Function at 0x140001070
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x78
mov rax, qword [0x140004008]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov ecx, 0x380
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
xor ebx, ebx
mov rbp, rax
test rax, rax
jne 0x1400010a4
mov ebp, ebx
jmp 0x140001161
mov qword [rsp + 0xa0], r12
mov edi, ebx
mov qword [rsp + 0xa8], r13
lea r12, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
mov qword [rsp + 0xb0], r14
lea r13, str.tmk1WAXSNAQJJacIc_QxftqYwpNoX8YtfoVTRz4IAZuu8GQf4gQzYGak2v0zjyaGAtbvpu4zT_CAYTRgrF5pmp4l2y_e0gjP4_h6I699W__2yFxc6zavlN09sJppAl3na7TZdH0sdpaHnnTQ_SzUvJKhcYg1RpxADZP41jEq3nWib18_fRiKLLGVv00TpOMF39hiKfinR3sssvWA9SnCyO_Zmw38nWM5WzBn9U4YyTlPcdWKNWT3KgPdMXyaJAf9fpOFrjijp8ntAC0FzSdzA2wqr746NCaAgtYIqa03P79McWNcRysR809pWdcIODdMMxTNv1yzxUFaHBfnF0Jh0zv4rgItktyEcDPJQypIpOYtDXjet0paY8lxZjhdkMUiIgK7od3jVha6I62cXVCOyVVKUqwMD4kRkwUkOkyMtBso_0lHXfwAAHMAgJvMbRQF8ShuAXcBrGSwPrq763S6T_CrD6aXgH3d90wHgezWs_Wls0YPODRSHN1fQqDFIfDH8bZcdh2QY6vDC5zQAwwQEFKeahs_2QNpSjM2Rik_PklU5jGvmCsPQ0kIPN8kkQFD297Z1_5lnkV6draV9S1Z803nXqW6pHbz8iMgkuaPGr6a7AYIuuArG3snabtePSGpv28HN_zddpqD0gFyVbtZX3rwvjlWzB791SsMJISCF3AktdGfypJTfeHeomNljbRbVopehzWTWO8xtqRTHv4dgDGM3XxvbKr1ePjWQFVkJrs9_5Lh9ozTpLwVxVkZCVEXH0NwdVxVQrwk9nDDw3qSglXLVkKVgSYvLFgUkNpETdCMz5NsWie7jQpuOdP0EnCInPc205Y968vzBIPLc551xIsL6h2gYvm8JiAGAOYULe_N9Ks5uOjqVoWm9EprJRB5oKjvpsbyUi7ha4d4MAmmtltD_8fQVACQXl7ZPC7cIcfkr2uTiB58jZ1C6AWF0yaBEJM_R2WUowDm84ewIDGGE4of70cALTUY6hQeT_3n2vSmH2KaYJKSrE8WuCmAbn1zFEGeZrk9C8C9PT39IR1QCwjSqTuILrUeofnmBdahGfqz22wIZs1DDug_fqGptBXNNuBj_cFwaMo9JI8K59wDgIyp4kKEF1_myzD2GMPaIjyJPkasmgwD4pm75QTpjEqS37UNUdQ68G7GTZPEO6tD1ibuI4
mov qword [rsp + 0x70], r15
mov r14, rbx
mov r15d, ebx
mov rsi, rbp
nop word [rax + rax]
movsx eax, byte [r14 + r13]
cmp al, 0x3d
jne 0x1400010ed
mov eax, ebx
jmp 0x140001100
mov edx, eax
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_strchr]
test rax, rax
je 0x140001138
sub eax, r12d
shl edi, 6
inc r15d
or edi, eax
cmp r15d, 4
jne 0x14000112a
mov eax, edi
mov r15d, ebx
shr eax, 0x10
mov byte [rsi], al
mov eax, edi
shr eax, 8
mov byte [rsi + 1], al
mov byte [rsi + 2], dil
add rsi, 3
mov edi, ebx
inc r14
cmp r14, 0x4ac
jb 0x1400010e0
jmp 0x140001144
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbp, rbx
mov r14, qword [rsp + 0xb0]
mov r13, qword [rsp + 0xa8]
mov r12, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x70]
movdqa xmm0, xmmword [0x1400027c0]
lea rcx, [rsp + 0x38]
mov r9d, 0x18
mov dword [rsp + 0x30], 0x380
xor r8d, r8d
mov dword [rsp + 0x20], 0xf0000000
xor edx, edx
movdqu xmmword [rsp + 0x50], xmm0
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x14000124f
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0x800c
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x14000124f
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
xor r9d, r9d
lea r8d, [r9 + 0x10]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x14000124f
mov r8, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
xor r9d, r9d
mov edx, 0x6610
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
test eax, eax
je 0x14000124f
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbp
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
je 0x14000124f
mov rcx, qword [rsp + 0x38]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov rdi, rbx
lea rsi, str.0x_02x_
nop dword [rax]
movzx edx, byte [rdi + rbp]
lea rcx, str.0x_02x
cmp ebx, 0x37f
cmovne rcx, rsi
call fcn.140001010
inc ebx
inc rdi
cmp rdi, 0x380
jl 0x140001260
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400012b0
add rsp, 0x78
pop rdi
pop rsi
pop rbp
pop rbx
ret