + 0x28]
mov ecx, dword [rbp + 0xd0]
div ecx
sub ecx, edx
mov eax, ecx
mov qword [rbp + 0x40], rax
mov r13, qword [rbp + 0x30]
lea rbx, [rcx + r13]
cmp rbx, r13
jne 0x140005e93
mov rcx, qword [rbp + 0x20]
jmp 0x140005f31
test rbx, rbx
jne 0x140005ebc
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x140005eac
lea rcx, [rbp + 8]
mov rax, qword [rbp + 8]
call qword [rax + 0x18]
xor ecx, ecx
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x28], rcx
jmp 0x140005f31
mov rcx, qword [rbp + 0x20]
test rcx, rcx
jne 0x140005ed3
mov rdx, rbx
lea rcx, [rbp + 8]
call fcn.14001e300
jmp 0x140005f2e
mov r12, qword [rbp + 0x38]
test r12, r12
cmovle r12, r15
mov rax, qword [rbp + 0x28]
cmp rax, rbx
jl 0x140005efc
sub rax, rbx
cmp rax, r12
jg 0x140005efc
mov qword [rbp + 0x30], rbx
mov r12d, dword [rbp + 0x100]
jmp 0x140005f31
mov rax, rbx
cqo
idiv r12
sub r12, rdx
add r12, rbx
mov r8, r12
mov rdx, rcx
lea rcx, [rbp + 8]
mov rax, qword [rbp + 8]
call qword [rax + 0x10]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], rbx
mov r12d, dword [rbp + 0x100]
mov rcx, rax
add rcx, r13
mov r8, qword [rbp + 0x40]
xor edx, edx
call fcn.140023920
mov rcx, qword [rsp + 0x78]
cmp qword [rbp - 0x78], 0
mov r13d, 0
cmove rcx, r13
mov rdx, qword [rbp + 0x20]
mov rax, qword [rbp + 0x30]
test rax, rax
cmove rdx, r13
mov dword [rsp + 0x48], r12d
lea r8, [rbp + 0xb8]
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x38], r13d
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8d, eax
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptEncrypt]
test eax, eax
jns 0x140006083
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptDestroyKey]
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
mov qword [rdi], r14
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
mov qword [rdi], rsi
mov qword [rdi + 0x18], r13
mov qword [rdi + 0x28], r13
mov qword [rdi + 0x20], r13
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
mov qword [rbp + 8], rsi
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x140005ff4
lea rcx, [rbp + 8]
mov rax, qword [rbp + 8]
call qword [rax + 0x18]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x28], r13
mov qword [rbp + 8], r14
mov qword [rsp + 0x60], rsi
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140006020
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x18]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r13
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x68], rsi
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x14000604a
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x30], rsi
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x140006072
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
mov qword [rbp - 0x18], r13
mov qword [rbp - 8], r13
mov qword [rbp - 0x10], r13
jmp 0x14000643c
mov r12d, dword [rbp + 0xb8]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000612d
mov r8, qword [rbp - 0x78]
cmp r12, r8
je 0x140006160
test r12, r12
jne 0x1400060d2
mov rdx, rcx
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x18]
mov rcx, r13
mov qword [rsp + 0x78], rcx
mov r8, r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r13
jmp 0x140006160
mov rbx, qword [rbp - 0x70]
test rbx, rbx
cmovle rbx, r15
mov rax, qword [rbp - 0x80]
cmp rax, r12
jl 0x1400060f7
sub rax, r12
cmp rax, rbx
jg 0x1400060f7
mov r8, r12
mov qword [rbp - 0x78], r12
jmp 0x140006160
mov rax, r12
cqo
idiv rbx
sub rbx, rdx
add rbx, r12
mov r8, rbx
mov rdx, rcx
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x10]
mov rcx, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rbx
mov r8, r12
mov qword [rbp - 0x78], r12
jmp 0x140006160
test r12, r12
je 0x14000615c
mov rbx, qword [rbp - 0x70]
test rbx, rbx
cmovle rbx, r15
mov rax, r12
cqo
idiv rbx
sub rbx, rdx
add rbx, r12
mov rdx, rbx
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax]
jmp 0x140006118
mov r8, qword [rbp - 0x78]
xor edx, edx
call fcn.140023920
mov rax, qword [rbp + 0xf0]
test byte [rax + 8], 1
je 0x14000617c
mov r10d, r13d
mov r9, r13
jmp 0x14000618b
mov r10, qword [rbp - 8]
mov r9, qword [rbp - 0x18]
test r10, r10
cmove r9, r13
mov r8, qword [rsp + 0x78]
cmp qword [rbp - 0x78], r13
cmove r8, r13
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
cmove rdx, r13
mov eax, dword [rbp + 0x100]
mov dword [rsp + 0x48], eax
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x40], rax
mov eax, dword [rbp + 0xb8]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], r9
xor r9d, r9d
mov r8d, ecx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptEncrypt]
mov ebx, eax
mov qword [rbp + 8], rsi
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x140006201
lea rcx, [rbp + 8]
mov r8, qword [rbp + 8]
call qword [r8 + 0x18]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x28], r13
mov qword [rbp + 8], r14
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.bcrypt.dll_BCryptDestroyKey]
xor edx, edx
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
test ebx, ebx
jns 0x1400062d5
mov qword [rdi], r14
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
mov qword [rdi], rsi
mov qword [rdi + 0x18], r13
mov qword [rdi + 0x28], r13
mov qword [rdi + 0x20], r13
mov qword [rdi + 0x30], r15
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x60], rsi
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140006272
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x18]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r13
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x68], rsi
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x14000629c
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x30], rsi
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x1400062c4
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
mov qword [rbp - 0x18], r13
mov qword [rbp - 8], r13
mov qword [rbp - 0x10], r13
jmp 0x14000643c
mov r12d, dword [rbp + 0xb8]
cmp r12, qword [rbp - 0x78]
je 0x14000638b
test r12, r12
jne 0x140006311
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140006302
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x18]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r13
jmp 0x14000638b
mov rcx, qword [rsp + 0x78]
mov rbx, qword [rbp - 0x70]
test rcx, rcx
jne 0x140006345
test rbx, rbx
cmovle rbx, r15
mov rax, r12
cqo
idiv rbx
sub rbx, rdx
add rbx, r12
mov rdx, rbx
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax]
jmp 0x14000637e
test rbx, rbx
cmovle rbx, r15
mov rax, qword [rbp - 0x80]
cmp rax, r12
jl 0x14000635d
sub rax, r12
cmp rax, rbx
jle 0x140006387
mov rax, r12
cqo
idiv rbx
sub rbx, rdx
add rbx, r12
mov r8, rbx
mov rdx, rcx
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x10]
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], r12
mov qword [rdi], r14
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
mov qword [rdi], rsi
mov qword [rdi + 0x18], r13
mov qword [rdi + 0x28], r13
mov qword [rdi + 0x20], r13
mov qword [rdi + 0x30], r15
mov qword [rdi], rsi
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.140004ca0
nop
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x60], rsi
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x1400063de
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x60]
call qword [rax + 0x18]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x80], r13
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x68], rsi
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x140006408
lea rcx, [rbp - 0x68]
mov rax, qword [rbp - 0x68]
call qword [rax + 0x18]
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x30], rsi
mov rdx, qword [rbp - 0x18]
test rdx, rdx
je 0x140006430
lea rcx, [rbp - 0x30]
mov rax, qword [rbp - 0x30]
call qword [rax + 0x18]
mov qword [rbp - 0x18], r13
mov qword [rbp - 8], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 0x30], r14
mov rax, rdi
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret